editions.espn.com

- The Walt Disney Company -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 6c:20:1c:62:ac:09:c2:16:66:4c:88:62:ea:41:68:85 was issued on by Entrust, Inc..

With 101 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

The Walt Disney Company

Organization: The Walt Disney Company
State / Province: California
Locality: Burbank
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 6c:20:1c:62:ac:09:c2:16:66:4c:88:62:ea:41:68:85
Serial Number (int): 143723352769316075976346439547688675461
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 4c:f2:b5:2a:17:9a:62:ea:17:d1:2b:5c:d5:8d:c6:3f:e8:9e:40:25
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 07:76:4b:8e:1c:ba:aa:72:df:81:1d:6f:57:02:89:5a:8a:3a:d3:4e
Fingerprint (sha256): 0d:f4:74:41:9e:97:0f:80:b2:cc:96:df:4a:71:30:8c:ce:4a:08:84:d5:ef:f6:13:8f:1c:d0:e7:f1:91:76:c1

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate editions.espn.com

101

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for editions.espn.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

editions.espn.com
*.api.espn.cl
*.api.espn.co.cr
*.api.espn.co.uk
*.api.espn.com.ar
*.api.espn.com.au
*.api.espn.com.br
*.api.espn.com.co
*.api.espn.com.do
*.api.espn.com.ec
*.api.espn.com.gt
*.api.espn.com.mx
*.api.espn.com.pa
*.api.espn.com.pe
*.api.espn.com.sg
*.api.espn.com.uy
*.api.espn.com.ve
*.api.espn.es
*.api.espn.in
*.api.espn.nl
*.espn.cl
*.espn.co.cr
*.espn.co.uk
*.espn.com
*.espn.com.ar
*.espn.com.au
*.espn.com.br
*.espn.com.co
*.espn.com.do
*.espn.com.ec
*.espn.com.gt
*.espn.com.mx
*.espn.com.pa
*.espn.com.pe
*.espn.com.sg
*.espn.com.uy
*.espn.com.ve
*.espn.es
*.espn.go.com
*.espn.in
*.espn.nl
*.espn.ph
*.fan.api.espn.co.cr
*.fan.api.espn.com.do
*.fan.api.espn.com.ec
*.fan.api.espn.com.gt
*.fan.api.espn.com.pa
*.fan.api.espn.com.pe
*.fan.api.espn.com.sg
*.fan.api.espn.com.uy
*.fan.api.espn.com.ve
*.fan.api.espn.es
*.fan.api.espn.nl
espn.cl
espn.co.cr
espn.co.uk
espn.com
espn.com.ar
espn.com.au
espn.com.br
espn.com.co
espn.com.do
espn.com.ec
espn.com.gt
espn.com.mx
espn.com.pa
espn.com.pe
espn.com.sg
espn.com.uy
espn.com.ve
espn.es
espn.go.com
espn.in
espn.nl
espn.ph
espncricinfo.com
fan.core.api.espn.cl
fan.core.api.espn.co.cr
fan.core.api.espn.co.uk
fan.core.api.espn.com.ar
fan.core.api.espn.com.au
fan.core.api.espn.com.br
fan.core.api.espn.com.co
fan.core.api.espn.com.do
fan.core.api.espn.com.ec
fan.core.api.espn.com.gt
fan.core.api.espn.com.mx
fan.core.api.espn.com.pa
fan.core.api.espn.com.pe
fan.core.api.espn.com.sg
fan.core.api.espn.com.uy
fan.core.api.espn.com.ve
fan.core.api.espn.es
fan.core.api.espn.in
fan.core.api.espn.nl
fan.core.api.espncricinfo.com
secsports.com
www.espncricinfo.com
www.secsports.com
*.fan.api.espn.ph
fan.core.api.espn.ph

