www.espnqa.com

- Disney Enterprises, Inc -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 6b:96:a3:df:a0:50:24:2f:00:00:00:00:50:f4:29:0e was issued on by Entrust, Inc..

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Disney Enterprises, Inc

Organization: Disney Enterprises, Inc
State / Province: California
Locality: Burbank
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6b:96:a3:df:a0:50:24:2f:00:00:00:00:50:f4:29:0e
Serial Number (int): 143009563828026344957388052764516690190
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d9:b8:9a:8c:fa:5b:3c:18:03:7a:0c:95:13:95:e7:27:f7:07:2d:2b
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 84:69:9f:10:71:db:16:ca:65:69:66:db:33:c1:94:d1:1c:6f:d4:0b
Fingerprint (sha256): 4c:25:f4:d8:c1:75:2b:fd:65:ef:6a:11:47:16:63:79:9b:72:43:d8:cb:e1:d0:7c:67:62:cf:86:39:19:b3:37

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.espnqa.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.espnqa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.espnqa.com
*.espnqa.com
espnqa.com
*.geo.hosted.espnqa.com
*.us-east-1.aws.hosted.espnqa.com
*.us-west-2.aws.hosted.espnqa.com
*.eu-west-1.aws.hosted.espnqa.com
fan.core.api.espnqa.com
*.api.espnqa.com
espnqa.cl
*.espnqa.cl
*.api.espnqa.cl
fan.core.api.espnqa.cl
espnqa.com.au
*.espnqa.com.au
*.api.espnqa.com.au
fan.core.api.espnqa.com.au
espnqa.com.co
*.espnqa.com.co
*.api.espnqa.com.co
fan.core.api.espnqa.com.co
espnqa.com.mx
*.espnqa.com.mx
*.api.espnqa.com.mx
fan.core.api.espnqa.com.mx
espnqa.co.uk
*.espnqa.co.uk
*.api.espnqa.co.uk
fan.core.api.espnqa.co.uk
espnqa.in
*.espnqa.in
*.api.espnqa.in
fan.core.api.espnqa.in
espnqa.com.br
*.espnqa.com.br
*.api.espnqa.com.br
fan.core.api.espnqa.com.br
espnqa.com.ar
*.espnqa.com.ar
*.api.espnqa.com.ar
fan.core.api.espnqa.com.ar
*.espnqa.net
fan.core.api.qa.espnqa.com
api.shortstop.espnqa.com
worker.shortstop.espnqa.com
api.partnerpub.espnqa.com
worker.partnerpub.espnqa.com
admin.partnerpub.espnqa.com
client.shortstop.espnqa.com
admin.shortstop.espnqa.com
fan.api.qa.espnqa.com
espncricinfoqa.com
www.espncricinfoqa.com
qa.espncricinfo.com
*.internal.espnqa.com
site.web.api.espnqa.com
site.fan.api.espnqa.com
site.mobile.api.espnqa.com
*.espncdn.com
espnqa.com.pe
www.espnqa.com.pe
espnqa.com.ve
www.espnqa.com.ve
qa.secsports.com
onefeed.fan.api.qa.espnqa.com
favesfeed.fan.api.qa.espnqa.com
watchfeed.fan.api.qa.espnqa.com
watch.admin.espnqa.com
watch.video.api.espnqa.com
watch.auth.api.espnqa.com
watch.product.api.espnqa.com
artwork.api.espnqa.com
sportscenter.fan.api.espnqa.com
affiliate.api.espnqa.com
pcc.api.espnqa.com
watch.graph.api.espnqa.com
events.api.espnqa.com
restrictions.api.espnqa.com
fan.core.api.espnqa.com.pe
sportscenter.api.espnqa.com
espnqa.com.sg
espnqa.com.do
espnqa.co.cr
espnqa.com.pa
espnqa.com.ec
espnqa.com.gt
espnqa.com.uy
www.espnqa.com.sg
www.espnqa.com.do
www.espnqa.co.cr
www.espnqa.com.pa
www.espnqa.com.ec
www.espnqa.com.gt
www.espnqa.com.uy
*.core.api.espnqa.com

