www.origin.com

- Electronic Arts, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 05:2a:5d:8b:4b:46:46:91:50:db:6b:c8:be:a4:86:33 was issued on by DigiCert Inc.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Electronic Arts, Inc.

Organization: Electronic Arts, Inc.
State / Province: California
Locality: Redwood City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:2a:5d:8b:4b:46:46:91:50:db:6b:c8:be:a4:86:33
Serial Number (int): 6866113747087105003241633556715570739
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: c8:da:19:4a:a1:80:48:92:ed:41:25:44:de:e9:ef:30:82:e1:94:44
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 0b:6f:db:81:25:5e:25:d5:30:ad:16:65:7a:85:96:68:fa:de:d1:62
Fingerprint (sha256): 25:8a:1d:7d:db:bf:98:b8:cf:1a:a9:68:35:29:4f:f0:a1:be:f5:65:b2:bb:cd:49:81:8d:b1:9c:5a:42:d2:8f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl

Check the revocation status for certificate www.origin.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.origin.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.origin.com
*.ak.popcap.com
*.alpha.pogo.com
*.anthemgame.com
*.anthemthegame.com
*.awayoutgame.com
*.battlefieldwebcore.spark.ea.com
*.battlefront2.com
*.battlefrontii.com
*.bejblitz.com
*.careers.ea.com
*.cert.content.easports.com
*.clubpogo.com
*.commandandconquer.com
*.content.easports.com
*.dragonage.com
*.dragonage.spark.ea.com
*.ea.com
*.easports.com
*.ecs.popcap.com
*.ember.ea.com
*.firemonkeys.com.au
*.jobs.ea.com
*.labs.popcap.com
*.leap.ea.com
*.maddenseason.info
*.maddenseason.net
*.maddenseason.org
*.masseffect.com
*.pogo.com
*.pogobeta.com
*.pogodev.pogo.com
*.pogolt64.pogo.com
*.pogospike.com
*.popcap.com
*.pulse.ea.com
*.pvzgardenwarfare.com
*.pvzheroes.com
*.spark.ea.com
*.spearhead.kr
*.stagea.content.easports.com
*.stagea.easports.com
*.stageb.content.easports.com
*.stageb.easports.com
*.starwars.ea.com
*.starwarsbattlefront.com
*.starwarsbattlefront2.com
*.test.content.easports.com
*.thesims.spark.ea.com
*.www.ea.com
anthemgame.com
anthemthegame.com
awayoutgame.com
battlefront2.com
battlefrontii.com
bejeweledstars.com
bejewled-stars.com
chillingo.com
commandandconquer.com
conquerwithcharacter.com
crysis.jp
dawngate.com
dragonage.com
ea.com
eacashcard.com
easports.com
easports.jp
electronicarts.com
electronicarts.fr
futpromos.com
hutpromos.com
maddenchampionship.com
maddenseason.info
maddenseason.net
maddenseason.org
masseffect.com
origin.com
playapex.com
pogo.com
pogobeta.com
popcap.com
projectapex.com
pvzheroes.com
spearhead.kr
starwarsbattlefront.com
starwarsbattlefront2.com
visceralgames.com
www.bejeweledstars.com
www.bejewled-stars.com
www.chillingo.com
www.conquerwithcharacter.com
www.crysis.jp
www.dawngate.com
www.eacashcard.com
www.electronicarts.com
www.electronicarts.fr
www.maddenchampionship.com
www.playapex.com
www.projectapex.com
www.visceralgames.com

