www.espnsb.com

- The Walt Disney Company -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number dd:0d:58:2f:9f:5f:c0:ae:00:00:00:00:50:de:ca:25 was issued on by Entrust, Inc..

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Walt Disney Company

Organization: The Walt Disney Company
State / Province: California
Locality: Burbank
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): dd:0d:58:2f:9f:5f:c0:ae:00:00:00:00:50:de:ca:25
Serial Number (int): 293828675552719994606888866526451911205
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: f6:7c:ae:2d:59:70:51:8b:24:e1:7b:fa:1c:8a:7a:13:d5:dc:80:8e
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 6c:61:ad:11:23:46:28:84:db:81:d9:54:38:3a:20:38:48:0d:b3:68
Fingerprint (sha256): 43:92:5e:89:b0:ba:ab:96:ea:52:9e:86:f4:c2:19:09:b4:12:67:81:85:8b:88:82:25:61:58:0c:ed:e1:59:7c

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.espnsb.com

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.espnsb.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.espnsb.com
*.espnsb.com
espnsb.com
espnsb.cl
*.espnsb.cl
*.api.espnsb.cl
espnsb.com.au
*.espnsb.com.au
*.api.espnsb.com.au
*.core.api.espnsb.com.au
espnsb.com.co
*.espnsb.com.co
*.api.espnsb.com.co
*.core.api.espnsb.com.co
espnsb.com.mx
*.espnsb.com.mx
*.api.espnsb.com.mx
*.core.api.espnsb.com.mx
espnsb.co.uk
*.espnsb.co.uk
*.api.espnsb.co.uk
*.core.api.espnsb.co.uk
espnsb.in
*.espnsb.in
*.api.espnsb.in
*.core.api.espnsb.in

Other certificates including the domain name espnsb.com

(limited to 100 certificates)
cert-00001-cdnedge-bluemix.akamaized.net
cert-00001-cdnedge-bluemix.akamaized.net
cert-00001-cdnedge-bluemix.akamaized.net
espnsb.com
ESPNFuseDevCluster-04.hosted.aws.espnsb.com
dcs7deportes.geo.hosted.espn.com
cert-00001-cdnedge-bluemix.akamaized.net
espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
www.espnsb.com
creativearchive.espnsb.com
espnsb.com
internal.espnsb.com
cfa.content.espnsb.com
espnsb.com
kwese.espnsb.com
www.espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
cert-00001-cdnedge-bluemix.akamaized.net
*.geo.hosted.espnsb.com
pro.creativearchive.espnsb.com
espnsb.com
espnsb.com
client-api.espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
editions.espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
www.espnsb.com
internal.espnsb.com
espnsb.com
creativearchive.espnsb.com
*.espnsb.com
www.espnsb.com
www.espnsb.com
espnsb.com
espnsb.com
espnsb.com
editions.espnsb.com
editions.espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
cert-00001-cdnedge-bluemix.akamaized.net
client-api.espnsb.com
espnsb.com
*.espnsb.com
editions.espnsb.com
www.malt.internal.espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
cert-00001-cdnedge-bluemix.akamaized.net
espnsb.com
espnsb.com
espnsb.com
espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
kwese.espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
cert-00001-cdnedge-bluemix.akamaized.net
www.espnsb.com
creativestudio.espnsb.com
espnsb.com
www.espnsb.com
*.cms.internal.espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
www.espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
www.espnsb.com
editions.espnsb.com
portal.creativearchive.espnsb.com
*.espnsb.com
www.espnsb.com
*.espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
editions.espnsb.com
www.espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
cert-00001-cdnedge-bluemix.akamaized.net
cert-00001-cdnedge-bluemix.akamaized.net
www.espnsb.com
www.espnsb.com
www.espnsb.com
ESPNFuseDevCluster04.hosted.aws.espnsb.com
client-api.espnsb.com
espnsb.com
dcs7deportes.geo.hosted.espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
cert-00001-cdnedge-bluemix.akamaized.net
cert-00001-cdnedge-bluemix.akamaized.net
espnsb.com
www.espnsb.com
espnsb.com
editions.espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
espnsb.com
www.espnsb.com
client-api.espnsb.com
espnsb.com
www.espnsb.com
espnsb.com
espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
cert-00001-cdnedge-bluemix.akamaized.net

