*.football.cbssports.com

- CBS Interactive Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 04:63:14:f5:a7:3f:61:0c:ff:1a:5a:b5:28:95:06:15 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CBS Interactive Inc.

Organization: CBS Interactive Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:63:14:f5:a7:3f:61:0c:ff:1a:5a:b5:28:95:06:15
Serial Number (int): 5831374482987117731103156659335530005
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 57:78:14:ee:0b:44:81:e0:a9:16:ab:a8:22:41:3d:ac:52:85:6d:91
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 89:6f:47:2b:c4:3b:cb:ef:8c:f2:b2:7b:e4:32:ac:9e:16:d2:44:67
Fingerprint (sha256): 43:4a:3c:f1:b0:f2:23:19:b6:47:2c:79:61:37:f9:25:2c:5e:a7:74:7c:94:4d:ae:84:21:27:0b:f1:6e:b2:13

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate *.football.cbssports.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.football.cbssports.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.football.cbssports.com
football.cbssports.com

Other certificates including the domain name cbssports.com

(limited to 100 certificates)
sli.cbssports.com
ey-campfire.com
cbslocal.com
radio.cbssports.com
*.baseball.cbssports.com
cc.cnetcontent.com
devemendous.com
image.e.outdoors.org
*.basketball.cbssports.com
image.e.outdoors.org
image.e.outdoors.org
safety.cbssports.com
penyadap.com
*.cbssports.com
gottlieb.radio.cbssports.com
*.mayhem.cbssports.com
www.bitfog.co
cbssports.com
cbssports.com
*.basketball.cbssports.com
justdogs.app
*.cbssports.com
sportsnowplanning.cbssports.com
n1to.com
tls.automattic.com
cc.cnetcontent.com
cbssports.com
*.basketball.cbssports.com
*.hockey.cbssports.com
tls.automattic.com
horseracing.cbssports.com
gottlieb.radio.cbssports.com
agartheanstudios.co
gottlieb.radio.cbssports.com
secure01.teamfanshop.com
secure01.teamfanshop.com
tls.automattic.com
*.cbssports.com
cc.cnetcontent.com
qa.app.pspro.ai
secure01.teamfanshop.com
*.football.cbssports.com
nabilcook.com
cc.cnetcontent.com
image.e.outdoors.org
*.baseball.cbssports.com
*.hockey.cbssports.com
cc.cnetcontent.com
tikiandtierney.radio.cbssports.com
image.e.outdoors.org
*.cbssports.com
business.shopsavee.com
tropez-pearls.com
*.ephm-bison.cbssports.com
*.hockey.cbssports.com
*.football.qa.cbssports.com
sushiuplus.ca
image.e.outdoors.org
secure01.teamfanshop.com
image.e.outdoors.org
*.basketball.cbssports.com
secure01.teamfanshop.com
cc.cnetcontent.com
gottlieb.radio.cbssports.com
*.apipufi.cbssports.com
*.cbssports.com
*.hera.cbssports.com
*.cbssports.com
*.cbssports.com
*.apipufi.cbssports.com
*.cbssports.com
thesimplegeography.de
shop.cbssports.com
secure01.teamfanshop.com
gottlieb.radio.cbssports.com
coderbin.com
*.cbssports.com
gottlieb.radio.cbssports.com
thesimplegeography.de
firebasetest.mglsk.be
image.e.outdoors.org
secure01.teamfanshop.com
secure01.teamfanshop.com
image.e.outdoors.org
meta-studio.world
ops.cbssports.com
saa.cbssports.com
nucdn.cbssports.com
fantasy.img.cbssports.com
click.email.cbssports.com
mta-sts.openresearch.news
secure01.teamfanshop.com
sechighlights.cbssports.com
www.litz.co
www.seelan.co
*.mayhem.cbssports.com
gottlieb.radio.cbssports.com
*.hockey.cbssports.com
cc.cnetcontent.com
secure01.teamfanshop.com

Certificate

The complete raw certificate details for *.football.cbssports.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5831374482987117731103156659335530005
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-06 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CBS Interactive Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.football.cbssports.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 983980219635638456624718030003613200790058783155048985204055121157445793281612099461294890724199767985482431019301897541852756861890436782473797262113831911705949128393763782028630898980494231648132761354434673667869414345423832667932030639897863302575246943233554660078288902712028464824611937826463833358569105074040907137093909236476806294796135095971326475321339184307950543182834287826080562614170193800751012742409954941284855144704333677265874511236840524792600235539652562528894066993808561369263918721061078633307156343677500017558104448847608948573956058437007176393653753570358044926903185142534661863485003167712231733463229383276574757591701584238520771235110951779882507010795388773521051952117853611845326547762187501443520725524082184740892792378232275471351956780467309482074694887361436151181437551856309540979310244431459066862186668848482596655205218573072319908830495643906611268128112535337686037529788746633103741006135788783781998835264738508774227981805842853667313086968960468627329159378996744772004875237814819544400485264839105707551753459347867563500468788641813663258452865767621196487039018998345871559484121003894491587760471099577355776398355318848490968322890610697417700982644471481153456265187063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							577814ee0b4481e0a916aba822413dac52856d91
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.football.cbssports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'football.cbssports.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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