www.origin.com

- Electronic Arts, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0d:f7:20:88:75:59:0d:e0:c4:cb:12:29:7a:98:06:68 was issued on by DigiCert Inc.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Electronic Arts, Inc.

Organization: Electronic Arts, Inc.
Organization unit: EA Online/Pogo.com
State / Province: California
Locality: Redwood City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:f7:20:88:75:59:0d:e0:c4:cb:12:29:7a:98:06:68
Serial Number (int): 18563121117716833649458476085721695848
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 59:d0:f2:7c:86:6c:26:c9:69:56:15:a3:8b:32:99:61:56:18:2a:be
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 99:7d:81:2e:cb:fc:57:63:dd:b0:d6:6e:0f:7f:e9:c1:47:97:a7:5d
Fingerprint (sha256): 18:35:b9:bd:d0:cf:d9:1e:6b:60:1b:ce:94:15:39:bb:e9:21:ee:15:e9:d5:67:04:db:ef:d2:e2:49:b4:2f:66

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.origin.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.origin.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.visceralgames.com
www.projectapex.com
www.playapex.com
www.origin.com
www.maddenchampionship.com
www.electronicarts.fr
www.electronicarts.com
www.eacashcard.com
www.dawngate.com
www.crysis.jp
www.conquerwithcharacter.com
www.chillingo.com
www.bejewled-stars.com
www.bejeweledstars.com
visceralgames.com
starwarsbattlefront2.com
starwarsbattlefront.com
spearhead.kr
pvzheroes.com
popcap.com
origin.com
masseffect.com
maddenseason.org
maddenseason.net
maddenseason.info
maddenchampionship.com
hutpromos.com
futpromos.com
electronicarts.fr
electronicarts.com
easports.jp
easports.com
eacashcard.com
ea.com
dragonage.com
dawngate.com
crysis.jp
commandandconquer.com
chillingo.com
bejewled-stars.com
bejeweledstars.com
battlefrontii.com
battlefront2.com
awayoutgame.com
anthemthegame.com
anthemgame.com
*.www.ea.com
*.thesims.spark.ea.com
*.test.content.easports.com
*.starwarsbattlefront2.com
*.starwarsbattlefront.com
*.starwars.ea.com
*.stageb.easports.com
*.stageb.content.easports.com
*.stagea.easports.com
*.stagea.content.easports.com
*.spearhead.kr
*.spark.ea.com
*.pvzheroes.com
*.pvzgardenwarfare.com
*.pulse.ea.com
*.projectapex.com
*.prealpha.pogo.com
*.popcap.com
*.pogospike.com
*.pogolt64.pogo.com
*.pogodev2.pogo.com
*.pogodev.pogo.com
*.pogobeta.com
*.pogo.com
*.playapex.com
*.masseffect.com
*.maddenseason.org
*.maddenseason.net
*.maddenseason.info
*.leap.ea.com
*.labs.popcap.com
*.jobs.ea.com
*.firemonkeys.com.au
*.ember.ea.com
*.ecs.popcap.com
*.easports.com
*.ea.com
*.dragonage.spark.ea.com
*.dragonage.com
*.dev.pogo.com
*.content.easports.com
*.conquerwithcharacter.com
*.commandandconquer.com
*.cert.content.easports.com
*.careers.ea.com
*.bejblitz.com
*.battlefrontii.com
*.battlefront2.com
*.battlefieldwebcore.spark.ea.com
*.awayoutgame.com
*.anthemthegame.com
*.anthemgame.com
*.alpha.pogo.com
*.ak.popcap.com

