www.espnqa.com

- Disney Enterprises, Inc -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number a0:70:8a:79:2a:a2:2a:55:00:00:00:00:50:f0:6a:e7 was issued on by Entrust, Inc..

With 78 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Disney Enterprises, Inc

Organization: Disney Enterprises, Inc
State / Province: Washington
Locality: Seattle
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a0:70:8a:79:2a:a2:2a:55:00:00:00:00:50:f0:6a:e7
Serial Number (int): 213260825146069824818147488377735244519
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: d9:b8:9a:8c:fa:5b:3c:18:03:7a:0c:95:13:95:e7:27:f7:07:2d:2b
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 18:cf:81:74:0b:bb:9e:2b:9a:17:54:9d:f8:a8:3a:fe:40:8b:8f:e6
Fingerprint (sha256): 37:e4:6d:3e:06:2e:f9:20:ae:a6:fb:89:ba:32:f2:7d:d9:ab:e4:dc:b1:e1:f7:84:f4:30:84:cf:1c:83:37:f7

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.espnqa.com

78

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.espnqa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.espnqa.com
*.espnqa.com
espnqa.com
*.geo.hosted.espnqa.com
*.us-east-1.aws.hosted.espnqa.com
*.us-west-2.aws.hosted.espnqa.com
*.eu-west-1.aws.hosted.espnqa.com
fan.core.api.espnqa.com
*.api.espnqa.com
espnqa.cl
*.espnqa.cl
*.api.espnqa.cl
fan.core.api.espnqa.cl
espnqa.com.au
*.espnqa.com.au
*.api.espnqa.com.au
fan.core.api.espnqa.com.au
espnqa.com.co
*.espnqa.com.co
*.api.espnqa.com.co
fan.core.api.espnqa.com.co
espnqa.com.mx
*.espnqa.com.mx
*.api.espnqa.com.mx
fan.core.api.espnqa.com.mx
espnqa.co.uk
*.espnqa.co.uk
*.api.espnqa.co.uk
fan.core.api.espnqa.co.uk
espnqa.in
*.espnqa.in
*.api.espnqa.in
fan.core.api.espnqa.in
espnqa.com.br
*.espnqa.com.br
*.api.espnqa.com.br
fan.core.api.espnqa.com.br
espnqa.com.ar
*.espnqa.com.ar
*.api.espnqa.com.ar
fan.core.api.espnqa.com.ar
*.espnqa.net
fan.core.api.qa.espnqa.com
api.shortstop.espnqa.com
worker.shortstop.espnqa.com
api.partnerpub.espnqa.com
worker.partnerpub.espnqa.com
admin.partnerpub.espnqa.com
client.shortstop.espnqa.com
admin.shortstop.espnqa.com
fan.api.qa.espnqa.com
espncricinfoqa.com
www.espncricinfoqa.com
qa.espncricinfo.com
*.internal.espnqa.com
site.web.api.espnqa.com
site.fan.api.espnqa.com
site.mobile.api.espnqa.com
*.espncdn.com
espnqa.com.pe
www.espnqa.com.pe
espnqa.com.ve
www.espnqa.com.ve
qa.secsports.com
onefeed.fan.api.qa.espnqa.com
favesfeed.fan.api.qa.espnqa.com
watchfeed.fan.api.qa.espnqa.com
watch.admin.espnqa.com
watch.video.api.espnqa.com
watch.auth.api.espnqa.com
watch.product.api.espnqa.com
artwork.api.espnqa.com
sportscenter.fan.api.espnqa.com
affiliate.api.espnqa.com
pcc.api.espnqa.com
watch.graph.api.espnqa.com
events.api.espnqa.com
restrictions.api.espnqa.com

