www.espnqa.com

- The Walt Disney Company -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 11:d9:11:9e:54:25:85:1f:00:00:00:00:50:ea:f4:d6 was issued on by Entrust, Inc..

With 61 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Walt Disney Company

Organization: The Walt Disney Company
State / Province: California
Locality: Burbank
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 11:d9:11:9e:54:25:85:1f:00:00:00:00:50:ea:f4:d6
Serial Number (int): 23723961691700666493828399612935468246
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: d9:b8:9a:8c:fa:5b:3c:18:03:7a:0c:95:13:95:e7:27:f7:07:2d:2b
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 01:3f:78:28:e2:63:93:6b:fe:20:bd:89:71:4a:cb:bc:38:a3:d7:8b
Fingerprint (sha256): 44:fd:39:77:0a:a2:8c:d9:1b:7a:ec:43:b2:c0:73:3f:01:62:5c:db:e8:65:c3:5b:33:d9:14:6d:1f:2a:dc:f5

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.espnqa.com

61

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.espnqa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.espnqa.com
*.espnqa.com
espnqa.com
espnqa.cl
*.espnqa.cl
*.api.espnqa.cl
espnqa.com.au
*.espnqa.com.au
*.api.espnqa.com.au
*.core.api.espnqa.com.au
espnqa.com.co
*.espnqa.com.co
*.api.espnqa.com.co
*.core.api.espnqa.com.co
espnqa.com.mx
*.espnqa.com.mx
*.api.espnqa.com.mx
*.core.api.espnqa.com.mx
espnqa.co.uk
*.espnqa.co.uk
*.api.espnqa.co.uk
*.core.api.espnqa.co.uk
espnqa.in
*.espnqa.in
*.api.espnqa.in
*.core.api.espnqa.in
*.geo.hosted.espnqa.com
*.us-east-1.aws.hosted.espnqa.com
*.us-west-2.aws.hosted.espnqa.com
*.eu-west-1.aws.hosted.espnqa.com
*.core.api.espnqa.com
*.api.espnqa.com
*.core.api.espnqa.cl
espnqa.com.br
*.espnqa.com.br
*.api.espnqa.com.br
*.core.api.espnqa.com.br
espnqa.com.ar
*.espnqa.com.ar
*.api.espnqa.com.ar
*.core.api.espnqa.com.ar
*.espnqa.net
fan.core.api.qa.espnqa.com
api.shortstop.espnqa.com
worker.shortstop.espnqa.com
api.partnerpub.espnqa.com
worker.partnerpub.espnqa.com
admin.partnerpub.espnqa.com
client.shortstop.espnqa.com
admin.shortstop.espnqa.com
fan.api.qa.espnqa.com
espncricinfoqa.com
www.espncricinfoqa.com
qa.espncricinfo.com
*.internal.espnqa.com
site.web.api.espnqa.com
site.fan.api.espnqa.com
site.mobile.api.espnqa.com
*.espncdn.com
espnqa.com.pe
www.espnqa.com.pe

