www.aws.espn.com
- Disney Enterprises, Inc -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 16:84:5e:f5:7e:35:0e:33:00:00:00:00:50:ec:37:47 was issued on by Entrust, Inc..
With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Disney Enterprises, Inc
Organization:
Disney Enterprises, Inc
State / Province:
Washington
Locality: Seattle
Country: US
Locality: Seattle
Country: US
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 16:84:5e:f5:7e:35:0e:33:00:00:00:00:50:ec:37:47Serial Number (int): 29930325089056557062476104242672973639
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId: 70:d5:30:8d:64:3b:e9:20:0f:05:fd:32:0d:aa:73:40:47:5e:dd:5e
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): ae:b0:69:91:8b:07:5c:3e:e8:0a:bd:b4:ba:3f:c6:0c:89:96:9c:50
Fingerprint (sha256): 63:e4:0b:a8:65:87:5b:06:35:d0:9f:f4:a0:38:7a:c5:0c:0e:96:8f:14:75:39:f5:3a:6e:30:a1:b7:37:15:6b
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate www.aws.espn.com
57
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.aws.espn.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.aws.espn.com
aws.espn.com
watch.video.api.espn.com
watch.video.api.staging.espn.com
watch.video.api.qa.espn.com
watch.video.api.dev.espn.com
watch.auth.api.espn.com
watch.auth.api.staging.espn.com
watch.auth.api.qa.espn.com
watch.auth.api.dev.espn.com
watch.product.api.espn.com
watch.product.api.staging.espn.com
watch.product.api.qa.espn.com
watch.product.api.dev.espn.com
partner-pub.api.espn.com
partner-pub.api.dev.espn.com
partner-pub.api.qa.espn.com
shortstop.api.espn.com
watch.auth.api.espn.go.com
watch.auth.api.dev.espn.go.com
watch.auth.api.qa.espn.go.com
watch.auth.api.staging.espn.go.com
artwork.api.dev.espn.com
artwork.api.qa.espn.com
artwork.api.espn.com
sportscenter.fan.api.espn.com
sportscenterapi.qa.geo.espn.com
sportscenterapi.prod.geo.espn.com
sportscenter.api.staging.espn.com
affiliate.api.dev.espn.com
affiliate.api.qa.espn.com
affiliate.api.espn.com
pcc.api.dev.espn.com
pcc.api.qa.espn.com
pcc.api.staging.espn.com
pcc.api.espn.com
watch.graph.api.espn.com
watch.graph.api.staging.espn.com
watch.graph.api.qa.espn.com
watch.graph.api.dev.espn.com
events.api.espn.com
events.api.staging.espn.com
events.api.qa.espn.com
events.api.dev.espn.com
restrictions.api.espn.com
restrictions.api.staging.espn.com
restrictions.api.qa.espn.com
restrictions.api.dev.espn.com
sportscenter.fan.api.dev.espn.com
sportscenter.fan.api.qa.espn.com
sportscenter.fan.api.staging.espn.com
glogo.api.espn.com
glogo.api.qa.espn.com
glogo.api.dev.espn.com
partner-pub.api.prod.espn.com
onefeed.fan.api.qa.espnqa.com
onefeed.fan.api.espn.com
aws.espn.com
watch.video.api.espn.com
watch.video.api.staging.espn.com
watch.video.api.qa.espn.com
watch.video.api.dev.espn.com
watch.auth.api.espn.com
watch.auth.api.staging.espn.com
watch.auth.api.qa.espn.com
watch.auth.api.dev.espn.com
watch.product.api.espn.com
watch.product.api.staging.espn.com
watch.product.api.qa.espn.com
watch.product.api.dev.espn.com
partner-pub.api.espn.com
partner-pub.api.dev.espn.com
partner-pub.api.qa.espn.com
shortstop.api.espn.com
watch.auth.api.espn.go.com
watch.auth.api.dev.espn.go.com
watch.auth.api.qa.espn.go.com
watch.auth.api.staging.espn.go.com
artwork.api.dev.espn.com
artwork.api.qa.espn.com
artwork.api.espn.com
sportscenter.fan.api.espn.com
sportscenterapi.qa.geo.espn.com
sportscenterapi.prod.geo.espn.com
sportscenter.api.staging.espn.com
affiliate.api.dev.espn.com
affiliate.api.qa.espn.com
affiliate.api.espn.com
pcc.api.dev.espn.com
pcc.api.qa.espn.com
pcc.api.staging.espn.com
pcc.api.espn.com
watch.graph.api.espn.com