Other certificates including the domain name espnqa.com

(limited to 100 certificates)
espnqa.com
editions.espnqa.com
m.espnqa.com
cdn.secure.espn.go.com
www.espnqa.com
espnqa.com
espnqa.com
broadband.espnqa.com
espnqa.com
cdn.espnqa.com
cdn.espnqa.com
www.aws.espn.com
www.espnqa.com
espnqa.com
www.espn.com
*.web.plus.espnqa.com
www.espn.com
espnqa.com
cdn.secure.espn.go.com
cdn.espnqa.com
espnqa.com
dcs7deportes.geo.hosted.espn.com
espn.com
espnqa.com
espnqa.com
games.espnqa.com
espnqa.com
www.espn.com
espnqa.com
www.espnqa.com
cdn.espnqa.com
www.espn.com
www.espn.com
espnqa.com
espnqa.com
tredir.ppe.go.com
espn.com
creativestudio.espnqa.com
cdp-dev-airflow-cluster.aws.dp.hosted.espndev.com
dcs7deportes.geo.hosted.espnqa.com
www.espnqa.com
www.espn.com
cdn.espnqa.com
www.espn.com
dcf.espn.com
www.espnqa.com
espn.com
editions.espnqa.com
*.cms.internal.espnqa.com
www.espnqa.com
espn.com
www.espn.com
cdn.secure.espn.go.com
www.espn.com
espnqa.com
csr-nonprod3-axis.disney.network
cdn.espnqa.com
espnqa.com
dcf.espn.com
www.espn.com
espnqa.com
dcf.espn.com
www.espnqa.com
www.espn.com
www.espnqa.com
internal.espnqa.com
www.espn.com
espnqa.com
espnqa.com
espn.com
csr-nonprod3-axis.disney.network
dcf.espn.com
www.espnqa.com
www.espnqa.com
www.espn.com
abcfeqa.com
*.api.espnqa.com
dcs7deportes.geo.hosted.espnqa.com
cdn.secure.espn.go.com
www.aws.espn.com
www.espnqa.com
tredir.ppe.go.com
espnqa.com
espnqa.com
cdn.espnqa.com
www.aws.espn.com
www.espnqa.com
www.espn.com
tredir.ppe.go.com
cdn.secure.espn.go.com
r.espnqa.com
www.aws.espn.com
cdn.secure.espn.go.com
cdn.espnqa.com
cdn.espnqa.com
espnqa.com
dev-cdp-nifi-cluster.aws.dp.hosted.espndev.com
www.espnqa.com
cdn.espnqa.com
espn.com