Other certificates including the domain name espnqa.com

(limited to 100 certificates)
espnqa.com
editions.espnqa.com
m.espnqa.com
cdn.secure.espn.go.com
www.espnqa.com
espnqa.com
espnqa.com
broadband.espnqa.com
espnqa.com
cdn.espnqa.com
cdn.espnqa.com
www.aws.espn.com
www.espnqa.com
espnqa.com
www.espn.com
*.web.plus.espnqa.com
www.espn.com
espnqa.com
cdn.secure.espn.go.com
cdn.espnqa.com
espnqa.com
dcs7deportes.geo.hosted.espn.com
espn.com
espnqa.com
espnqa.com
games.espnqa.com
espnqa.com
www.espn.com
espnqa.com
www.espnqa.com
cdn.espnqa.com
www.espn.com
www.espn.com
espnqa.com
espnqa.com
tredir.ppe.go.com
espn.com
creativestudio.espnqa.com
cdp-dev-airflow-cluster.aws.dp.hosted.espndev.com
dcs7deportes.geo.hosted.espnqa.com
www.espnqa.com
www.espn.com
cdn.espnqa.com
www.espn.com
dcf.espn.com
www.espnqa.com
espn.com
editions.espnqa.com
*.cms.internal.espnqa.com
www.espnqa.com
espn.com
www.espn.com
cdn.secure.espn.go.com
www.espn.com
espnqa.com
csr-nonprod3-axis.disney.network
cdn.espnqa.com
espnqa.com
dcf.espn.com
www.espn.com
espnqa.com
dcf.espn.com
www.espnqa.com
www.espn.com
www.espnqa.com
internal.espnqa.com
www.espn.com
espnqa.com
espnqa.com
espn.com
csr-nonprod3-axis.disney.network
dcf.espn.com
www.espnqa.com
www.espnqa.com
www.espn.com
abcfeqa.com
*.api.espnqa.com
dcs7deportes.geo.hosted.espnqa.com
cdn.secure.espn.go.com
www.aws.espn.com
www.espnqa.com
tredir.ppe.go.com
espnqa.com
espnqa.com
cdn.espnqa.com
www.aws.espn.com
www.espnqa.com
www.espn.com
tredir.ppe.go.com
cdn.secure.espn.go.com
r.espnqa.com
www.aws.espn.com
cdn.secure.espn.go.com
cdn.espnqa.com
cdn.espnqa.com
espnqa.com
dev-cdp-nifi-cluster.aws.dp.hosted.espndev.com
www.espnqa.com
cdn.espnqa.com
espn.com

Certificate

The complete raw certificate details for www.espnqa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVet7V9EvdslpgfaXqdf
zqV6VZRzGQgx0tkMwafA2GecschLYvk22XpriiUj/hi3zglQNSK6yCNB/3hyFPIb
pZD3ZUYqMHF7X3o6V6DUyt5DS6RszdzQ0prhiT14QwdMv8NPmaC63oAg6t4wY8pP
AA5vQbLx7taKmZpVLkmnEv422b7U7F3fbGJytFb8p4GzJeKetfUK4zi/AII3zG7R
CH4J6j+e5uqgxvTio0buh41meBwtulKlB9HAr4sL0ywjlg7Yf+OCzlP26JqFUGIK
8L5nBiQQmUculvpn6CNIhjbAzR8dyUXk17eQE7xiz+68viVTLAuwqCxjIaAC2twr
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 143009563828026344957388052764516690190
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-10 09:50:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 10:20:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Burbank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Disney Enterprises, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.espnqa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21377509864452037996177899128229654111765070763176617040094565547488517216701294303002207663520334521352642814813009881972673093114454533172573312227756296850482977957364084196282112213778897764354468388940826953119939262857986916347042963193479428424327640358962917607901343780997063408856992998302000590678536138256279758694233386167669229243378926878371448568428759237791974114858957856269935785176495309097227077540483443910821873454826124771030526365081164336471173291560495645540828446711583257340661440088577180231874651302119955634442729742170535201041785771535926688876624813894274498280068884944810762054569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2066 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geo.hosted.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-east-1.aws.hosted.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-west-2.aws.hosted.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu-west-1.aws.hosted.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espnqa.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espnqa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espnqa.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espnqa.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espnqa.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espnqa.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espnqa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espnqa.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.qa.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.shortstop.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worker.shortstop.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.partnerpub.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worker.partnerpub.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.partnerpub.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.shortstop.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shortstop.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.api.qa.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espncricinfoqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espncricinfoqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.espncricinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.web.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.fan.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.mobile.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espnqa.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espnqa.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.secsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onefeed.fan.api.qa.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'favesfeed.fan.api.qa.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchfeed.fan.api.qa.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.admin.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.video.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.auth.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.product.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artwork.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportscenter.fan.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliate.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcc.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.graph.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restrictions.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espnqa.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportscenter.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espnqa.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espnqa.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espnqa.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espnqa.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espnqa.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espnqa.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espnqa.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core.api.espnqa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							01670075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016bdb660b4c000004030046304402207826e3540b9d34fc33073702beedf6032397d63dcd64ca546a520d052600544b02201524923137f2ead1000b88966e7dbf9237921d6a92aee13067bd4df8c60346cf0077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016bdb660b5a0000040300483046022100b1c207308f6fef441f99bfa8975c966731ab1d9bc9d205c8f3ce60afeb328d04022100eb61083bd5e9dbce1f51e15542fc42454c83142ed27f25b5a81497e26fb16d9b007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016bdb660b98000004030046304402202e8d53615b0dd801a4c3fa4f166d2114a7f61febb2ff5e516bfcda21332531c102204acce41e42dd113a2afbf6d4828624baa6c87f923f76ec0c78a7ef1ad9d1a5f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9b89a8cfa5b3c18037a0c951395e727f7072d2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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