Other certificates including the domain name origin.com

(limited to 100 certificates)
preprod.chef.x.origin.com
originslashstore.cms.origin.com
fc.qa.dirtybits.dm.origin.com
integration.m.friends.dm.origin.com
lt.oms.origin.com
www.origin.com
voiceregister.dm.origin.com
integration.dirtybits.api.origin.com
storesource.cms.origin.com
dev.dirtybits.dm.origin.com
ecommerce2.dm.origin.com
atom.dm.origin.com
fc.qa.avatar.dm.origin.com
stable.api.oms.origin.com
fc.qa.ecommerce.dm.origin.com
dcmt-origin-auth.dm.origin.com
preorder.origin.com
chat.dm.origin.com
fc.qa.er.dm.origin.com
x.voiceregister.dm.origin.com
eradmin.dm.origin.com
friends.dm.origin.com
er.dm.origin.com
preview.assets.cms.origin.com
fc.qa.avatar.dm.origin.com
qa-main.chat.dm.origin.com
*.free.origin.com
dev.xray.x.origin.com
avatar.dm.origin.com
assets.dm.origin.com
integration.m.friends.dm.origin.com
integration.sims4m.avatar.dm.origin.com
sb1.www.x.origin.com
fc.qa.preview.cms.origin.com
www.origin.com
config.x.origin.com
stage.ecommerce2.dm.origin.com
search.dm.origin.com
*.origin.com
*.origin.com
fc.qa.review.cms.origin.com
checkout.alpha.origin.com
m.friends.dm.origin.com
www.origin.com
preorder.origin.com
*.staging.checkout.ea.com
www.origin.com
*.social.ea.com
loginregistration.dm.origin.com
fc.qa.er.dm.origin.com
avatar.dm.origin.com
account.preprod.origin.com
www.origin.com
promomanager.dm.origin.com
qa.dirtybits.api.origin.com
integration.eradmin.dm.origin.com
originslashstore.cms.origin.com
upgrade.dm.origin.com
integration.avatar.dm.origin.com
fc.qa.approve.assets.cms.origin.com
support.ea.com
upgrade.dm.origin.com
integration.bioware.web.dm.origin.com
integrationx.voiceregister.dm.origin.com
xray.x.origin.com
integration.m.avatar.dm.origin.com
er.dm.origin.com
lvlt.store.thesims3.com
qa.review.cms.x.origin.com
integration.atom.dm.origin.com
qa.x.origin.com
integration.web.dm.origin.com
bioware.web.dm.origin.com
cloudsync.dm.origin.com
m.help.ea.com
www.origin.com
www.dm.origin.com
fc.qa.www.assets.cms.origin.com
*.free.origin.com
fc.qa.avatar.dm.origin.com
fc.qa.dirtybits.dm.origin.com
friends.gs.ea.com
prod.chef.x.origin.com
www.origin.com
integration.cloudsync.dm.origin.com
checkout.preprod.origin.com
eradmin.dm.origin.com
*.free.origin.com
account.origin.com
sandbox.account.origin.com
www.origin.com
qa.dirtybits.dm.origin.com
fc.qa.chat.dm.origin.com
integration.m.friends.dm.origin.com
account.preprod.origin.com
prometheus.x.origin.com
www.origin.com
account.origin.com
account.preprod.origin.com
promo.store.origin.com

Certificate

The complete raw certificate details for www.origin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DWQDfVSKbIBKeuJg95A
uvS+uRR/HvY8JAC8EUWHPylUuuMMg2MNe4KeEAqDXo2gAoVQdO+XGtABaGhM/nAx
fHcN8TYSvvtFsNRR9tfqwn+TjaslBsgsnYme2Hj8QzrbYocyk0C8ZDcXVQ7SqqYC
frzYSfbiHNThdfYxqDrZ2n4RCkkwF4nz7HhecSpwbztxuhFeippE5jmzMr5wpG5Q
DabWofVsX38ea6To/f0bt35+IM4FlRZi50Y8tBF++1f3D9pWRqRyQQeWJLPFl5D3
5bOq52AbX4RdTTWUt1O757tjNacV8ohpp8IpBsBSCIJcqKAE65k+WCwgSgBk+158
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18563121117716833649458476085721695848
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redwood City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Electronic Arts, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EA Online/Pogo.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.origin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29313699510316235189298119072326796462649067401255643912652856064312544740238469465219748936470330972591122102320795345694207766291830726431921904280350768725713787718886704057563751847096890362182458925438300792711855182416041769374119052687606679272400298451470046067726380269334305781511551157529984013184745535711139341433445890958712813227031827078715983676020448716709438032239621598842057643545274055542231861059085678821231654292888833924187232021110563576902647682196921909204090565739852770140446324215606831783455537268829896968717601265093757154541654329770342477484899911997702009342728200747430495288529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59d0f27c866c26c9695615a38b32996156182abe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1945 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visceralgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.projectapex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playapex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maddenchampionship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.electronicarts.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.electronicarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eacashcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dawngate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crysis.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conquerwithcharacter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chillingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bejewled-stars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bejeweledstars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visceralgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starwarsbattlefront2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starwarsbattlefront.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spearhead.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pvzheroes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masseffect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maddenseason.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maddenseason.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maddenseason.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maddenchampionship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hutpromos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futpromos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electronicarts.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electronicarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easports.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eacashcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dragonage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dawngate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crysis.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commandandconquer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chillingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bejewled-stars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bejeweledstars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'battlefrontii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'battlefront2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awayoutgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anthemthegame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anthemgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesims.spark.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.content.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.starwarsbattlefront2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.starwarsbattlefront.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.starwars.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stageb.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stageb.content.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stagea.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stagea.content.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spearhead.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spark.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pvzheroes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pvzgardenwarfare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pulse.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.projectapex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prealpha.pogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.popcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pogospike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pogolt64.pogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pogodev2.pogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pogodev.pogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pogobeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.playapex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masseffect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maddenseason.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maddenseason.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maddenseason.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leap.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.labs.popcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jobs.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firemonkeys.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ember.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecs.popcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dragonage.spark.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dragonage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.pogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.content.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conquerwithcharacter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commandandconquer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cert.content.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.careers.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bejblitz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.battlefrontii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.battlefront2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.battlefieldwebcore.spark.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.awayoutgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anthemthegame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anthemgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alpha.pogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ak.popcap.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000168a700773d0000040300473045022100a781b5af15b3b415a3882ca773937196eeec63188837bceaae6971a7a4cfa09202207d0a9ae4c0a468b619618dd26f8a96f1c827ed43fb6fbe40497ce140da32a9750076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000168a700781c0000040300473045022047e9714bb906283e6f12949c284e6617d6040f0e3e77b0da7f611745fa85d20e022100d29d0a0fdb41c17808780db77d26a22be6ba11c2d89d52856d2ee123d862c888
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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