Certificate

The complete raw certificate details for www.espnqa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMGTCCCwGgAwIBAgIRAKBwinkqoipVAAAAAFDwaucwDQYJKoZIhvcNAQELBQAw
gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL
Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg
MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs
BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN
MTkwNDE3MTAwOTE5WhcNMjAwMzMwMTAzOTE4WjBvMQswCQYDVQQGEwJVUzETMBEG
A1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHU2VhdHRsZTEgMB4GA1UEChMXRGlz
bmV5IEVudGVycHJpc2VzLCBJbmMxFzAVBgNVBAMTDnd3dy5lc3BucWEuY29tMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVet7V9EvdslpgfaXqdfzqV6
VZRzGQgx0tkMwafA2GecschLYvk22XpriiUj/hi3zglQNSK6yCNB/3hyFPIbpZD3
ZUYqMHF7X3o6V6DUyt5DS6RszdzQ0prhiT14QwdMv8NPmaC63oAg6t4wY8pPAA5v
QbLx7taKmZpVLkmnEv422b7U7F3fbGJytFb8p4GzJeKetfUK4zi/AII3zG7RCH4J
6j+e5uqgxvTio0buh41meBwtulKlB9HAr4sL0ywjlg7Yf+OCzlP26JqFUGIK8L5n
BiQQmUculvpn6CNIhjbAzR8dyUXk17eQE7xiz+68viVTLAuwqCxjIaAC2twrqQID
AQABo4IIYjCCCF4wEwYKKwYBBAHWeQIEAwEB/wQCBQAwggbfBgNVHREEggbWMIIG
0oIOd3d3LmVzcG5xYS5jb22CDCouZXNwbnFhLmNvbYIKZXNwbnFhLmNvbYIXKi5n
ZW8uaG9zdGVkLmVzcG5xYS5jb22CISoudXMtZWFzdC0xLmF3cy5ob3N0ZWQuZXNw
bnFhLmNvbYIhKi51cy13ZXN0LTIuYXdzLmhvc3RlZC5lc3BucWEuY29tgiEqLmV1
LXdlc3QtMS5hd3MuaG9zdGVkLmVzcG5xYS5jb22CF2Zhbi5jb3JlLmFwaS5lc3Bu
cWEuY29tghAqLmFwaS5lc3BucWEuY29tggllc3BucWEuY2yCCyouZXNwbnFhLmNs
gg8qLmFwaS5lc3BucWEuY2yCFmZhbi5jb3JlLmFwaS5lc3BucWEuY2yCDWVzcG5x
YS5jb20uYXWCDyouZXNwbnFhLmNvbS5hdYITKi5hcGkuZXNwbnFhLmNvbS5hdYIa
ZmFuLmNvcmUuYXBpLmVzcG5xYS5jb20uYXWCDWVzcG5xYS5jb20uY2+CDyouZXNw
bnFhLmNvbS5jb4ITKi5hcGkuZXNwbnFhLmNvbS5jb4IaZmFuLmNvcmUuYXBpLmVz
cG5xYS5jb20uY2+CDWVzcG5xYS5jb20ubXiCDyouZXNwbnFhLmNvbS5teIITKi5h
cGkuZXNwbnFhLmNvbS5teIIaZmFuLmNvcmUuYXBpLmVzcG5xYS5jb20ubXiCDGVz
cG5xYS5jby51a4IOKi5lc3BucWEuY28udWuCEiouYXBpLmVzcG5xYS5jby51a4IZ
ZmFuLmNvcmUuYXBpLmVzcG5xYS5jby51a4IJZXNwbnFhLmluggsqLmVzcG5xYS5p
boIPKi5hcGkuZXNwbnFhLmlughZmYW4uY29yZS5hcGkuZXNwbnFhLmlugg1lc3Bu
cWEuY29tLmJygg8qLmVzcG5xYS5jb20uYnKCEyouYXBpLmVzcG5xYS5jb20uYnKC
GmZhbi5jb3JlLmFwaS5lc3BucWEuY29tLmJygg1lc3BucWEuY29tLmFygg8qLmVz
cG5xYS5jb20uYXKCEyouYXBpLmVzcG5xYS5jb20uYXKCGmZhbi5jb3JlLmFwaS5l
c3BucWEuY29tLmFyggwqLmVzcG5xYS5uZXSCGmZhbi5jb3JlLmFwaS5xYS5lc3Bu
cWEuY29tghhhcGkuc2hvcnRzdG9wLmVzcG5xYS5jb22CG3dvcmtlci5zaG9ydHN0
b3AuZXNwbnFhLmNvbYIZYXBpLnBhcnRuZXJwdWIuZXNwbnFhLmNvbYIcd29ya2Vy
LnBhcnRuZXJwdWIuZXNwbnFhLmNvbYIbYWRtaW4ucGFydG5lcnB1Yi5lc3BucWEu
Y29tghtjbGllbnQuc2hvcnRzdG9wLmVzcG5xYS5jb22CGmFkbWluLnNob3J0c3Rv
cC5lc3BucWEuY29tghVmYW4uYXBpLnFhLmVzcG5xYS5jb22CEmVzcG5jcmljaW5m
b3FhLmNvbYIWd3d3LmVzcG5jcmljaW5mb3FhLmNvbYITcWEuZXNwbmNyaWNpbmZv
LmNvbYIVKi5pbnRlcm5hbC5lc3BucWEuY29tghdzaXRlLndlYi5hcGkuZXNwbnFh
LmNvbYIXc2l0ZS5mYW4uYXBpLmVzcG5xYS5jb22CGnNpdGUubW9iaWxlLmFwaS5l
c3BucWEuY29tgg0qLmVzcG5jZG4uY29tgg1lc3BucWEuY29tLnBlghF3d3cuZXNw
bnFhLmNvbS5wZYINZXNwbnFhLmNvbS52ZYIRd3d3LmVzcG5xYS5jb20udmWCEHFh
LnNlY3Nwb3J0cy5jb22CHW9uZWZlZWQuZmFuLmFwaS5xYS5lc3BucWEuY29tgh9m
YXZlc2ZlZWQuZmFuLmFwaS5xYS5lc3BucWEuY29tgh93YXRjaGZlZWQuZmFuLmFw
aS5xYS5lc3BucWEuY29tghZ3YXRjaC5hZG1pbi5lc3BucWEuY29tghp3YXRjaC52
aWRlby5hcGkuZXNwbnFhLmNvbYIZd2F0Y2guYXV0aC5hcGkuZXNwbnFhLmNvbYIc
d2F0Y2gucHJvZHVjdC5hcGkuZXNwbnFhLmNvbYIWYXJ0d29yay5hcGkuZXNwbnFh
LmNvbYIfc3BvcnRzY2VudGVyLmZhbi5hcGkuZXNwbnFhLmNvbYIYYWZmaWxpYXRl
LmFwaS5lc3BucWEuY29tghJwY2MuYXBpLmVzcG5xYS5jb22CGndhdGNoLmdyYXBo
LmFwaS5lc3BucWEuY29tghVldmVudHMuYXBpLmVzcG5xYS5jb22CG3Jlc3RyaWN0
aW9ucy5hcGkuZXNwbnFhLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwu
ZW50cnVzdC5uZXQvbGV2ZWwxay5jcmwwSwYDVR0gBEQwQjA2BgpghkgBhvpsCgEF
MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly93d3cuZW50cnVzdC5uZXQvcnBhMAgGBmeB
DAECAjBoBggrBgEFBQcBAQRcMFowIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVu
dHJ1c3QubmV0MDMGCCsGAQUFBzAChidodHRwOi8vYWlhLmVudHJ1c3QubmV0L2wx
ay1jaGFpbjI1Ni5jZXIwHwYDVR0jBBgwFoAUgqJwdN28Uz/Pe9T3zX+nYMYKTL8w
HQYDVR0OBBYEFNm4moz6WzwYA3oMlROV5yf3By0rMAkGA1UdEwQCMAAwDQYJKoZI
hvcNAQELBQADggEBAFemny46+VrtW4Rgs4zlRXn+vb34cN8k7rRdtTqWmtHJOBG8
EuZ6L6h9taafbhKGr+nVumdX5us+5/iajwCJoREOrSyrwE1IBow4q2qOPgRRKaeL
sLj7OvDJBhhwRuADWNoCqSVMAEn5DPRGd94NfKM2LzzZztDB7o+VeaA7ese0Ru/o
8OFzVQmZPU3XJ4LWXEc9l7D2N4lpeBU1Q69GtAz7Eq9wbC7J2TyE5bYxNSRSPwpA
PMhgAqs/14Ymts2mvCdZRBliZm5q//QK3bNR59hrP6W/xFtBKYFn7JBCjAJzcod+
QIsIxwSoGJgFH6MITJrs4GDTXg0wYQvgfqR1S5Y=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVet7V9EvdslpgfaXqdf