Other certificates including the domain name espnqa.com

(limited to 100 certificates)
espnqa.com
editions.espnqa.com
m.espnqa.com
cdn.secure.espn.go.com
www.espnqa.com
espnqa.com
espnqa.com
broadband.espnqa.com
espnqa.com
cdn.espnqa.com
cdn.espnqa.com
www.aws.espn.com
www.espnqa.com
espnqa.com
www.espn.com
*.web.plus.espnqa.com
www.espn.com
espnqa.com
cdn.secure.espn.go.com
cdn.espnqa.com
espnqa.com
dcs7deportes.geo.hosted.espn.com
espn.com
espnqa.com
espnqa.com
games.espnqa.com
espnqa.com
www.espn.com
espnqa.com
www.espnqa.com
cdn.espnqa.com
www.espn.com
www.espn.com
espnqa.com
espnqa.com
tredir.ppe.go.com
espn.com
creativestudio.espnqa.com
cdp-dev-airflow-cluster.aws.dp.hosted.espndev.com
dcs7deportes.geo.hosted.espnqa.com
www.espnqa.com
www.espn.com
cdn.espnqa.com
www.espn.com
dcf.espn.com
www.espnqa.com
espn.com
editions.espnqa.com
*.cms.internal.espnqa.com
www.espnqa.com
espn.com
www.espn.com
cdn.secure.espn.go.com
www.espn.com
espnqa.com
csr-nonprod3-axis.disney.network
cdn.espnqa.com
espnqa.com
dcf.espn.com
www.espn.com
espnqa.com
dcf.espn.com
www.espnqa.com
www.espn.com
www.espnqa.com
internal.espnqa.com
www.espn.com
espnqa.com
espnqa.com
espn.com
csr-nonprod3-axis.disney.network
dcf.espn.com
www.espnqa.com
www.espnqa.com
www.espn.com
abcfeqa.com
*.api.espnqa.com
dcs7deportes.geo.hosted.espnqa.com
cdn.secure.espn.go.com
www.aws.espn.com
www.espnqa.com
tredir.ppe.go.com
espnqa.com
espnqa.com
cdn.espnqa.com
www.aws.espn.com
www.espnqa.com
www.espn.com
tredir.ppe.go.com
cdn.secure.espn.go.com
r.espnqa.com
www.aws.espn.com
cdn.secure.espn.go.com
cdn.espnqa.com
cdn.espnqa.com
espnqa.com
dev-cdp-nifi-cluster.aws.dp.hosted.espndev.com
www.espnqa.com
cdn.espnqa.com
espn.com

