www.espn.com

- The Walt Disney Company -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 53:d5:d9:19:cf:5d:d5:6a:00:00:00:00:50:ea:fa:ca was issued on by Entrust, Inc..

With 63 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Walt Disney Company

Organization: The Walt Disney Company
State / Province: California
Locality: Burbank
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 53:d5:d9:19:cf:5d:d5:6a:00:00:00:00:50:ea:fa:ca
Serial Number (int): 111436286208780825958641730901798222538
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: dc:f3:d1:df:33:91:75:dd:10:00:80:3e:bb:f7:54:24:8b:c9:cd:47
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 5c:b5:29:0e:94:28:b5:f8:89:c4:6e:f6:b4:14:37:c7:4d:fe:d5:2e
Fingerprint (sha256): 3d:1a:a7:c7:f4:76:ba:d1:8a:91:9b:3c:86:ea:b8:ba:af:36:d7:ac:63:da:46:03:96:a3:38:e3:22:b7:8c:6a

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.espn.com

63

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.espn.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.espn.com
*.espn.com
espn.com
espn.cl
*.espn.cl
*.api.espn.cl
*.core.api.espn.cl
espn.com.ar
*.espn.com.ar
*.api.espn.com.ar
*.core.api.espn.com.ar
espn.com.au
*.espn.com.au
*.api.espn.com.au
*.core.api.espn.com.au
espn.com.br
*.espn.com.br
*.api.espn.com.br
*.core.api.espn.com.br
espn.com.co
*.espn.com.co
*.api.espn.com.co
*.core.api.espn.com.co
espn.com.mx
*.espn.com.mx
*.api.espn.com.mx
*.core.api.espn.com.mx
espn.com.ve
*.espn.com.ve
*.api.espn.com.ve
*.core.api.espn.com.ve
espn.co.uk
*.espn.co.uk
*.api.espn.co.uk
*.core.api.espn.co.uk
espn.in
*.espn.in
*.api.espn.in
*.core.api.espn.in
*.espn.net
fan.core.api.espnqa.com
api.shortstop.espn.com
worker.shortstop.espn.com
api.partnerpub.espn.com
worker.partnerpub.espn.com
admin.partnerpub.espn.com
client.shortstop.espn.com
admin.shortstop.espn.com
*.us-east-1.aws.hosted.espn.com
*.us-west-2.aws.hosted.espn.com
*.eu-west-1.aws.hosted.espn.com
*.geo.hosted.espn.com
fan.api.espnqa.com
espncricinfo.com
www.espncricinfo.com
*.internal.espn.com
site.web.api.espn.com
site.fan.api.espn.com
site.mobile.api.espn.com
*.espncdn.com
espn.com.pe
www.espn.com.pe
s.secure.espncdn.com