zqV6VZRzGQgx0tkMwafA2GecschLYvk22XpriiUj/hi3zglQNSK6yCNB/3hyFPIb
pZD3ZUYqMHF7X3o6V6DUyt5DS6RszdzQ0prhiT14QwdMv8NPmaC63oAg6t4wY8pP
AA5vQbLx7taKmZpVLkmnEv422b7U7F3fbGJytFb8p4GzJeKetfUK4zi/AII3zG7R
CH4J6j+e5uqgxvTio0buh41meBwtulKlB9HAr4sL0ywjlg7Yf+OCzlP26JqFUGIK
8L5nBiQQmUculvpn6CNIhjbAzR8dyUXk17eQE7xiz+68viVTLAuwqCxjIaAC2twr
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 213260825146069824818147488377735244519
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-17 10:09:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 10:39:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seattle'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Disney Enterprises, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.espnqa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21377509864452037996177899128229654111765070763176617040094565547488517216701294303002207663520334521352642814813009881972673093114454533172573312227756296850482977957364084196282112213778897764354468388940826953119939262857986916347042963193479428424327640358962917607901343780997063408856992998302000590678536138256279758694233386167669229243378926878371448568428759237791974114858957856269935785176495309097227077540483443910821873454826124771030526365081164336471173291560495645540828446711583257340661440088577180231874651302119955634442729742170535201041785771535926688876624813894274498280068884944810762054569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1750 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geo.hosted.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-east-1.aws.hosted.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-west-2.aws.hosted.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu-west-1.aws.hosted.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espnqa.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espnqa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espnqa.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espnqa.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espnqa.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espnqa.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espnqa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espnqa.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.qa.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.shortstop.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worker.shortstop.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.partnerpub.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worker.partnerpub.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.partnerpub.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.shortstop.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shortstop.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.api.qa.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espncricinfoqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espncricinfoqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.espncricinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.web.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.fan.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.mobile.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espnqa.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espnqa.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.secsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onefeed.fan.api.qa.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'favesfeed.fan.api.qa.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchfeed.fan.api.qa.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.admin.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.video.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.auth.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.product.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artwork.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportscenter.fan.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliate.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcc.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.graph.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restrictions.api.espnqa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9b89a8cfa5b3c18037a0c951395e727f7072d2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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