editions.espnqa.com

- The Walt Disney Company -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 4c:b4:9a:dc:ca:63:ff:e7:95:b1:68:20:9e:7d:ad:67 was issued on by Entrust, Inc..

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Walt Disney Company

Organization: The Walt Disney Company
State / Province: California
Locality: Burbank
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:b4:9a:dc:ca:63:ff:e7:95:b1:68:20:9e:7d:ad:67
Serial Number (int): 101959082098101454924715466405906853223
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 72:6b:03:82:6d:3a:72:6b:90:23:27:72:d3:82:92:f6:67:45:5f:d8
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): fd:e0:99:df:a6:e9:61:44:15:eb:b9:b8:f1:b3:fd:25:9c:17:3a:41
Fingerprint (sha256): 35:7c:dc:de:2a:12:85:5d:5e:b8:d0:3d:8c:b9:ca:dd:f4:b1:62:cc:54:0e:c9:b7:a4:8c:45:72:bf:43:8c:65

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate editions.espnqa.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for editions.espnqa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

editions.espnqa.com
*.api.espnqa.cl
*.api.espnqa.co.uk
*.api.espnqa.com.ar
*.api.espnqa.com.au
*.api.espnqa.com.br
*.api.espnqa.com.co
*.api.espnqa.com.mx
*.api.espnqa.es
*.api.espnqa.in
*.api.espnqa.nl
*.api.qa.espnqa.co.cr
*.api.qa.espnqa.com.do
*.api.qa.espnqa.com.ec
*.api.qa.espnqa.com.gt
*.api.qa.espnqa.com.pa
*.api.qa.espnqa.com.pe
*.api.qa.espnqa.com.sg
*.api.qa.espnqa.com.uy
*.api.qa.espnqa.com.ve
*.api.qa.espnqa.es
*.api.qa.espnqa.nl
*.espnqa.cl
*.espnqa.co.uk
*.espnqa.com
*.espnqa.com.ar
*.espnqa.com.au
*.espnqa.com.br
*.espnqa.com.co
*.espnqa.com.mx
*.espnqa.in
*.espnqa.ph
*.fan.api.qa.espnqa.co.cr
*.fan.api.qa.espnqa.com.do
*.fan.api.qa.espnqa.com.ec
*.fan.api.qa.espnqa.com.gt
*.fan.api.qa.espnqa.com.pa
*.fan.api.qa.espnqa.com.pe
*.fan.api.qa.espnqa.com.sg
*.fan.api.qa.espnqa.com.uy
*.fan.api.qa.espnqa.com.ve
*.fan.api.qa.espnqa.es
*.fan.api.qa.espnqa.nl
espncricinfoqa.com
espnqa.cl
espnqa.co.cr
espnqa.co.uk
espnqa.com
espnqa.com.ar
espnqa.com.au
espnqa.com.br
espnqa.com.co
espnqa.com.do
espnqa.com.ec
espnqa.com.gt
espnqa.com.mx
espnqa.com.pa
espnqa.com.pe
espnqa.com.sg
espnqa.com.uy
espnqa.com.ve
espnqa.es
espnqa.in
espnqa.nl
espnqa.ph
fan.core.api.qa.espnqa.cl
fan.core.api.qa.espnqa.co.cr
fan.core.api.qa.espnqa.co.uk
fan.core.api.qa.espnqa.com.ar
fan.core.api.qa.espnqa.com.au
fan.core.api.qa.espnqa.com.br
fan.core.api.qa.espnqa.com.co
fan.core.api.qa.espnqa.com.do
fan.core.api.qa.espnqa.com.ec
fan.core.api.qa.espnqa.com.gt
fan.core.api.qa.espnqa.com.mx
fan.core.api.qa.espnqa.com.pa
fan.core.api.qa.espnqa.com.pe
fan.core.api.qa.espnqa.com.sg
fan.core.api.qa.espnqa.com.uy
fan.core.api.qa.espnqa.com.ve
fan.core.api.qa.espnqa.es
fan.core.api.qa.espnqa.in
fan.core.api.qa.espnqa.nl
qa.espncricinfo.com
qa.secsports.com
www.espncricinfoqa.com
www.espnqa.co.cr
www.espnqa.com.do
www.espnqa.com.ec
www.espnqa.com.gt
www.espnqa.com.pa
www.espnqa.com.pe
www.espnqa.com.sg
www.espnqa.com.uy
www.espnqa.com.ve
www.espnqa.es
www.espnqa.nl
*.fan.api.qa.espnqa.ph
fan.core.api.qa.espnqa.ph

