*.staging.checkout.ea.com

- Electronic Arts, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0f:4c:47:29:e5:0d:aa:cf:1d:c9:99:cc:f5:18:01:7b was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Electronic Arts, Inc.

Organization: Electronic Arts, Inc.
State / Province: CALIFORNIA
Locality: Redwood City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:4c:47:29:e5:0d:aa:cf:1d:c9:99:cc:f5:18:01:7b
Serial Number (int): 20334477868347497254430903033161843067
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 47:40:8f:2e:c8:b1:01:50:a2:9d:7e:9e:06:f9:15:f4:2f:a4:14:23
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 10:0d:e1:f1:e8:9b:b3:16:53:e9:66:59:b4:83:53:57:ed:e5:65:e7
Fingerprint (sha256): 0a:c5:93:48:54:b2:a6:85:a8:0e:50:bd:a5:b7:30:0b:e7:70:b2:50:a7:2a:69:3a:bf:e9:a8:b7:56:63:c5:61

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl

Check the revocation status for certificate *.staging.checkout.ea.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.staging.checkout.ea.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.staging.checkout.ea.com
checkout.staging.origin.com

Other certificates including the domain name ea.com

(limited to 100 certificates)
stage.stargate.ea.com
ava.ea.com
secure07.stage.lithium.com
ups-dev.darkside.ea.com
firebaseapp.com
social.integration.cimessage.ea.com
testrail02-dev.rws.ad.ea.com
firebaseapp.com
content-test2.ts4.eu.ea.com
studio.japan.ea.com
firebaseapp.com
istoreprod2.ea.com
uat.alert-manager.ea.com
aat.fifa-wwe.ea.com
fs.s1.press1.fwm.ea.com
eac-fisheye.eac.ad.ea.com
o.ssl.fastly.net
firebaseapp.com
o.ssl.fastly.net
lt-sov.ceit.ea.com
sha1.admin.eadp.catalog.ea.com
proxyclick.ea.com
erpebsdev.ea.com
ca1-edge.ea.com
sbo-stage.ea.com
ccs.integration.gameservices.ea.com
www.ea.com
eac-scoop-ufcfb-stage.eac.ad.ea.com
signin.ea.com
syseng-prd-chef01.bio-dub.ea.com
extapps.ea.com
pas.gos.ea.com
www.origin.com
firebaseapp.com
accounts2s.internal.ea.com
www.henrymoulton.com
clouddw.ccm.ea.com
ts3.id1.nucleus.ea.com
services.ea.com
firebaseapp.com
secure06.lithium.com
swtor.staging.checkout.ea.com
int.apis.controltower.ea.com
swarm-whiteshark.dice.ad.ea.com
pas.external.easfc.ea.com
xds-connectts.ea.com
walams.tools.lt.gos.ea.com
accounts.lt.ea.com
utas.stage.s1.ea.com
*.online.ea.com
tos2.integration.ea.com
utas.external.s2.fut.ea.com
balrog-horde-broker-dev1.ea.com
utas.gt.mobile.fut.ea.com
mkacct.id1.nucleus.integration.ea.com
shadowsofthedamned.ea.com
stargate.ea.com
fecs.ea.com
*.int.marketplace.ea.com
prometheus-node-exporter.prod.shield.madden.sdo.ddns.ea.com
gateway.int.ea.com
rest-test1.ts4.eu.ea.com
press.ea.com
signin.ea.com
*.apex.prod.marketplace.ea.com
fb-docker-registry.dice.ad.ea.com
*.ea.com
utas.fos5.fut.ea.com
login.ea.com
telegraf.ccm.ea.com
o.ea.com
eav1045519.eac.ad.ea.com
client.sovprimeaws.itcloud.ea.com
gosredirector.qa.ea.com
mpki-test.ea.com
firebaseapp.com
firebaseapp.com
Pexipconfvmspool.video.ea.com
firebaseapp.com
firebaseapp.com
easo.novafusion.integration.ea.com
ava.ea.com
*.dice.ad.ea.com
yoda.ea.com
utas.eacert3.fut.ea.com
nucleus-pulse.ea.com
leapfrog-ssl-10.gcs-web.com
pctrial.burnoutweb.ea.com
proxy.novafusion.ea.com
fs.s2.lt.fwm.ea.com
techops0030.eqx-ams.ea.com
*.stage.us-east-1.marketplace.ea.com
friends.gs.ea.com
grafana.gs.ea.com
statics.checkout.staging.ea.com
firebaseapp.com
events.ea.com
utas.external.dev.s4.ea.com
chat.dm.origin.com
frostbite.qi.ea.com

Certificate

The complete raw certificate details for *.staging.checkout.ea.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPrXbW8j/kWu4qc2nR/Y
cB1bFoONbNqAhnNJsqz6FMPcy/VwPmm4ID950mcIFpMJJig6qr46AonEkPF8p54l
Zz+v1QG2TqxSp6N2c9FiWo2fR7ivNyTCZab5wVGsC/ofx0iaqf+2uHEzupObZlJP
LgDMvOBWiFBpjxMulxQl1rtyVmg1ixJODZyTODLpFGO7csfsf6LspLaNE+d/LHo4
KVuwB2QppsVIbfHqQPrBgoeYWU/kfw9h833JGQ96S5oZHTx+J0Ik1J/FokCHTX73
TZ7/bpiNhtZEj47tYouqqqlXvrqmNqk1j8DhIcpZHAKafZECbZtL5BbSo1qFP9Wr
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20334477868347497254430903033161843067
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CALIFORNIA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redwood City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Electronic Arts, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.staging.checkout.ea.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25371355553718661328636755280763394023201586208841610318362285919602570655823867896511576029909744401046600055750784793271112689442122380030580003362825704219449395926322001147015189340164666343457958627957568715750632070076418130072035799930642947481768876844219139923204513317096162302738355191747116225353684894631447136681505992830568958428957176865717429471357757763343932571298211445255366372311399796927063937408785737526122250141463841550247662269235220413598673389419917832380335674228372425112812218569556583580711858813178827885264787185078272663547542281007097649664082624514609201375867375355610608806729
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							47408f2ec8b10150a29d7e9e06f915f42fa41423
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.checkout.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.staging.origin.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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