Certificate

The complete raw certificate details for www.espnsb.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG/DCCBeSgAwIBAgIRAN0NWC+fX8CuAAAAAFDeyiUwDQYJKoZIhvcNAQELBQAw
gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL
Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg
MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs
BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN
MTcxMTAxMTg1MjMwWhcNMTgxMTAxMTkyMjI4WjBvMQswCQYDVQQGEwJVUzETMBEG
A1UECBMKQ2FsaWZvcm5pYTEQMA4GA1UEBxMHQnVyYmFuazEgMB4GA1UEChMXVGhl
IFdhbHQgRGlzbmV5IENvbXBhbnkxFzAVBgNVBAMTDnd3dy5lc3Buc2IuY29tMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqJi1InUVWeasadADR3RbyGX
F0RHPTVKRbtGus1+R5rKgQWNUaLseL9CaY6Q2M7eL4/DW0V79LzICkroxYcJpgrV
h+UmUxXihbaCRc5dUjuU3ualVTEUoqaD6kf+g9jPt7vT6Oie63wD4fNr2Q1X8XdE
KecdQEVnjUfWpXLC9IeKDseoMCtexxdVyMLRKOcRAXy18bUglxnyB3iQvyWnS6qE
DzCjSdEl+SVeVIgcPPq99pLoiM0KYj66iCurW0kgsUZGvaNZv4KGrxpDGpbsYQbe
JIWvHUvYCnzmNnLng+jj83PYtYlA5INx2B7ewxlQL4PqJyba8wN8q6FbhOfMmwID
AQABo4IDRTCCA0EwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1c3Qu
bmV0L2xldmVsMWsuY3JsMEsGA1UdIAREMEIwNgYKYIZIAYb6bAoBBTAoMCYGCCsG
AQUFBwIBFhpodHRwOi8vd3d3LmVudHJ1c3QubmV0L3JwYTAIBgZngQwBAgIwaAYI
KwYBBQUHAQEEXDBaMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0Lm5l
dDAzBggrBgEFBQcwAoYnaHR0cDovL2FpYS5lbnRydXN0Lm5ldC9sMWstY2hhaW4y
NTYuY2VyMIIB1wYDVR0RBIIBzjCCAcqCDnd3dy5lc3Buc2IuY29tggwqLmVzcG5z
Yi5jb22CCmVzcG5zYi5jb22CCWVzcG5zYi5jbIILKi5lc3Buc2IuY2yCDyouYXBp
LmVzcG5zYi5jbIINZXNwbnNiLmNvbS5hdYIPKi5lc3Buc2IuY29tLmF1ghMqLmFw
aS5lc3Buc2IuY29tLmF1ghgqLmNvcmUuYXBpLmVzcG5zYi5jb20uYXWCDWVzcG5z
Yi5jb20uY2+CDyouZXNwbnNiLmNvbS5jb4ITKi5hcGkuZXNwbnNiLmNvbS5jb4IY
Ki5jb3JlLmFwaS5lc3Buc2IuY29tLmNvgg1lc3Buc2IuY29tLm14gg8qLmVzcG5z
Yi5jb20ubXiCEyouYXBpLmVzcG5zYi5jb20ubXiCGCouY29yZS5hcGkuZXNwbnNi
LmNvbS5teIIMZXNwbnNiLmNvLnVrgg4qLmVzcG5zYi5jby51a4ISKi5hcGkuZXNw
bnNiLmNvLnVrghcqLmNvcmUuYXBpLmVzcG5zYi5jby51a4IJZXNwbnNiLmluggsq
LmVzcG5zYi5pboIPKi5hcGkuZXNwbnNiLmlughQqLmNvcmUuYXBpLmVzcG5zYi5p
bjAfBgNVHSMEGDAWgBSConB03bxTP8971PfNf6dgxgpMvzAdBgNVHQ4EFgQU9nyu
LVlwUYsk4Xv6HIp6E9XcgI4wCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEA
pz+r0rgc3cmvoRO2/MNifEtAaaSwfizCtLJX8cAHC9mfM8ImJruuNGsi/MPBL9M7
E2srz0h2AAaN5+WQqWfhUpD+7v80oCSeOS+6pe2NsULlLJ+fmXNlrpGnmYprr7nt
hW7K3GZLHNw11Cl4mzImD2gS321RuSyyzkFFpDyRhezrx8URYk3G8R583lSZ2bss
buR2O50MMBYwaopjUmxXzFdQhFMgVl1N5/Vzc+CkvGJZthbijVoH15zl0ruiR02q
4dA33qCz+UwjOKEAWoUKpl3XacR/u5SkG9vriVw7Ls/OeBFUPty46pbXL46jtLfc
u7pF0G4aFEk1nW39p000IQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqJi1InUVWeasadADR3R
byGXF0RHPTVKRbtGus1+R5rKgQWNUaLseL9CaY6Q2M7eL4/DW0V79LzICkroxYcJ
pgrVh+UmUxXihbaCRc5dUjuU3ualVTEUoqaD6kf+g9jPt7vT6Oie63wD4fNr2Q1X
8XdEKecdQEVnjUfWpXLC9IeKDseoMCtexxdVyMLRKOcRAXy18bUglxnyB3iQvyWn
S6qEDzCjSdEl+SVeVIgcPPq99pLoiM0KYj66iCurW0kgsUZGvaNZv4KGrxpDGpbs
YQbeJIWvHUvYCnzmNnLng+jj83PYtYlA5INx2B7ewxlQL4PqJyba8wN8q6FbhOfM
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293828675552719994606888866526451911205
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-01 18:52:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-01 19:22:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Burbank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Walt Disney Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.espnsb.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21035634172828079015366989909880768156517560892400999858260463556882890698660916739598386217881784943470599425014730464042341130108442448977055582799228916504006933197334618164491920299799094983146479718909618662935834374519959127105954133949169486217774375567799076373374389374170837705144479535488170019471489892224274615217793654042748421752104655033376098478043069204260723157829594419965808486489331496524096705077152667823327592018001720415800939816180048790320905114334643047505334700778951808249466393745385661588174268040270555998450486344952496100525364639566213514964835849798951361300948787302326302395547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (462 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espnsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnsb.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnsb.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnsb.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnsb.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnsb.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnsb.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core.api.espnsb.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnsb.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnsb.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnsb.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core.api.espnsb.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnsb.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnsb.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnsb.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core.api.espnsb.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnsb.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnsb.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnsb.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core.api.espnsb.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnsb.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnsb.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnsb.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core.api.espnsb.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f67cae2d5970518b24e17bfa1c8a7a13d5dc808e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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