dlc-cdn.scorpion-ea.com

- Electronic Arts, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0d:21:48:de:1f:e1:76:5d:cc:b8:cb:e7:eb:d2:fb:35 was issued on by DigiCert Inc.

With 25 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Electronic Arts, Inc.

Organization: Electronic Arts, Inc.
State / Province: California
Locality: Redwood City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:21:48:de:1f:e1:76:5d:cc:b8:cb:e7:eb:d2:fb:35
Serial Number (int): 17452787673545699329863399075665345333
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 27:4b:77:11:52:a5:5b:2b:f8:00:25:ea:86:ea:4c:90:50:22:5a:00
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): bd:30:d4:89:ec:b1:aa:6a:13:a7:d4:3e:a5:ca:99:9b:66:a1:f3:4f
Fingerprint (sha256): 4a:f4:f0:09:c0:9a:5c:b6:ac:29:cb:d0:56:dd:8f:ab:86:da:10:18:61:03:99:c1:69:fd:ca:4a:81:c5:e0:5a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g7.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g7.crl

Check the revocation status for certificate dlc-cdn.scorpion-ea.com

25

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dlc-cdn.scorpion-ea.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.staging.spore.com
staging.pollinator.spore.com
staging.community.spore.com
game-config-cdn.scorpion-ea.com
dlc-cdn.scorpion-ea.com
dev.ncode.ea.com
dev-game-config-cdn.scorpion-ea.com
dev-dlc-cdn.scorpion-ea.com
bioware.com
akamai.cdn.ea.com
*.test.service.easports.com
*.stryder.respawn.com
*.spore.com
*.simcitybuildit.com
*.service.easports.com
*.mgbapex.com
*.mgapex.com
*.mcr.ea.com
*.load.service.easports.com
*.ea.com
*.devmgbapex.com
*.devmgapex.com
*.contentengine.ea.com
*.cert.service.easports.com
*.bioware.com

Other certificates including the domain name scorpion-ea.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for dlc-cdn.scorpion-ea.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx64EmjEo9+x9RfXBGzet
O5w45HMvFpD1bLywz16Vrt87guBeliF/VDMnjjBADrUtksuxiBbspwoFW06gS7GR
O06zLVSIyAo3LsBvgl/TsKkCKdbduSNtoy4/eDrC2gLH0xYhF1jkWtJXBVZQKua/
qmU5ZcsimSFS1MNrJToPrSHXLdCSMUTSMbFt278NtpEqzNFOVHEiD/Dix0t04ZyF
2AtRBZq7SZcAtrz/kqRLp3RUAKEqsj0HxfHXP/UOnIQZKsF/FU1io434ok5fDAXK
qD97hJC9XP8cfgusHMPxiFaih5USHFHWHxkdKkiA6oL9PjaF6iK58PcXLiBxJoJP
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17452787673545699329863399075665345333
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redwood City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Electronic Arts, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dlc-cdn.scorpion-ea.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25207234151327826978291039645423922175351942739164914656383268359228957780598120383623640898611715497776596926336690431141549478778500129526184595593993146315887071823594523895947434841578176355036553721046474797511221535307732229159942079767467882890475146270021402733330384092697498795489616309689388403860190691015680449216881862368478790199085056571114366341359323968163649448885995157488174745127076596489514923546255562116980442980622573174903330258472621398067619365893455580625146170428281279306365818367237390266521511484149995313605759499943444628337009159410048544903512022590544321618515369501588141002569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							274b771152a55b2bf80025ea86ea4c9050225a00
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (556 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.spore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.pollinator.spore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.community.spore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'game-config-cdn.scorpion-ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlc-cdn.scorpion-ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ncode.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-game-config-cdn.scorpion-ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-dlc-cdn.scorpion-ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akamai.cdn.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.service.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stryder.respawn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simcitybuildit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.service.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mgbapex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mgapex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcr.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.load.service.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devmgbapex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devmgapex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contentengine.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cert.service.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bioware.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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