a.abcnews.go.com

Issued by R10

About this certificate

This digital certificate with serial number 03:04:c1:8d:51:c0:30:c4:06:32:ad:9b:d8:c5:7e:21:c0:04 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=a.abcnews.go.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:04:c1:8d:51:c0:30:c4:06:32:ad:9b:d8:c5:7e:21:c0:04
Serial Number (int): 262955262038110113325616426619882447159300
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d2:4a:f8:c2:e4:17:b2:48:35:29:44:98:ef:91:6e:a9:96:46:49:b4
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): 59:fa:f4:ec:29:38:c6:3a:c5:9d:a2:a4:c1:23:da:97:26:ae:71:8c
Fingerprint (sha256): 3f:04:fd:62:97:8a:0f:90:17:4a:f2:9f:e7:9c:2f:40:15:ff:68:f8:d0:3c:91:a8:a6:6f:be:43:8f:04:96:12

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate a.abcnews.go.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for a.abcnews.go.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a.abcnews.go.com
fonts.abcnews.com

Other certificates including the domain name go.com

(limited to 100 certificates)
disneymovieclub.go.com
approvals.qa.pcm.go.com
video.disney.com
www.aws.espn.com
auth-mock.qa.pcm.go.com
DISNEYCRUISE.RESERVATIONS.DISNEY.GO.COM
forumadmin.disney.go.com
dns-vetting1-jeffg-noah.map.fastly.net
media.abcfamily.go.com
tredir.stage.go.com
disneyphotopass.go.com
dns-vetting1-mims-pawel.map.fastly.net
video.disney.com
espndeportes.espn.go.com
wdpromedia.disney.go.com
editions.geo.hosted.abcotvs.com
disneyland.disney.go.com
sslcertificate3.queue-it.net
beachresorts-sl.disney.go.com
r.abc.go.com
tredire-cloud.go.com
dns-vetting1-mims-pawel.map.fastly.net
mediakit.go.com
stg-unid.go.com
proxy.espn.go.com
cwc.dsi.go.com
disneyvacationaccount.disney.go.com
disneycruise.disney.go.com
room.oscar.go.com
abcnewsstore.go.com
m.disneyland.disney.go.com
v2.shared.global.fastly.net
tredire.perf.go.com
otvresponder.gns.go.com
r2.shared.global.fastly.net
mydcastqa.go.com
tredir.ppe.go.com
paymenthandlerstaging.go.com
reg.espn.go.com
vault-east.dev.ci.go.com
latest.disneyland.disney.go.com
disneyworld.disney.go.com
v2.shared.global.fastly.net
googlenow.abcnews.go.com
resorts.disney.go.com
api.rdf.watchabc.go.com
iregcs.go.com
qa.registerdisney.go.com
dns-vetting1-mims-pawel.map.fastly.net
api.go.com
disneycruise.disney.go.com
disneymovierewards.go.com
quickquote.disney.go.com
optout.go.com
abcnews-react-stage.aws.seabcnews.go.com
cms.disney.go.com
disneygoldenoak-sl.disney.go.com
event-registration-qa01.disneyparks.disney.go.com
assets.espncdn.com
preview.ddb.go.com
*.wdprdvc.segopub.engsvc.go.com
stg.n7.vp2.watchtvplus.go.com
api.dsitpr.go.com
r2.shared.global.fastly.net
stg.authorization.go.com
authorization.go.com
fg-vault.qa.pcm.go.com
stg.api.sweepstakes.go.com
dns-vetting1k.map.fastly.net
cdn.secure.espn.go.com
abcsports.go.com
sandbox.dev.ci.go.com
static.aws.abcfamily.go.com
secure.cdn.media.oscar.abc.com
wdprolt30-service.disney.go.com
gma-newsletter-tool.aws.seabcnews.go.com
api.mock.watchabc.go.com
api.disneymovieclub.go.com
video.disney.com
s.abcnews.com
r2.shared.global.fastly.net
test.gatekeeper.us-abc.symphony.edgedatg.com
env1.nge.api.go.com
*.api.contents.watchabc.go.com
load.disneycruise.wdprapps.disney.com
olaf-api.east.prod.us.seabc.go.com
abcsports.go.com
aglobal.go.com
disneymovieclub.go.com
queue.disneymovieclub.go.com
test.gatekeeper.us-abc.symphony.edgedatg.com
freeform.go.com
www.what-is-your-revolution.abc.go.com
dockerhub.ext.datg-abc-spark-west.us.seabc.go.com
watch.video.api.qa.espn.com
dns-vetting1-jeffg-noah.map.fastly.net
*.gatekeeper.us-abc.symphony.edgedatg.com
dwtsvote.abc.go.com
parksandresorts.wdpromedia-le.disney.go.com
disneyweddings.disney.go.com

