assets.espncdn.com

Issued by R3

About this certificate

This digital certificate with serial number 04:07:2d:86:fc:3d:a0:2f:d2:bf:38:9d:fe:61:a1:ad:ef:27 was issued on by Let's Encrypt.

With 27 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=assets.espncdn.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:07:2d:86:fc:3d:a0:2f:d2:bf:38:9d:fe:61:a1:ad:ef:27
Serial Number (int): 350891636439126634161822492410091202801447
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: eb:da:d5:08:3f:dd:38:89:79:b1:3f:fe:aa:78:ac:6d:b6:96:c7:55
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1a:c8:e6:7e:29:2e:9b:1f:1b:52:24:8f:ef:43:f3:a1:f6:93:2f:6f
Fingerprint (sha256): 1f:e5:8a:a1:0f:fd:be:ff:61:04:24:f5:5f:19:6d:64:4a:8a:3e:a4:08:c5:ec:78:95:6a:b4:08:ae:82:26:4a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate assets.espncdn.com

27

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for assets.espncdn.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-app.espn.com
assets.espncdn.com
cdn.espn.com
cdn.espni.go.com
cdn.secure.espn.go.com
e.espncdn.com
fantasy.espncdn.com
fcast.espncdn.com
fcast.k2.espncdn.com
fcast.n7.espncdn.com
fcast.us-east-1.espncdn.com
fcast.us-west-2.espncdn.com
g.espncdn.com
g.secure.espncdn.com
g1.espncdn.com
g2.espncdn.com
g3.espncdn.com
g4.espncdn.com
i.espncdn.com
i.imgci.com
insights.ibmwatsonfantasyfootball.com
s.espncdn.com
shortstop-prod.espncdn.com
site.api.espn.com
sportscenter.api.espn.com
vads.espncdn.com
watsonfantasyfootball.espn.com

Other certificates including the domain name espncdn.com

(limited to 100 certificates)
espnqa.com
assets.espncdn.com
cdn.secure.espn.go.com
www.espnqa.com
espnqa.com
espnqa.com
assets.espncdn.com
cdn.espnqa.com
cdn.espnqa.com
www.espnqa.com
artwork.espnsb.net
assets.espncdn.com
www.espn.com
espnqa.com
cdn.secure.espn.go.com
cdn.espnqa.com
espnqa.com
espn.com
espnqa.com
assets.espncdn.com
assets.espncdn.com
espnqa.com
www.espnqa.com
cdn.espnqa.com
www.espnsb.com
www.espn.com
espnsb.com
www.espn.com
assets.espncdn.com
assets.espncdn.com
espnqa.com
espnsb.com
assets.espncdn.com
espn.com
cdn.secure.espn.go.com
assets.espncdn.com
a.espncdn.com
assets.espncdn.com
espnsb.com
www.espnqa.com
www.espn.com
cdn.espnqa.com
www.espn.com
www.espnqa.com
espn.com
www.espnsb.com
www.espnqa.com
espn.com
www.espn.com
cdn.secure.espn.go.com
www.espn.com
espnqa.com
cdn.espnqa.com
espnqa.com
www.espnsb.com
assets.espncdn.com
a.espncdn.com
www.espn.com
espnqa.com
www.espnqa.com
assets.espncdn.com
www.espn.com
www.espnqa.com
espnsb.com
espnqa.com
espn.com
www.espnqa.com
assets.espncdn.com
assets.espncdn.com
www.espn.com
abcfeqa.com
artwork.qa.espncdn.com
espnsb.com
cdn.secure.espn.go.com
assets.espncdn.com
assets.espncdn.com
espnqa.com
espnqa.com
cdn.espnqa.com
espnsb.com
media.video-cdn.espn.com
www.espnqa.com
a.espncdn.com
cdn.secure.espn.go.com
assets.espncdn.com
www.espnsb.com
cdn.secure.espn.go.com
media.video-cdn.espn.com
cdn.espnqa.com
cdn.espnqa.com
assets.espncdn.com
cdn.espnqa.com
espn.com
espnqa.com
www.espnsb.com
assets.espncdn.com
www.espn.com
assets.espncdn.com
a.espncdn.com
watch.video.api.qa.espn.com

Certificate

The complete raw certificate details for assets.espncdn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5reJKKxwBdb8PXOE9ur
M+e3m/Lf3pNe0SeB1EJzR5LA/wsYvE0XPld6RLrI2c6QpqRwlmzf2jVa6Odj9G9J
tblP3jCwTtdfysPfyhcJ9wArdrBAg6oyMRyqMr6UzRQwi/vDnlsDLfEO3/cvq59j
yJtJYwLFiapMCVCyztAZtxcP8xPf9dCN1Z/MqM1LckDpGScX+5DWaqWRW1roGOh2
aKF1B4M3P6sNWhHjHgx4/OJxFzxCKgUcm5aTx11WGsExg11aH5+XUn8Y1Z6ayQd1
SjVBJji0QebqA7ZnbiioxuTjle7Cslk8+4tfh0OlN6y/L//AcQREDjIfI+OThybm
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 350891636439126634161822492410091202801447
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-25 15:01:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-23 15:01:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assets.espncdn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26207697260059323605682599712774698643158045604553686621150244287937855583875138339181548610261425437976536565435571601732415516025647518553415745942469174218282085594926875141651867247910917561133064911686950009179600584289904550459250027892475198944259289564560476797491830031647783126508162897876971074502767811142365506373762831239852120550447960312879729024468623026276237501242671201658665681938880348499981357838686648349397421240672334569367820584370941170665709112131065065202030404431580586762786711110876107290179757530305269235755667703286913744989193142220596204855524586183462903941458906591460996867659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ebdad5083fdd388979b13ffeaa78ac6db696c755
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (562 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-app.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.espni.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.secure.espn.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantasy.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcast.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcast.k2.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcast.n7.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcast.us-east-1.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcast.us-west-2.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g.secure.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g1.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g2.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g3.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g4.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.imgci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.ibmwatsonfantasyfootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shortstop-prod.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.api.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportscenter.api.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vads.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watsonfantasyfootball.espn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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