Other certificates including the domain name espn.com

(limited to 100 certificates)
video.disney.com
espn.com
www.aws.espn.com
1927-the-diary-of-myles-thomas.espn.com
insider.espn.com
cert-00003-cdnedge-bluemix.akamaized.net
video.disney.com
UCwebn7ext.disney.com
tredire.perf.go.com
cert-00003-cdnedge-bluemix.akamaized.net
assets.espncdn.com
www.aws.espn.com
support.espn.com
cdn.secure.espn.go.com
cert-00003-cdnedge-bluemix.akamaized.net
cert-00003-cdnedge-bluemix.akamaized.net
www.espnqa.com
site.api.espn.com
fillmore.espn.com
watch.video.api.qa.espn.com
fantasyfc.espn.com
*.media.plus.espn.com
fantasy.espn.com
email.axioshq.espn.com
support.espn.com
*.media.plus.espn.com
espn.com
btlink.web.plus.espn.com
internal.espn.com
media.video-cdn.espn.com
assets.espncdn.com
tredir.espn.com
support.espn.com
affiliates.espn.com
1927-the-diary-of-myles-thomas.espn.com
*.svcs.plus.espn.com
pro.creativearchive.espn.com
affiliates.espn.com
mft.espn.com
beta-shortstop.espn.com
cdn.espnqa.com
iptvhmg026.espn.com
log.go.com
cdn.espnqa.com
www.aws.espn.com
mft.espn.com
editions.espn.com
espnqa.com
assets.espncdn.com
video.disney.com
studioc.espn.com
mobileapp.espn.com
www.espn.com
media.plus.espn.com
affiliates.espn.com
web.plus.espn.com
fantasy.espn.com
go.web.plus.espn.com
cert-00003-cdnedge-bluemix.akamaized.net
UCAEN7.Disney.com
www.espn.com
eventcenter.espn.com
ESPNLMProdCluster01.aws.hosted.espn.com
fantasyfc.espn.com
cdn.secure.espn.go.com
editions.espn.com
dcs7soccernet.us-west-2.aws.internal.espn.com
cdn.espnqa.com
cert-00003-cdnedge-bluemix.akamaized.net
wirelessreg.espn.com
affiliates.espn.com
video.disney.com
channelfinder.espn.com
cert-00003-cdnedge-bluemix.akamaized.net
dcs7deportes.geo.hosted.espn.com
affiliates.espn.com
email.axioshq.espn.com
go.web.plus.espn.com
dcs7deportes.geo.hosted.espn.com
outlook.espn.com
fan.api.espn.com
espn.com
*.media.plus.espn.com
media.video-cdn.espn.com
dmzexpe29d01v.espn.com
fan.core.api.espn.com
media.video-cdn.espn.com
assets.espncdn.com
tredir.espn.com
espn.com
insider.espn.com
log.go.com
sigmgr03.espn.com
*.cms.internal.espn.com
timekeeper.espn.com
aws.dp.hosted.espn.com
watch.video.api.qa.espn.com
espn.com
mft.espn.com
affiliate.disney.espn.com

Certificate

The complete raw certificate details for editions.espn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSfqI/MlKIeryKDXysxo
2Rcw4s3kEAxDHFQtUDyWbk7lcNiTfoMfARgv0WwADAA5AP/TbZHy59WMFUmSLVoq
YiSgMkrRyIrH41qpCGtB7B3NGfnwxtMpt8Nryf3xagcilVko+MBXq5OB25isE5pm
Xu14i/I+NWqNb6m9MoYpw2GBCLjfcHbZig0kUF9nrQ/8Q/QX0VcA+DCovhbMDCtQ
BmxmfXIUfWtt6wu62wymHCtudP7YN30BkEq06E4T8yT+ALaFnvYozQwrnUsTv1h4
IGanlopbMOkP03sIKbK/YjEJvy8ZHA/F3Jl4Zl3bHcs6dpuybRpdChoLDG3+Ozby
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 143723352769316075976346439547688675461
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-03 12:25:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-03 12:25:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Burbank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Walt Disney Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'editions.espn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22363862607282830988462408224018088034441788322953612280523351518602036569236424374915507563957286463042761111823403830936027718044789865422247399396419126202078905931962454141522030259405986367613050423917481728118659891329805649885945569324616158238607726900628372474811885253775837982543638629352900026100055935266015600186936458046543199691355336525008424822060263112884427190472858603506681111830254900434521204921431105963501504606081028262510935351752919365919569065095291107517584126988407048833526400835538772577448852920428104911008226976126154547191224100412995754044685038637257247588603985748179484602951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4cf2b52a179a62ea17d12b5cd58dc63fe89e4025
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1798 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editions.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.espn.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.espn.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.espn.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.espn.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.espn.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.espn.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.espn.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.espn.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.espn.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.espn.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.espn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espncricinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espncricinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espncricinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.espn.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.ph'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002d5eee1f795be1f3c27e2b148c8793b73f16f0759fb0495dbdcaede30676d21c2f699209d39b41572154a0528ef5299981badd714217adbea1b02f83337765efce145f73d3a5618c4cf891d97e21a7f2c088c3394404f002fda48a714d98785184ffa2b1640e5fbfcd89eb7e5140a13391b45991649a768b3fed9611c3cb2543290cdbb36bbecb43e9fda961a11061f78f2fde812de9653b778a9cdd7f53adaf1f73d9089a4005421c19826b8ef3332e640b98c304b90d5bdcb6cbf1d3519b05a048a9ea53f3fbf6e62e26197033722d8c7240a4aebf91aea9495fca019ad93e8958e185dce331e66932f02ac06db94aba17394cd6b2247f934b26b0b8924f1a