Certificate

The complete raw certificate details for a.abcnews.go.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAwTBjVHAMMQGMq2b2MV+IcAEMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTAwHhcNMjQwNjE4MjAyNjQ4WhcNMjQwOTE2MjAyNjQ3WjAbMRkwFwYDVQQD
ExBhLmFiY25ld3MuZ28uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5wP8zr+CeArBqgt/4SA5SufpOoFpZQRlMxCZAFMj83A10Xw6DdfE/LkqO+vo
aAkDwtwwXILlIFRhq0q3a15iK4P6W0lKxsdUJ6w+xsHcYlJr+EIO5l52rUD83XYo
464F/Pk2/ysIxpy5fO09B+f+iIIDKNqUe8LKEGIbOWXnH21hJHw+xYNydhslN9JI
48HvLQnI7hOI3RgAj7sbriRI+6+ykrfeNy1/lXiHYZFRJFtCs9IJ4R8HTaz9VsDN
MqMVXiKTfPiRI9NPxocPI2ZvVezgcaC2aclThN/hSmoV9i6ZpFuGrUb6966XvDdM
2CnDwGdBbFsBfqub6859rlWxkQIDAQABo4ICKDCCAiQwDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBTSSvjC5BeySDUpRJjvkW6plkZJtDAfBgNVHSMEGDAWgBS7vMNHpeS8
qcbDpHIMEI2iNeHI6DBXBggrBgEFBQcBAQRLMEkwIgYIKwYBBQUHMAGGFmh0dHA6
Ly9yMTAuby5sZW5jci5vcmcwIwYIKwYBBQUHMAKGF2h0dHA6Ly9yMTAuaS5sZW5j
ci5vcmcvMC4GA1UdEQQnMCWCEGEuYWJjbmV3cy5nby5jb22CEWZvbnRzLmFiY25l
d3MuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB
8wDxAHYAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4AAAGQLT7NoAAA
BAMARzBFAiBzQVSqU+HJJICpO8BQXF8vRKsqeHUAFim0UFd1lka/KgIhAKi5XGQQ
Zx56jPmGRQ7M6XJndTTxYuzyJBBZBMRRW6CmAHcAdv+IPwq2+5VRwmHM9Ye6NLSk
zbsp3GhCCp/mZ0xaOnQAAAGQLT7N5AAABAMASDBGAiEArr6An11/S7cJhgGDRybJ
EXS7DAgvAeEGHjvYAl0Y8eMCIQDS/R4mFLbZWz+3PDY+U6Pfq4b8tRc6am5myFel
VJKq2jANBgkqhkiG9w0BAQsFAAOCAQEAVLdUSn89bk8uLXUtDbVs2zgIGsxizG4o
I25/GDJlEk2CbAOKYgpVdgwrvbtnjm8pA0zYld7coJfjw5Men60nNFCAjbIk/u2G
+9hpI1NfQIHRsdmR4+tXgLkdbFurZjwlaHcOdWrXza5QfRQCNGtC52J0/BTvyRDT
x2VWFq141bJTQiqWw3TLB5ajEeA/oTz/EZuKpP2fy+zYER1rWRzgBLFilOZz5pnu
cs3mPQxGy/u9MbA40P/D1DqSgXWFKxjD0xrlPHrA/NkhgGlUp2rm60Bv7u/ywGjM
bkF76iSEXjJGkAAjuEbdnCgFa6v8kzMWLRo3v0PwcQoHPSaTMAEZgA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wP8zr+CeArBqgt/4SA5
SufpOoFpZQRlMxCZAFMj83A10Xw6DdfE/LkqO+voaAkDwtwwXILlIFRhq0q3a15i
K4P6W0lKxsdUJ6w+xsHcYlJr+EIO5l52rUD83XYo464F/Pk2/ysIxpy5fO09B+f+
iIIDKNqUe8LKEGIbOWXnH21hJHw+xYNydhslN9JI48HvLQnI7hOI3RgAj7sbriRI
+6+ykrfeNy1/lXiHYZFRJFtCs9IJ4R8HTaz9VsDNMqMVXiKTfPiRI9NPxocPI2Zv
VezgcaC2aclThN/hSmoV9i6ZpFuGrUb6966XvDdM2CnDwGdBbFsBfqub6859rlWx
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262955262038110113325616426619882447159300
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-18 20:26:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-16 20:26:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'a.abcnews.go.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29163014771353048312727749072104853117085679479594582909267920248279602319031362784746536303227780701787904971307082650025050340578695417371954035237590633817712498195622672099746213387838715917668568253633416098484973836029567928983056812512175549189942830107218823095949953735500977859062713744101828012192166995229384619442054880346443742294830601212515649983552583651370602454408818470247713748345674312471256427929486342064402433830329578148762802302754389373913709975531879849178077933807464867959115558843755244929886639045598219135734576645929967582798441625342140991011049890433378331435185134262157057569169
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d24af8c2e417b24835294498ef916ea9964649b4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.abcnews.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fonts.abcnews.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e000001902d3ecda000000403004730450220734154aa53e1c92480a93bc0505c5f2f44ab2a7875001629b45057759646bf2a022100a8b95c6410671e7a8cf986450ecce972677534f162ecf224105904c4515ba0a600770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a74000001902d3ecde40000040300483046022100aebe809f5d7f4bb7098601834726c91174bb0c082f01e1061e3bd8025d18f1e3022100d2fd1e2614b6d95b3fb73c363e53a3dfab86fcb5173a6a6e66c857a55492aada
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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