watch.graph.api.staging.espn.com
watch.graph.api.qa.espn.com
watch.graph.api.dev.espn.com
events.api.espn.com
events.api.staging.espn.com
events.api.qa.espn.com
events.api.dev.espn.com
restrictions.api.espn.com
restrictions.api.staging.espn.com
restrictions.api.qa.espn.com
restrictions.api.dev.espn.com
sportscenter.fan.api.dev.espn.com
sportscenter.fan.api.qa.espn.com
sportscenter.fan.api.staging.espn.com
glogo.api.espn.com
glogo.api.qa.espn.com
glogo.api.dev.espn.com
partner-pub.api.prod.espn.com
onefeed.fan.api.qa.espnqa.com
onefeed.fan.api.espn.com
Other certificates including the domain name espn.com
(limited to 100 certificates)
video.disney.com
espn.com
www.aws.espn.com
1927-the-diary-of-myles-thomas.espn.com
insider.espn.com
cert-00003-cdnedge-bluemix.akamaized.net
video.disney.com
UCwebn7ext.disney.com
tredire.perf.go.com
cert-00003-cdnedge-bluemix.akamaized.net
assets.espncdn.com
www.aws.espn.com
support.espn.com
cdn.secure.espn.go.com
cert-00003-cdnedge-bluemix.akamaized.net
cert-00003-cdnedge-bluemix.akamaized.net
www.espnqa.com
site.api.espn.com
fillmore.espn.com
watch.video.api.qa.espn.com
fantasyfc.espn.com
*.media.plus.espn.com
fantasy.espn.com
email.axioshq.espn.com
support.espn.com
*.media.plus.espn.com
espn.com
btlink.web.plus.espn.com
internal.espn.com
media.video-cdn.espn.com
assets.espncdn.com
tredir.espn.com
support.espn.com
affiliates.espn.com
1927-the-diary-of-myles-thomas.espn.com
*.svcs.plus.espn.com
pro.creativearchive.espn.com
affiliates.espn.com
mft.espn.com
beta-shortstop.espn.com
cdn.espnqa.com
iptvhmg026.espn.com
log.go.com
cdn.espnqa.com
www.aws.espn.com
mft.espn.com
editions.espn.com
espnqa.com
assets.espncdn.com
video.disney.com
studioc.espn.com
mobileapp.espn.com
www.espn.com
media.plus.espn.com
affiliates.espn.com
web.plus.espn.com
fantasy.espn.com
go.web.plus.espn.com
cert-00003-cdnedge-bluemix.akamaized.net
UCAEN7.Disney.com
www.espn.com
eventcenter.espn.com
ESPNLMProdCluster01.aws.hosted.espn.com
fantasyfc.espn.com
cdn.secure.espn.go.com
editions.espn.com
dcs7soccernet.us-west-2.aws.internal.espn.com
cdn.espnqa.com
cert-00003-cdnedge-bluemix.akamaized.net
wirelessreg.espn.com
affiliates.espn.com
video.disney.com
channelfinder.espn.com
cert-00003-cdnedge-bluemix.akamaized.net
dcs7deportes.geo.hosted.espn.com
affiliates.espn.com
email.axioshq.espn.com
go.web.plus.espn.com
dcs7deportes.geo.hosted.espn.com
outlook.espn.com
fan.api.espn.com
espn.com
*.media.plus.espn.com
media.video-cdn.espn.com
dmzexpe29d01v.espn.com
fan.core.api.espn.com
media.video-cdn.espn.com
assets.espncdn.com
tredir.espn.com
espn.com
insider.espn.com
log.go.com
sigmgr03.espn.com
*.cms.internal.espn.com
timekeeper.espn.com
aws.dp.hosted.espn.com
watch.video.api.qa.espn.com
espn.com
mft.espn.com
affiliate.disney.espn.com
espn.com
www.aws.espn.com
1927-the-diary-of-myles-thomas.espn.com
insider.espn.com
cert-00003-cdnedge-bluemix.akamaized.net
video.disney.com
UCwebn7ext.disney.com
tredire.perf.go.com
cert-00003-cdnedge-bluemix.akamaized.net
assets.espncdn.com
www.aws.espn.com
support.espn.com
cdn.secure.espn.go.com
cert-00003-cdnedge-bluemix.akamaized.net
cert-00003-cdnedge-bluemix.akamaized.net
www.espnqa.com
site.api.espn.com
fillmore.espn.com
watch.video.api.qa.espn.com
fantasyfc.espn.com
*.media.plus.espn.com
fantasy.espn.com
email.axioshq.espn.com
support.espn.com
*.media.plus.espn.com
espn.com
btlink.web.plus.espn.com
internal.espn.com
media.video-cdn.espn.com
assets.espncdn.com
tredir.espn.com
support.espn.com
affiliates.espn.com
1927-the-diary-of-myles-thomas.espn.com
*.svcs.plus.espn.com
pro.creativearchive.espn.com
