mediainsights.nfl.net

- National Football League -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 01:32:53:5e:53:79:28:e2:e4:0b:58:41:b1:1b:b4:6e was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

National Football League

Organization: National Football League
Organization unit: BI
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:32:53:5e:53:79:28:e2:e4:0b:58:41:b1:1b:b4:6e
Serial Number (int): 1590533751989765603224064274751796334
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 7a:fd:a0:1f:ec:ef:b0:ec:ae:09:28:44:e5:ab:32:71:5e:fd:50:2a
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 89:d7:48:7e:34:be:78:1a:fe:61:8a:4b:3b:a4:1c:41:d3:5c:9c:36
Fingerprint (sha256): 26:df:6a:50:20:27:2e:ba:cd:a0:0e:db:0c:4c:a8:77:c4:52:8f:95:2e:29:ed:94:2e:39:50:da:70:bb:9a:17

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate mediainsights.nfl.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mediainsights.nfl.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mediainsights.nfl.net
www.mediainsights.nfl.net

Other certificates including the domain name nfl.net

(limited to 100 certificates)
remotes.nfl.net
itsupport.adhocteam.us
mdmadmin.nfl.net
NY-ISE-PDP-1.nfl.net
wifi.bears.nfl.net
helpdesk.ytl.com
helpdesk.ytl.com
helpdesk.aaanm.org
servicedesk.smileservicedesk.co.uk
efc.nfl.net
*.vikings.nfl.net
helpdesk.ytl.com
helpdesk.ytl.com
dag.buf.nfl.net
ithelpdesk.splashbi.com
ithelpdesk.splashbi.com
safsv-telexpe.broncos.nfl.net
helpdesk.pcrm.org
*.bears.nfl.net
helpdesk.ytl.com
mdm.NFL.net
mdm.NFL.net
helpdesk.ytl.com
remotes.nfl.net
nyoktasync01.us.nfl.net
portalitsuporte.griner.co.com
helpdesk.ytl.com
mdmadmin.NFL.net
vikings.nfl.net
itservicedesk.inspireer.com
NFL-EE01.nfl.net
nflrms.nfl.net
nflrms.nfl.net
helpdesk.ytl.com
insight.nfl.net
titansvpn.nfl.net
outlook.nfl.net
jaxvx2010.jax.nfl.net
jagmail.mail.jaguars.com
mediainsights.nfl.net
helpdesk.ytl.com
portalitsuporte.griner.co.com
tickets.nfl.net
LyncWebEx.nfl.net
billsasa1.buf.nfl.net
portalitsuporte.griner.co.com
NFL-VCS-Expressway.nfl.net
helpdesk.ytl.com
laoktasync01.us.nfl.net
helpdesk.ytl.com
wifi.bears.nfl.net
itsupport.adhocteam.us
helpdesk.ytl.com
mysites.buf.nfl.net
outlook.nfl.net
portalitsuporte.griner.co.com
owa.nfl.net
vikings.nfl.net
helpdesk.ytl.com
remotes.nfl.net
owa.lon.nfl.net
support.opiant.com
helpdesk.ytl.com
vpn.buf.nfl.net
outlook.nfl.net
wifi.bears.nfl.net
mdmadmin.nfl.net
im.nfl.net
nfladfs.nfl.net
helpdesk.ytl.com
cyber-awareness.nfl.net
nfladfs.nfl.net
im.nfl.net
vpn.buf.nfl.net
helpdesk.ytl.com
outlook.nfl.net
pltitans.nfl.net
helpdesk.ytl.com
helpdesk.ytl.com
helpdesk.pcrm.org
*.nfl.net
huddle.buf.nfl.net
itsupport.adhocteam.us
helpdesk.ytl.com
NFL-EE02.nfl.net
helpdesk.ravens.nfl.net
itservicedesk.inspireer.com
helpdesk.ytl.com
*.vikings.nfl.net
helpdesk.ytl.com
itsupport.qbank.com.au
insight2.nfl.net
helpdesk.ytl.com
nflflex.nfl.net
*.nfl.net
insight.nfl.net
remotes.nfl.net
ravensaw.nfl.net
*.nfl.net
clearpass.vikings.nfl.net

Certificate

The complete raw certificate details for mediainsights.nfl.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1590533751989765603224064274751796334
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Football League'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mediainsights.nfl.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 869354464309977230635099136340573004054716240750813291105154539807615751062812671691516123043058005393446510726751425323841283983187495537126734745669767288753852003182863073751006802661704399930184951117049439847948259705571195322216624012117012634143177606318593698204705551751069517264697262710637542262727563648047785454372589333566806001233872092191691043819230078510402820074504260588077987298980277755598492784968121510894239720850429132715753178693270418483452433570530849046904279769164047946035841855006866666466933656907256449658735855665424005606958639076073792466156178215951534273312464069838934050451362254524456211500299239712773081826612809861391966600600259605165966955132870578233254203125599405346111337440704942656485342958501043704013110318277866309547049330661678300638757555696110940254198290996439971096132997944153209783591614039924663751433380706328034012938768467879148028006130451833212375293807013086777321566676582189073763412493604881880865758913788425015036325463415760637713596263423154701313320906444709564169754028272069927731765327392863595300851328864327086044477646438205767329354741873990312723059773582768602281792840330389899017673294483130646437429328383635466131970261772383831715719655817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7afda01fecefb0ecae092844e5ab32715efd502a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediainsights.nfl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediainsights.nfl.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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