remotes.nfl.net

- NFL Films -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 55:31:4a:b7:02:25:8b:30:89:8a:67:69:80:00:0b:e5 was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

NFL Films

Organization: NFL Films
State / Province: New Jersey
Locality: Mt Laurel
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 55:31:4a:b7:02:25:8b:30:89:8a:67:69:80:00:0b:e5
Serial Number (int): 113240317585514823663870859627554933733
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): c3:4a:9b:ef:39:9f:6c:53:2c:8e:fc:ac:c2:a6:a8:46:81:5c:e9:2a
Fingerprint (sha256): 0e:23:d4:74:1b:33:dc:8b:21:51:59:64:06:17:76:1e:36:98:9d:15:d5:7c:9c:5b:9f:6e:32:c2:22:39:22:08

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate remotes.nfl.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for remotes.nfl.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

remotes.nfl.net

Other certificates including the domain name nfl.net

(limited to 100 certificates)
remotes.nfl.net
itsupport.adhocteam.us
mdmadmin.nfl.net
NY-ISE-PDP-1.nfl.net
wifi.bears.nfl.net
helpdesk.ytl.com
helpdesk.ytl.com
helpdesk.aaanm.org
servicedesk.smileservicedesk.co.uk
efc.nfl.net
*.vikings.nfl.net
helpdesk.ytl.com
helpdesk.ytl.com
dag.buf.nfl.net
ithelpdesk.splashbi.com
ithelpdesk.splashbi.com
safsv-telexpe.broncos.nfl.net
helpdesk.pcrm.org
*.bears.nfl.net
helpdesk.ytl.com
mdm.NFL.net
mdm.NFL.net
helpdesk.ytl.com
remotes.nfl.net
nyoktasync01.us.nfl.net
portalitsuporte.griner.co.com
helpdesk.ytl.com
mdmadmin.NFL.net
vikings.nfl.net
itservicedesk.inspireer.com
NFL-EE01.nfl.net
nflrms.nfl.net
nflrms.nfl.net
helpdesk.ytl.com
insight.nfl.net
titansvpn.nfl.net
outlook.nfl.net
jaxvx2010.jax.nfl.net
jagmail.mail.jaguars.com
mediainsights.nfl.net
helpdesk.ytl.com
portalitsuporte.griner.co.com
tickets.nfl.net
LyncWebEx.nfl.net
billsasa1.buf.nfl.net
portalitsuporte.griner.co.com
NFL-VCS-Expressway.nfl.net
helpdesk.ytl.com
laoktasync01.us.nfl.net
helpdesk.ytl.com
wifi.bears.nfl.net
itsupport.adhocteam.us
helpdesk.ytl.com
mysites.buf.nfl.net
outlook.nfl.net
portalitsuporte.griner.co.com
owa.nfl.net
vikings.nfl.net
helpdesk.ytl.com
remotes.nfl.net
owa.lon.nfl.net
support.opiant.com
helpdesk.ytl.com
vpn.buf.nfl.net
outlook.nfl.net
wifi.bears.nfl.net
mdmadmin.nfl.net
im.nfl.net
nfladfs.nfl.net
helpdesk.ytl.com
cyber-awareness.nfl.net
nfladfs.nfl.net
im.nfl.net
vpn.buf.nfl.net
helpdesk.ytl.com
outlook.nfl.net
pltitans.nfl.net
helpdesk.ytl.com
helpdesk.ytl.com
helpdesk.pcrm.org
*.nfl.net
huddle.buf.nfl.net
itsupport.adhocteam.us
helpdesk.ytl.com
NFL-EE02.nfl.net
helpdesk.ravens.nfl.net
itservicedesk.inspireer.com
helpdesk.ytl.com
*.vikings.nfl.net
helpdesk.ytl.com
itsupport.qbank.com.au
insight2.nfl.net
helpdesk.ytl.com
nflflex.nfl.net
*.nfl.net
insight.nfl.net
remotes.nfl.net
ravensaw.nfl.net
*.nfl.net
clearpass.vikings.nfl.net

Certificate

The complete raw certificate details for remotes.nfl.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBgjnbRCYB5YryOVS1j2
fwF86ohw7p2tFultwJVJO3pTb8HBHkJH5PyMGEvcxlubHbu7kxYcjoqDoqqP0rqm
M/AeQ54xCHnwxwUmwtTRPSrznwuFUZQS8PnE1zw7J1apFtVDUn7j7ROoypGrpVUE
UET9BviAiTxKa1nvoO++13skDYAlw3+2H8e/zBU/xCMlFB9TNfHHsvNnUE7d/Huy
xgVlDngvU8klcMFo/jxmnmq1BNjnBQ9/uxcrMVkkXSgjKYOBZ/2PS9kH5MgAfVKD
/94G5JnRo6vlBx1qRYSozzbHCUtI765dNFuyFWpiUFEY/kGO0ik7G7e6/OH32xLY
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 113240317585514823663870859627554933733
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mt Laurel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NFL Films'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'remotes.nfl.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19705079020951392000653113213448268049988422804466771324159743641077702585951086972020441450951695288190084429347655868700289166154699085099851956745960348056683819978206406397016325712441830589057383565791557266573126527476970687707980055400042123813828853384852402436471419393866347034914112134182384131885717361806024969157318222262517696569118135785846842002032525853199175814374623786989045540592574858911790626380255096621375989085371413134506028252003134258058984503483427068012200816115013233359716468686925682721684145901870891346170270193545712886910915200626904906945048702621002030701700717377923224623121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remotes.nfl.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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