affiliates.espn.com
mft.espn.com
beta-shortstop.espn.com
cdn.espnqa.com
iptvhmg026.espn.com
log.go.com
cdn.espnqa.com
www.aws.espn.com
mft.espn.com
editions.espn.com
espnqa.com
assets.espncdn.com
video.disney.com
studioc.espn.com
mobileapp.espn.com
www.espn.com
media.plus.espn.com
affiliates.espn.com
web.plus.espn.com
fantasy.espn.com
go.web.plus.espn.com
cert-00003-cdnedge-bluemix.akamaized.net
UCAEN7.Disney.com
www.espn.com
eventcenter.espn.com
ESPNLMProdCluster01.aws.hosted.espn.com
fantasyfc.espn.com
cdn.secure.espn.go.com
editions.espn.com
dcs7soccernet.us-west-2.aws.internal.espn.com
cdn.espnqa.com
cert-00003-cdnedge-bluemix.akamaized.net
wirelessreg.espn.com
affiliates.espn.com
video.disney.com
channelfinder.espn.com
cert-00003-cdnedge-bluemix.akamaized.net
dcs7deportes.geo.hosted.espn.com
affiliates.espn.com
email.axioshq.espn.com
go.web.plus.espn.com
dcs7deportes.geo.hosted.espn.com
outlook.espn.com
fan.api.espn.com
espn.com
*.media.plus.espn.com
media.video-cdn.espn.com
dmzexpe29d01v.espn.com
fan.core.api.espn.com
media.video-cdn.espn.com
assets.espncdn.com
tredir.espn.com
espn.com
insider.espn.com
log.go.com
sigmgr03.espn.com
*.cms.internal.espn.com
timekeeper.espn.com
aws.dp.hosted.espn.com
watch.video.api.qa.espn.com
espn.com
mft.espn.com
affiliate.disney.espn.com
Certificate
The complete raw certificate details for www.aws.espn.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIILjjCCCnagAwIBAgIQFoRe9X41DjMAAAAAUOw3RzANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x OTAxMTYwNzM3NDFaFw0xOTA2MDQwODA3MzlaMHExCzAJBgNVBAYTAlVTMRMwEQYD VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdTZWF0dGxlMSAwHgYDVQQKExdEaXNu ZXkgRW50ZXJwcmlzZXMsIEluYzEZMBcGA1UEAxMQd3d3LmF3cy5lc3BuLmNvbTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALpwhDjuAFpPuQMlg/p12rwj 6DAxM1JXSK8HEsyQsYkw+2PhRcOzGlO0exZHdRja6iV4n7Kf99QG7XfvYk4gj+TQ 8SCKjLURCsHccqQE1XqAPMhFrfHRprjeV19uNYIVBizR8ymuh07mTKdSz3XSGEmv nT8Q4liG8TlCGYxo15yqVLOeEwyBaidkh99TBYrh9gfE09Dw1dpLBhfVCAkwHsL0 Yus9WD+x8OZq45ypl6AUal1iVkjDrIVLTFkoLznw+azLz7WrPSHAWohnPyY9S2ZQ xX3cugG7LWDuk9J6DdzgDiDb/2f8S0GEvW56pcQpHycYn3JFnY3bKyB7Z9Ud1MkC AwEAAaOCB9YwggfSMBMGCisGAQQB1nkCBAMBAf8EAgUAMIIGUwYDVR0RBIIGSjCC BkaCEHd3dy5hd3MuZXNwbi5jb22CDGF3cy5lc3BuLmNvbYIYd2F0Y2gudmlkZW8u YXBpLmVzcG4uY29tgiB3YXRjaC52aWRlby5hcGkuc3RhZ2luZy5lc3BuLmNvbYIb d2F0Y2gudmlkZW8uYXBpLnFhLmVzcG4uY29tghx3YXRjaC52aWRlby5hcGkuZGV2 LmVzcG4uY29tghd3YXRjaC5hdXRoLmFwaS5lc3BuLmNvbYIfd2F0Y2guYXV0aC5h cGkuc3RhZ2luZy5lc3BuLmNvbYIad2F0Y2guYXV0aC5hcGkucWEuZXNwbi5jb22C G3dhdGNoLmF1dGguYXBpLmRldi5lc3BuLmNvbYIad2F0Y2gucHJvZHVjdC5hcGku ZXNwbi5jb22CIndhdGNoLnByb2R1Y3QuYXBpLnN0YWdpbmcuZXNwbi5jb22CHXdh dGNoLnByb2R1Y3QuYXBpLnFhLmVzcG4uY29tgh53YXRjaC5wcm9kdWN0LmFwaS5k ZXYuZXNwbi5jb22CGHBhcnRuZXItcHViLmFwaS5lc3BuLmNvbYIccGFydG5lci1w dWIuYXBpLmRldi5lc3BuLmNvbYIbcGFydG5lci1wdWIuYXBpLnFhLmVzcG4uY29t ghZzaG9ydHN0b3AuYXBpLmVzcG4uY29tghp3YXRjaC5hdXRoLmFwaS5lc3BuLmdv LmNvbYIed2F0Y2guYXV0aC5hcGkuZGV2LmVzcG4uZ28uY29tgh13YXRjaC5hdXRo LmFwaS5xYS5lc3BuLmdvLmNvbYIid2F0Y2guYXV0aC5hcGkuc3RhZ2luZy5lc3Bu LmdvLmNvbYIYYXJ0d29yay5hcGkuZGV2LmVzcG4uY29tghdhcnR3b3JrLmFwaS5x YS5lc3BuLmNvbYIUYXJ0d29yay5hcGkuZXNwbi5jb22CHXNwb3J0c2NlbnRlci5m YW4uYXBpLmVzcG4uY29tgh9zcG9ydHNjZW50ZXJhcGkucWEuZ2VvLmVzcG4uY29t giFzcG9ydHNjZW50ZXJhcGkucHJvZC5nZW8uZXNwbi5jb22CIXNwb3J0c2NlbnRl ci5hcGkuc3RhZ2luZy5lc3BuLmNvbYIaYWZmaWxpYXRlLmFwaS5kZXYuZXNwbi5j b22CGWFmZmlsaWF0ZS5hcGkucWEuZXNwbi5jb22CFmFmZmlsaWF0ZS5hcGkuZXNw bi5jb22CFHBjYy5hcGkuZGV2LmVzcG4uY29tghNwY2MuYXBpLnFhLmVzcG4uY29t ghhwY2MuYXBpLnN0YWdpbmcuZXNwbi5jb22CEHBjYy5hcGkuZXNwbi5jb22CGHdh dGNoLmdyYXBoLmFwaS5lc3BuLmNvbYIgd2F0Y2guZ3JhcGguYXBpLnN0YWdpbmcu