Certificate

The complete raw certificate details for www.espnqa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILuDCCCqCgAwIBAgIQEdkRnlQlhR8AAAAAUOr01jANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x
ODEyMDYyMjQyMDJaFw0xOTA5MjUyMzEyMDFaMG8xCzAJBgNVBAYTAlVTMRMwEQYD
VQQIEwpDYWxpZm9ybmlhMRAwDgYDVQQHEwdCdXJiYW5rMSAwHgYDVQQKExdUaGUg
V2FsdCBEaXNuZXkgQ29tcGFueTEXMBUGA1UEAxMOd3d3LmVzcG5xYS5jb20wggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpV63tX0S92yWmB9pep1/OpXpV
lHMZCDHS2QzBp8DYZ5yxyEti+TbZemuKJSP+GLfOCVA1IrrII0H/eHIU8hulkPdl
RiowcXtfejpXoNTK3kNLpGzN3NDSmuGJPXhDB0y/w0+ZoLregCDq3jBjyk8ADm9B
svHu1oqZmlUuSacS/jbZvtTsXd9sYnK0VvyngbMl4p619QrjOL8AgjfMbtEIfgnq
P57m6qDG9OKjRu6HjWZ4HC26UqUH0cCviwvTLCOWDth/44LOU/bomoVQYgrwvmcG
JBCZRy6W+mfoI0iGNsDNHx3JReTXt5ATvGLP7ry+JVMsC7CoLGMhoALa3CupAgMB
AAGjgggCMIIH/jCCBRQGA1UdEQSCBQswggUHgg53d3cuZXNwbnFhLmNvbYIMKi5l
c3BucWEuY29tggplc3BucWEuY29tggllc3BucWEuY2yCCyouZXNwbnFhLmNsgg8q
LmFwaS5lc3BucWEuY2yCDWVzcG5xYS5jb20uYXWCDyouZXNwbnFhLmNvbS5hdYIT
Ki5hcGkuZXNwbnFhLmNvbS5hdYIYKi5jb3JlLmFwaS5lc3BucWEuY29tLmF1gg1l
c3BucWEuY29tLmNvgg8qLmVzcG5xYS5jb20uY2+CEyouYXBpLmVzcG5xYS5jb20u
Y2+CGCouY29yZS5hcGkuZXNwbnFhLmNvbS5jb4INZXNwbnFhLmNvbS5teIIPKi5l
c3BucWEuY29tLm14ghMqLmFwaS5lc3BucWEuY29tLm14ghgqLmNvcmUuYXBpLmVz
cG5xYS5jb20ubXiCDGVzcG5xYS5jby51a4IOKi5lc3BucWEuY28udWuCEiouYXBp
LmVzcG5xYS5jby51a4IXKi5jb3JlLmFwaS5lc3BucWEuY28udWuCCWVzcG5xYS5p
boILKi5lc3BucWEuaW6CDyouYXBpLmVzcG5xYS5pboIUKi5jb3JlLmFwaS5lc3Bu
cWEuaW6CFyouZ2VvLmhvc3RlZC5lc3BucWEuY29tgiEqLnVzLWVhc3QtMS5hd3Mu
aG9zdGVkLmVzcG5xYS5jb22CISoudXMtd2VzdC0yLmF3cy5ob3N0ZWQuZXNwbnFh
LmNvbYIhKi5ldS13ZXN0LTEuYXdzLmhvc3RlZC5lc3BucWEuY29tghUqLmNvcmUu
YXBpLmVzcG5xYS5jb22CECouYXBpLmVzcG5xYS5jb22CFCouY29yZS5hcGkuZXNw
bnFhLmNsgg1lc3BucWEuY29tLmJygg8qLmVzcG5xYS5jb20uYnKCEyouYXBpLmVz
cG5xYS5jb20uYnKCGCouY29yZS5hcGkuZXNwbnFhLmNvbS5icoINZXNwbnFhLmNv
bS5hcoIPKi5lc3BucWEuY29tLmFyghMqLmFwaS5lc3BucWEuY29tLmFyghgqLmNv
cmUuYXBpLmVzcG5xYS5jb20uYXKCDCouZXNwbnFhLm5ldIIaZmFuLmNvcmUuYXBp
LnFhLmVzcG5xYS5jb22CGGFwaS5zaG9ydHN0b3AuZXNwbnFhLmNvbYIbd29ya2Vy
LnNob3J0c3RvcC5lc3BucWEuY29tghlhcGkucGFydG5lcnB1Yi5lc3BucWEuY29t
ghx3b3JrZXIucGFydG5lcnB1Yi5lc3BucWEuY29tghthZG1pbi5wYXJ0bmVycHVi
LmVzcG5xYS5jb22CG2NsaWVudC5zaG9ydHN0b3AuZXNwbnFhLmNvbYIaYWRtaW4u
c2hvcnRzdG9wLmVzcG5xYS5jb22CFWZhbi5hcGkucWEuZXNwbnFhLmNvbYISZXNw
bmNyaWNpbmZvcWEuY29tghZ3d3cuZXNwbmNyaWNpbmZvcWEuY29tghNxYS5lc3Bu
Y3JpY2luZm8uY29tghUqLmludGVybmFsLmVzcG5xYS5jb22CF3NpdGUud2ViLmFw
aS5lc3BucWEuY29tghdzaXRlLmZhbi5hcGkuZXNwbnFhLmNvbYIac2l0ZS5tb2Jp
bGUuYXBpLmVzcG5xYS5jb22CDSouZXNwbmNkbi5jb22CDWVzcG5xYS5jb20ucGWC
EXd3dy5lc3BucWEuY29tLnBlMIIBfAYKKwYBBAHWeQIEAgSCAWwEggFoAWYAdQCH
db/nWXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCDDwAAAWeFytuSAAAEAwBGMEQC
IEr5SfGhsJ8YXTal3pA92D771CosdJ333HcLLBBEhEoPAiAqolqvKetEg3YSnOcx
uMKhsedI0OXYPT1tFysVGJ8XPAB1AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+j
qh0HE9MMAAABZ4XK25gAAAQDAEYwRAIgFAtWK4UKMMmukJOmYturCeDIPDFlsj54
F53bg9TH/jECICFLujNAjSWpW6ovE9lK+X62IbG5EDyGz/de0P3nJRpzAHYAu9nf
vB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFnhcrbdwAABAMARzBFAiAG
0vfPo4uk+EFFRFde/esCSgwntJI5pOtWIB2TfitVNQIhALEz9LidxiJYj+/Fkx/h
+6Ao9Xep5oBPuYNatRxGsQcIMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5l
bnRydXN0Lm5ldC9sZXZlbDFrLmNybDBLBgNVHSAERDBCMDYGCmCGSAGG+mwKAQUw
KDAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EM
AQICMGgGCCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50
cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFr
LWNoYWluMjU2LmNlcjAfBgNVHSMEGDAWgBSConB03bxTP8971PfNf6dgxgpMvzAd
BgNVHQ4EFgQU2biajPpbPBgDegyVE5XnJ/cHLSswCQYDVR0TBAIwADANBgkqhkiG
9w0BAQsFAAOCAQEA1l63xKqKHuPrzUu57y7FkpKjCput4XFkhyWtg4ClMb7rhHsq
oXGsibDEiQNJ1LdXYG7T1iaU2r4oa0OnXT0VVJEq3jgCz61Vt2iqI8xn7GzRSJTl
h2WYE79YyXQ9ZkGoKAMZg17dk3GCijyMn6sasNFFd+sx0ny2MEEsKgvJEs42wOm8