Other certificates including the domain name origin.com

(limited to 100 certificates)
preprod.chef.x.origin.com
originslashstore.cms.origin.com
fc.qa.dirtybits.dm.origin.com
integration.m.friends.dm.origin.com
lt.oms.origin.com
www.origin.com
voiceregister.dm.origin.com
integration.dirtybits.api.origin.com
storesource.cms.origin.com
dev.dirtybits.dm.origin.com
ecommerce2.dm.origin.com
m.avatar.dm.origin.com
atom.dm.origin.com
fc.qa.avatar.dm.origin.com
stable.api.oms.origin.com
fc.qa.ecommerce.dm.origin.com
dcmt-origin-auth.dm.origin.com
preorder.origin.com
chat.dm.origin.com
fc.qa.er.dm.origin.com
x.voiceregister.dm.origin.com
eradmin.dm.origin.com
friends.dm.origin.com
er.dm.origin.com
preview.assets.cms.origin.com
fc.qa.avatar.dm.origin.com
qa-main.chat.dm.origin.com
*.free.origin.com
dev.xray.x.origin.com
avatar.dm.origin.com
assets.dm.origin.com
integration.m.friends.dm.origin.com
integration.sims4m.avatar.dm.origin.com
sb1.www.x.origin.com
fc.qa.preview.cms.origin.com
www.origin.com
config.x.origin.com
stage.ecommerce2.dm.origin.com
search.dm.origin.com
*.origin.com
*.origin.com
fc.qa.review.cms.origin.com
checkout.alpha.origin.com
m.friends.dm.origin.com
www.origin.com
preorder.origin.com
*.staging.checkout.ea.com
www.origin.com
*.social.ea.com
loginregistration.dm.origin.com
fc.qa.er.dm.origin.com
avatar.dm.origin.com
account.preprod.origin.com
www.origin.com
promomanager.dm.origin.com
qa.dirtybits.api.origin.com
integration.eradmin.dm.origin.com
originslashstore.cms.origin.com
upgrade.dm.origin.com
integration.avatar.dm.origin.com
fc.qa.approve.assets.cms.origin.com
support.ea.com
upgrade.dm.origin.com
integration.bioware.web.dm.origin.com
integrationx.voiceregister.dm.origin.com
xray.x.origin.com
integration.m.avatar.dm.origin.com
er.dm.origin.com
lvlt.store.thesims3.com
qa.review.cms.x.origin.com
integration.atom.dm.origin.com
qa.x.origin.com
integration.web.dm.origin.com
bioware.web.dm.origin.com
cloudsync.dm.origin.com
m.help.ea.com
www.origin.com
www.dm.origin.com
fc.qa.www.assets.cms.origin.com
*.free.origin.com
fc.qa.avatar.dm.origin.com
fc.qa.dirtybits.dm.origin.com
friends.gs.ea.com
prod.chef.x.origin.com
www.origin.com
integration.cloudsync.dm.origin.com
checkout.preprod.origin.com
eradmin.dm.origin.com
*.free.origin.com
account.origin.com
sandbox.account.origin.com
www.origin.com
qa.dirtybits.dm.origin.com
fc.qa.chat.dm.origin.com
integration.m.friends.dm.origin.com
account.preprod.origin.com
prometheus.x.origin.com
www.origin.com
account.origin.com
account.preprod.origin.com

Certificate

The complete raw certificate details for www.origin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTzCGT/mCSW+LAC6PvZf
34BgzcHMUbZi40/+dtpTb9a7PCXot35I1kgGDFhwxJ2GU3p/t6688loHfBmvmmrr
VER5Q6N+I32zlK9kiw+n8N6wXNW2Cg289ceojG3C9KbaMJZYIE+EV1EbH+t2I5NK
VJZv3nN6qEv5D2s/Op5in2IFqNZjl4BVBlgyFjBuH7hlRfMq4mI5CMPpnE7l8kDU
g0Cu1OXlaeQfVQ5UNUP/f04Y1nPtNgdCWW/UvZmD35CRWxCDDlp7fTuwu/FwscHf
ijqEh+OmC9DaRaZAjIN0/pZmD2khLT+gmeBRQdAGemsDGyAZdjDKuBRE2aIaWwl/
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6866113747087105003241633556715570739
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redwood City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Electronic Arts, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.origin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19849374863656887512457605562589974103097573061219022390106291307419491799476138828107964836677021352017064019329890076219936680651449335733820027501708329188369219130517039595827819831783856682529928511588993167825820149682020747961734115659812170694468551954269097384766256728586224986534059057096115352496433091450389747519699200798847539332919843207585240536761073975861419658487779009577666348360696897250910974906696480670018948600908571820042406745298642224323655453891880395942670220582839016621982479579024872703147823185392850580101238967701548245808349075444117777148084891435952745851686426058332163374889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c8da194aa1804892ed412544dee9ef3082e19444
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1921 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ak.popcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alpha.pogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anthemgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anthemthegame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.awayoutgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.battlefieldwebcore.spark.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.battlefront2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.battlefrontii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bejblitz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.careers.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cert.content.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubpogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commandandconquer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.content.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dragonage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dragonage.spark.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecs.popcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ember.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firemonkeys.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jobs.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.labs.popcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leap.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maddenseason.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maddenseason.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maddenseason.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masseffect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pogobeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pogodev.pogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pogolt64.pogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pogospike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.popcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pulse.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pvzgardenwarfare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pvzheroes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spark.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spearhead.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stagea.content.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stagea.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stageb.content.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stageb.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.starwars.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.starwarsbattlefront.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.starwarsbattlefront2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.content.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesims.spark.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anthemgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anthemthegame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awayoutgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'battlefront2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'battlefrontii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bejeweledstars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bejewled-stars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chillingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commandandconquer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conquerwithcharacter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crysis.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dawngate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dragonage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eacashcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easports.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electronicarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electronicarts.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futpromos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hutpromos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maddenchampionship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maddenseason.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maddenseason.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maddenseason.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masseffect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playapex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pogobeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projectapex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pvzheroes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spearhead.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starwarsbattlefront.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starwarsbattlefront2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visceralgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bejeweledstars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bejewled-stars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chillingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conquerwithcharacter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crysis.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dawngate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eacashcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.electronicarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.electronicarts.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maddenchampionship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playapex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.projectapex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visceralgames.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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