ZXNwbi5jb22CG3dhdGNoLmdyYXBoLmFwaS5xYS5lc3BuLmNvbYIcd2F0Y2guZ3Jh cGguYXBpLmRldi5lc3BuLmNvbYITZXZlbnRzLmFwaS5lc3BuLmNvbYIbZXZlbnRz LmFwaS5zdGFnaW5nLmVzcG4uY29tghZldmVudHMuYXBpLnFhLmVzcG4uY29tghdl dmVudHMuYXBpLmRldi5lc3BuLmNvbYIZcmVzdHJpY3Rpb25zLmFwaS5lc3BuLmNv bYIhcmVzdHJpY3Rpb25zLmFwaS5zdGFnaW5nLmVzcG4uY29tghxyZXN0cmljdGlv bnMuYXBpLnFhLmVzcG4uY29tgh1yZXN0cmljdGlvbnMuYXBpLmRldi5lc3BuLmNv bYIhc3BvcnRzY2VudGVyLmZhbi5hcGkuZGV2LmVzcG4uY29tgiBzcG9ydHNjZW50 ZXIuZmFuLmFwaS5xYS5lc3BuLmNvbYIlc3BvcnRzY2VudGVyLmZhbi5hcGkuc3Rh Z2luZy5lc3BuLmNvbYISZ2xvZ28uYXBpLmVzcG4uY29tghVnbG9nby5hcGkucWEu ZXNwbi5jb22CFmdsb2dvLmFwaS5kZXYuZXNwbi5jb22CHXBhcnRuZXItcHViLmFw aS5wcm9kLmVzcG4uY29tgh1vbmVmZWVkLmZhbi5hcGkucWEuZXNwbnFhLmNvbYIY b25lZmVlZC5mYW4uYXBpLmVzcG4uY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDov L2NybC5lbnRydXN0Lm5ldC9sZXZlbDFrLmNybDBLBgNVHSAERDBCMDYGCmCGSAGG +mwKAQUwKDAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEw CAYGZ4EMAQICMGgGCCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29j c3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5u ZXQvbDFrLWNoYWluMjU2LmNlcjAfBgNVHSMEGDAWgBSConB03bxTP8971PfNf6dg xgpMvzAdBgNVHQ4EFgQUcNUwjWQ76SAPBf0yDapzQEde3V4wCQYDVR0TBAIwADAN BgkqhkiG9w0BAQsFAAOCAQEAj/ZnghZaSlSUUxWJA67FNwOL27Q8Sdh/ObRTGYY5 8wIu+yPibtmgEwiwC3nztlaNS3U8cxQyqvcV0uRn5OALWHsWONRdhJLAFZSRXF7N 9KuK17hNdLokDqx3onbo+Q2nyWHBWQSSV1Uh5pgEWXXScaqugSjiFComKNKtvqYX qYR1bapt2y+ZS70glP+hAQ984PQgfQBJgpIbai0MSg2TdUQwul5wqrtvUM1x6pfp LxGfZGYnK51JTc9ne/P2IBiMS4vhEjQfcIqBUFXRimPZAXpeOO8LuVSBo0OW78Tp NWccFAh8FratRsvrKHBgwKtSPD4TbBsIlG5ZuIOmxuqngA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunCEOO4AWk+5AyWD+nXa vCPoMDEzUldIrwcSzJCxiTD7Y+FFw7MaU7R7Fkd1GNrqJXifsp/31Abtd+9iTiCP 5NDxIIqMtREKwdxypATVeoA8yEWt8dGmuN5XX241ghUGLNHzKa6HTuZMp1LPddIY Sa+dPxDiWIbxOUIZjGjXnKpUs54TDIFqJ2SH31MFiuH2B8TT0PDV2ksGF9UICTAe wvRi6z1YP7Hw5mrjnKmXoBRqXWJWSMOshUtMWSgvOfD5rMvPtas9IcBaiGc/Jj1L ZlDFfdy6AbstYO6T0noN3OAOINv/Z/xLQYS9bnqlxCkfJxifckWdjdsrIHtn1R3U yQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 29930325089056557062476104242672973639 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-16 07:37:41 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-04 08:07:39 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seattle' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Disney Enterprises, Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.aws.espn.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23535808674634782939521118990101718391716327291682561177853952720442627024401911712188885505963592148190271902544255608346595423027406842262071112813523978489980517681544997067576314442584668478758869624751851301317624092393253575942882143951464117630617911906959415160698242106603084945686229705894366038815948142224392262850239977231380033281245171793417613793557118454514897088167402330144897397941470877334533801963360652762052410175586148708227829999953899499880528173921700186233308392998213653746642523291477347031539620783788813951354652470697036148877885781954661250539982375290497704754152693763623863833801 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1610 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aws.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.video.api.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.video.api.staging.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.video.api.qa.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.video.api.dev.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.auth.api.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.auth.api.staging.