*.nfl.net

- National Football League -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0d:a4:9e:dd:5e:fd:12:57:e0:21:79:9b:ed:3d:2a:62 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

National Football League

Organization: National Football League
Organization unit: IT
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:a4:9e:dd:5e:fd:12:57:e0:21:79:9b:ed:3d:2a:62
Serial Number (int): 18134722789542446474356772177562118754
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d8:c0:f4:0a:97:3e:51:c2:2b:2e:74:7a:89:a1:5d:e6:8b:4e:b0:a3
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 26:00:06:0e:10:39:f2:10:2e:f3:2a:42:69:b0:d9:87:45:3c:f7:c0
Fingerprint (sha256): 62:14:c3:a5:f7:c8:60:77:e0:2b:00:75:ec:e7:8a:47:94:1c:d3:3c:d8:1d:e5:b4:5c:21:7f:4a:ff:c1:e5:6e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate *.nfl.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.nfl.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.nfl.net
nfl.net

Other certificates including the domain name nfl.net

(limited to 100 certificates)
remotes.nfl.net
itsupport.adhocteam.us
mdmadmin.nfl.net
NY-ISE-PDP-1.nfl.net
wifi.bears.nfl.net
helpdesk.ytl.com
helpdesk.ytl.com
helpdesk.aaanm.org
servicedesk.smileservicedesk.co.uk
efc.nfl.net
*.vikings.nfl.net
helpdesk.ytl.com
helpdesk.ytl.com
dag.buf.nfl.net
ithelpdesk.splashbi.com
ithelpdesk.splashbi.com
safsv-telexpe.broncos.nfl.net
helpdesk.pcrm.org
*.bears.nfl.net
helpdesk.ytl.com
mdm.NFL.net
mdm.NFL.net
helpdesk.ytl.com
remotes.nfl.net
nyoktasync01.us.nfl.net
portalitsuporte.griner.co.com
helpdesk.ytl.com
mdmadmin.NFL.net
vikings.nfl.net
itservicedesk.inspireer.com
NFL-EE01.nfl.net
nflrms.nfl.net
nflrms.nfl.net
helpdesk.ytl.com
insight.nfl.net
titansvpn.nfl.net
outlook.nfl.net
jaxvx2010.jax.nfl.net
jagmail.mail.jaguars.com
mediainsights.nfl.net
helpdesk.ytl.com
portalitsuporte.griner.co.com
tickets.nfl.net
LyncWebEx.nfl.net
billsasa1.buf.nfl.net
portalitsuporte.griner.co.com
NFL-VCS-Expressway.nfl.net
helpdesk.ytl.com
laoktasync01.us.nfl.net
helpdesk.ytl.com
wifi.bears.nfl.net
itsupport.adhocteam.us
helpdesk.ytl.com
mysites.buf.nfl.net
outlook.nfl.net
portalitsuporte.griner.co.com
owa.nfl.net
vikings.nfl.net
helpdesk.ytl.com
remotes.nfl.net
owa.lon.nfl.net
support.opiant.com
helpdesk.ytl.com
vpn.buf.nfl.net
outlook.nfl.net
wifi.bears.nfl.net
mdmadmin.nfl.net
im.nfl.net
nfladfs.nfl.net
helpdesk.ytl.com
cyber-awareness.nfl.net
nfladfs.nfl.net
im.nfl.net
vpn.buf.nfl.net
helpdesk.ytl.com
outlook.nfl.net
pltitans.nfl.net
helpdesk.ytl.com
helpdesk.ytl.com
helpdesk.pcrm.org
*.nfl.net
huddle.buf.nfl.net
itsupport.adhocteam.us
helpdesk.ytl.com
NFL-EE02.nfl.net
helpdesk.ravens.nfl.net
itservicedesk.inspireer.com
helpdesk.ytl.com
*.vikings.nfl.net
helpdesk.ytl.com
itsupport.qbank.com.au
insight2.nfl.net
helpdesk.ytl.com
nflflex.nfl.net
*.nfl.net
insight.nfl.net
remotes.nfl.net
ravensaw.nfl.net
*.nfl.net
clearpass.vikings.nfl.net

Certificate

The complete raw certificate details for *.nfl.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqGzt7MF4pVRMFBDpS1q
/MedgIVS2SHczxIVZEnLITBO/gOq68QodhKnQrA3oSpO6rY2VI0b9Coep7rIbOt1
DMgsyEZ785ZPbRt+RIt0DOWD3Z3MQHJp7KfECJ3nVvka6K2AYl25FPdXKNKyRP0m
EuWy2jdtBN1BKbG/bkFE7fCvUOCc+w8fNphnTSGT4h66sMfpkDiU3x81huNdy0D3
x5wz9C4/60nOAdn/ddM4uyb0VDAZodCGNVdckqBsoWnCS20oPGOJBvMROMJqfr9X
IkhwuBmrmzA+PWsjn3l6FabTrSZaVVmRQnN/7ifbMKhWEHYzi//sWuDbo4dpqtIk
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18134722789542446474356772177562118754
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Football League'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nfl.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26084829061832160818230463534336751579979455607627086596680687111343944155138130137476144723621188632627876770947703151905472999407885709893117737123560140226557818108392609426494828116640492904972745388812961556982488027554352518803605610537082535336524422696536694519698739394839098163618160902068404881799250365289212621225156335270310544203166962616020461168634287433099481037971742411859945961894728857698691806647916996719650411121669788172104506637667823932183201838579783949778946122978847716347024860489330970832678338051750379187984335351794287700164858270269514295595048907474722237535411183167688508843097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d8c0f40a973e51c22b2e747a89a15de68b4eb0a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nfl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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