Other certificates including the domain name espn.com

(limited to 100 certificates)
video.disney.com
espn.com
www.aws.espn.com
1927-the-diary-of-myles-thomas.espn.com
insider.espn.com
cert-00003-cdnedge-bluemix.akamaized.net
video.disney.com
UCwebn7ext.disney.com
tredire.perf.go.com
cert-00003-cdnedge-bluemix.akamaized.net
assets.espncdn.com
www.aws.espn.com
support.espn.com
cdn.secure.espn.go.com
cert-00003-cdnedge-bluemix.akamaized.net
cert-00003-cdnedge-bluemix.akamaized.net
www.espnqa.com
site.api.espn.com
fillmore.espn.com
watch.video.api.qa.espn.com
fantasyfc.espn.com
*.media.plus.espn.com
fantasy.espn.com
email.axioshq.espn.com
support.espn.com
*.media.plus.espn.com
espn.com
btlink.web.plus.espn.com
internal.espn.com
media.video-cdn.espn.com
assets.espncdn.com
tredir.espn.com
support.espn.com
affiliates.espn.com
1927-the-diary-of-myles-thomas.espn.com
*.svcs.plus.espn.com
pro.creativearchive.espn.com
affiliates.espn.com
mft.espn.com
beta-shortstop.espn.com
cdn.espnqa.com
iptvhmg026.espn.com
log.go.com
cdn.espnqa.com
www.aws.espn.com
mft.espn.com
editions.espn.com
espnqa.com
assets.espncdn.com
video.disney.com
studioc.espn.com
mobileapp.espn.com
www.espn.com
media.plus.espn.com
affiliates.espn.com
web.plus.espn.com
fantasy.espn.com
go.web.plus.espn.com
cert-00003-cdnedge-bluemix.akamaized.net
UCAEN7.Disney.com
www.espn.com
eventcenter.espn.com
ESPNLMProdCluster01.aws.hosted.espn.com
fantasyfc.espn.com
cdn.secure.espn.go.com
editions.espn.com
dcs7soccernet.us-west-2.aws.internal.espn.com
cdn.espnqa.com
cert-00003-cdnedge-bluemix.akamaized.net
wirelessreg.espn.com
affiliates.espn.com
video.disney.com
channelfinder.espn.com
cert-00003-cdnedge-bluemix.akamaized.net
dcs7deportes.geo.hosted.espn.com
affiliates.espn.com
email.axioshq.espn.com
go.web.plus.espn.com
dcs7deportes.geo.hosted.espn.com
outlook.espn.com
fan.api.espn.com
espn.com
*.media.plus.espn.com
media.video-cdn.espn.com
dmzexpe29d01v.espn.com
fan.core.api.espn.com
media.video-cdn.espn.com
assets.espncdn.com
tredir.espn.com
espn.com
insider.espn.com
log.go.com
sigmgr03.espn.com
*.cms.internal.espn.com
timekeeper.espn.com
aws.dp.hosted.espn.com
watch.video.api.qa.espn.com
espn.com
mft.espn.com
affiliate.disney.espn.com

Certificate

The complete raw certificate details for www.espn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01osUs3SPt6fhecEUTqO
ymcmI4bsBdS4YEMikDswPpQoBisaqchrxFZpRS1/J4O9BCqs7xaTeHqPI1LMznCB
/1qZEBf3td1SjKML6lMxQWiNCUdnuB4heQpE33EQ5FFNQwWsyoKgSQgbeQ5PAD1k
DjTM5ozjLop5QpO+5vP+hxtAA8f4A/ErozlHjliJObvbOMzgZNvDwH0ljlT6tzlv
eLtL+ow9dPRuVBCiv4AKMsbWMlwQdof12B9Bjbwep5z0n6JnrLyKwCZI36jU5AYx
KJ9Q7g7+9Vc+5epdcQRHumObwhmCKDHevSJO2qek0VB1KZ3lwmwew9vThz5J3F0P
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 111436286208780825958641730901798222538
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-07 14:24:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-25 14:54:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Burbank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Walt Disney Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.espn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26680748379698804449708589154888070535464137453536348253498935507002733857243439085351716588278833718449910270765225834547344696003168325126027382627012405697867674489903182723923759841682907345916114391541805313375456034416876567240478407288130816583991160259964479216339550865426260147608386937283402460975158738042781192310813266827177730710855118333051443050034929978244044628800056186558706744506105859669695879004932289236974193689599068239906807216690656464251346068818605289505845632620047971670027826549537464821144310277457815838054402219752508809521882425312538408725461467748603079310833772861353755479839
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core.api.espn.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core.api.espn.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core.api.espn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core.api.espn.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core.api.espn.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core.api.espn.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core.api.espn.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core.api.espn.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core.api.espn.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.shortstop.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worker.shortstop.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.partnerpub.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worker.partnerpub.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.partnerpub.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.shortstop.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shortstop.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-east-1.aws.hosted.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-west-2.aws.hosted.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu-west-1.aws.hosted.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geo.hosted.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espncricinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espncricinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.web.api.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.fan.api.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.mobile.api.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espn.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.secure.espncdn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dcf3d1df339175dd1000803ebbf754248bc9cd47
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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