srVf8pqRMssv/7xKWijQX3zOT8E6+F4v8FBkISJU2W33BZh7t4Bku2fPIbMNXM1F
1OKvq8cprD/SFAKeRx21K5DX66deRNPaRglORo3vxW71mKt06KI21i7y8I6tmDF7
jRjDiWnm+oLwGYg5OqYXpyX3iRzD7fbs+q603A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVet7V9EvdslpgfaXqdf
zqV6VZRzGQgx0tkMwafA2GecschLYvk22XpriiUj/hi3zglQNSK6yCNB/3hyFPIb
pZD3ZUYqMHF7X3o6V6DUyt5DS6RszdzQ0prhiT14QwdMv8NPmaC63oAg6t4wY8pP
AA5vQbLx7taKmZpVLkmnEv422b7U7F3fbGJytFb8p4GzJeKetfUK4zi/AII3zG7R
CH4J6j+e5uqgxvTio0buh41meBwtulKlB9HAr4sL0ywjlg7Yf+OCzlP26JqFUGIK
8L5nBiQQmUculvpn6CNIhjbAzR8dyUXk17eQE7xiz+68viVTLAuwqCxjIaAC2twr
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 23723961691700666493828399612935468246
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-06 22:42:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-25 23:12:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Burbank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Walt Disney Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.espnqa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21377509864452037996177899128229654111765070763176617040094565547488517216701294303002207663520334521352642814813009881972673093114454533172573312227756296850482977957364084196282112213778897764354468388940826953119939262857986916347042963193479428424327640358962917607901343780997063408856992998302000590678536138256279758694233386167669229243378926878371448568428759237791974114858957856269935785176495309097227077540483443910821873454826124771030526365081164336471173291560495645540828446711583257340661440088577180231874651302119955634442729742170535201041785771535926688876624813894274498280068884944810762054569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1291 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core.api.espnqa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core.api.espnqa.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core.api.espnqa.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core.api.espnqa.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core.api.espnqa.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geo.hosted.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-east-1.aws.hosted.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-west-2.aws.hosted.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu-west-1.aws.hosted.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core.api.espnqa.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core.api.espnqa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core.api.espnqa.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.qa.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.shortstop.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worker.shortstop.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.partnerpub.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worker.partnerpub.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.partnerpub.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.shortstop.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shortstop.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.api.qa.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espncricinfoqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espncricinfoqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.espncricinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.web.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.fan.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.mobile.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espnqa.com.pe'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9b89a8cfa5b3c18037a0c951395e727f7072d2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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