Other certificates including the domain name espnqa.com

(limited to 100 certificates)
espnqa.com
editions.espnqa.com
m.espnqa.com
cdn.secure.espn.go.com
www.espnqa.com
espnqa.com
espnqa.com
broadband.espnqa.com
espnqa.com
cdn.espnqa.com
cdn.espnqa.com
www.aws.espn.com
www.espnqa.com
espnqa.com
www.espn.com
*.web.plus.espnqa.com
www.espn.com
espnqa.com
cdn.secure.espn.go.com
cdn.espnqa.com
espnqa.com
dcs7deportes.geo.hosted.espn.com
espn.com
espnqa.com
espnqa.com
games.espnqa.com
espnqa.com
www.espn.com
espnqa.com
www.espnqa.com
cdn.espnqa.com
www.espn.com
www.espn.com
espnqa.com
espnqa.com
tredir.ppe.go.com
espn.com
creativestudio.espnqa.com
cdp-dev-airflow-cluster.aws.dp.hosted.espndev.com
dcs7deportes.geo.hosted.espnqa.com
www.espnqa.com
www.espn.com
cdn.espnqa.com
www.espn.com
dcf.espn.com
www.espnqa.com
espn.com
editions.espnqa.com
*.cms.internal.espnqa.com
www.espnqa.com
espn.com
www.espn.com
cdn.secure.espn.go.com
www.espn.com
espnqa.com
csr-nonprod3-axis.disney.network
cdn.espnqa.com
espnqa.com
dcf.espn.com
www.espn.com
espnqa.com
dcf.espn.com
www.espnqa.com
www.espn.com
www.espnqa.com
internal.espnqa.com
www.espn.com
espnqa.com
espnqa.com
espn.com
csr-nonprod3-axis.disney.network
dcf.espn.com
www.espnqa.com
www.espnqa.com
www.espn.com
abcfeqa.com
*.api.espnqa.com
dcs7deportes.geo.hosted.espnqa.com
cdn.secure.espn.go.com
www.aws.espn.com
www.espnqa.com
tredir.ppe.go.com
espnqa.com
espnqa.com
cdn.espnqa.com
www.aws.espn.com
www.espnqa.com
www.espn.com
tredir.ppe.go.com
cdn.secure.espn.go.com
r.espnqa.com
www.aws.espn.com
cdn.secure.espn.go.com
cdn.espnqa.com
cdn.espnqa.com
espnqa.com
dev-cdp-nifi-cluster.aws.dp.hosted.espndev.com
www.espnqa.com
cdn.espnqa.com
espn.com

Certificate

The complete raw certificate details for editions.espnqa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4h/IK1wowNsP1c9j9uBB
g3WTWfZjoIw2OLvBe78voy5ADrhkb8RFQa4+nTmv7ytSjcGsd7T86iqGNhdrH4aX
8XmwQQKfRjj9t6dVsi3WXWu6MlvnkpxFuJX2wIoJr2UQe93erI/6gdejmyPblvC0
eDzRlIQQIlksoLpZZtTAA1M/QSkIF9osKLpjku1TSxnoywhCqReipPov7zz16Vmk
qhmKmEGV2CYVMZ12bJd/QP4P4lrkf0mP4TbBwUsIpTc6nG7Uw3b25KBtPc2Avl+g
0V7m5KVimE06D0oiimudIR16tRROBdrtcCgb+OU75uQ+Zks48fMPn/5PVUFIYMRP
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 101959082098101454924715466405906853223
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-04 14:47:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-04 14:47:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Burbank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Walt Disney Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'editions.espnqa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28545529167062146606392225223811246385661760242422061309391173104067008795847153490227058287720360497993040906519209464875759482228941446998023089835110173681764985745600553314111156515727601429362667583442748488689909383099803092139475380620632408789820268355192270956962976749102056999447313820986720153686189526974083513554960331345593723188346222359080628736710929586103403119326587939852014661183820297927849360644605827853819594291141685798778068981564585466652946779601380047428136655705448836480566856224371749083466791302740704237639075760049077570516243979618836645508809524134515142383123395950575551270689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							726b03826d3a726b90232772d38292f667455fd8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editions.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.qa.espnqa.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.qa.espnqa.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.qa.espnqa.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.qa.espnqa.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.qa.espnqa.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.qa.espnqa.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.qa.espnqa.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.qa.espnqa.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.qa.espnqa.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.qa.espnqa.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.qa.espnqa.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.qa.espnqa.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.qa.espnqa.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.qa.espnqa.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.qa.espnqa.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.qa.espnqa.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.qa.espnqa.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.qa.espnqa.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.qa.espnqa.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.qa.espnqa.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.qa.espnqa.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.qa.espnqa.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espncricinfoqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.qa.espnqa.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.qa.espnqa.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.qa.espnqa.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.qa.espnqa.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.qa.espnqa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.qa.espnqa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.qa.espnqa.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.qa.espnqa.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.qa.espnqa.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.qa.espnqa.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.qa.espnqa.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.qa.espnqa.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.qa.espnqa.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.qa.espnqa.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.qa.espnqa.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.qa.espnqa.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.qa.espnqa.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.qa.espnqa.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.qa.espnqa.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.espncricinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.secsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espncricinfoqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espnqa.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espnqa.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espnqa.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espnqa.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espnqa.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espnqa.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espnqa.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espnqa.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espnqa.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espnqa.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espnqa.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.qa.espnqa.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.qa.espnqa.ph'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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