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.auth.api.qa.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.auth.api.dev.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.product.api.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.product.api.staging.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.product.api.qa.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.product.api.dev.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-pub.api.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-pub.api.dev.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-pub.api.qa.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shortstop.api.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.auth.api.espn.go.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.auth.api.dev.espn.go.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.auth.api.qa.espn.go.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.auth.api.staging.espn.go.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artwork.api.dev.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artwork.api.qa.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artwork.api.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportscenter.fan.api.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportscenterapi.qa.geo.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportscenterapi.prod.geo.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportscenter.api.staging.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliate.api.dev.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliate.api.qa.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliate.api.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcc.api.dev.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcc.api.qa.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcc.api.staging.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcc.api.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.graph.api.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.graph.api.staging.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.graph.api.qa.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.graph.api.dev.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.api.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.api.staging.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.api.qa.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.api.dev.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restrictions.api.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restrictions.api.staging.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restrictions.api.qa.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restrictions.api.dev.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportscenter.fan.api.dev.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportscenter.fan.api.qa.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportscenter.fan.api.staging.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glogo.api.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glogo.api.qa.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glogo.api.dev.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-pub.api.prod.espn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onefeed.fan.api.qa.espnqa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onefeed.fan.api.espn.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 70d5308d643be9200f05fd320daa7340475edd5e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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