*.hs.llnwd.net

- Limelight Networks, Inc. -

Issued by

About this certificate

This digital certificate with serial number 15:79:0c was issued on by Equifax.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [ContentCommitment DataEncipherment DigitalSignature KeyEncipherment] (00001111) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber Certificate: authorityInformationAccess MUST be present. (BRs: 7.1.2.3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Limelight Networks, Inc.

Company registration number: a1Gh9bfwkPm1hEITN0le1IPCFT0es6Yw
Organization: Limelight Networks, Inc.
State / Province: Arizona
Locality: Tempe
Country: US

Equifax

Organization: Equifax
Organization unit: Equifax Secure Certificate Authority
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 15:79:0c
Serial Number (int): 1407244
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: 35:82:58:93:dc:c8:48:82:1a:66:19:e6:59:72:c2:38:08:ec:c8:b2
AuthorityKeyId: 48:e6:68:f9:2b:d2:b2:95:d7:47:d8:23:20:10:4f:33:98:90:9f:d4

Fingerprint (sha1): 2d:4c:52:e1:5d:6e:36:8c:7d:a1:a1:84:b0:1e:33:7f:2e:4f:9d:ce
Fingerprint (sha256): 9c:6e:b1:16:57:8d:32:8a:8a:4d:57:c2:b2:fd:99:9f:49:b7:0e:7f:08:0e:64:c7:1a:8a:34:ba:02:67:9c:d5


Revocation information

CRL Distribution Point: http://crl.geotrust.com/crls/secureca.crl

Check the revocation status for certificate *.hs.llnwd.net

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.hs.llnwd.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

7 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.llnw.com
*.llnw.net
*.lvp.llnw.net
*.phx2.llnw.net
*.phx3.llnw.net
*.upload.llnw.net
*.video.llnw.net
*.cs.lldns.net
*.loris.llnwd.net
*.s.loris.llnwd.net
*.llnwi.net
*.s.llnwi.net
*.limelight.com
*.video.limelight.com
*.videoplatform.limelight.com
*.llnw-trials.com
*.assets.delvenetworks.com
*.delvenetworks.com
*.s.delvenetworks.com
*.cpl.delvenetworks.com
*.s.cpl.delvenetworks.com
*.clickability.com
*.i.clickability.com
*.la.clickability.com
*.va.clickability.com
*.vo.llnwd.net
*.s.mfs.lvp.llnw.net
*.hs.llnwd.net

Other certificates including the domain name llnwd.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.hs.llnwd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0THIGVMjlIB4Wq71T/mc
sy6D6PbFty/auAky9CieG06HjdHu3h54yQLiyX6dLcyEOAHKjtD3oN+5q/BPWKan
v5AkM0l2OUHxEY+LdymAKNa+DBwd916rnBPlSH+5Afffy4vVbL0EM7wnQYiKDWiR
O8aK5jm3qt1FyQcSsXJ/Jn5AzXlPJMrcyv84NQ61c9bRLLhHFurhYhhLfkTcRsIX
qWjvX1/XTYxuBslSBGH5X8tbrAbxfqG/KmBa/5KzfPURBQKjkzX+zrnK4ObRx0x2
1BrVH3koenzQVM0SERljvjX97751PQoSG8uA2grxXJxrZoJrtr+yFi+PcZcSaCyN
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1407244
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Equifax'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Equifax Secure Certificate Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-12-05 05:55:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-05 19:42:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'a1Gh9bfwkPm1hEITN0le1IPCFT0es6Yw'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tempe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Limelight Networks, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.hs.llnwd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26408353977752944913075445045124644223930689482454326858725395038617329422312388144638845149001086814252599974866788466671039213893858834082185819826333416180277405585036708606051735171634186624156251414122549660764295873872983254069543192314264377988973258569967256945372909214805050131730125224851458964428903975845748132139178895379758707564941787281222703595622963541388554942188158273342597315128607801304528757081725714684796902922344117493287907237422957906303194552652480122192178854709261998447056594188342845648659203911881309127855602152788367893673836139319956272000874641549732802667579420230684546731511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 48e668f92bd2b295d747d82320104f3398909fd4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (555 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llnw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llnw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lvp.llnw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phx2.llnw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phx3.llnw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upload.llnw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.video.llnw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cs.lldns.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loris.llnwd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s.loris.llnwd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llnwi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s.llnwi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.limelight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.video.limelight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.videoplatform.limelight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llnw-trials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assets.delvenetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delvenetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s.delvenetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cpl.delvenetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s.cpl.delvenetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clickability.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i.clickability.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.la.clickability.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.va.clickability.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vo.llnwd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s.mfs.lvp.llnw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hs.llnwd.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.geotrust.com/crls/secureca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							35825893dcc848821a6619e65972c23808ecc8b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (1024 bits)
		000b19148137f679e9b99b9d41a1bd8b60a01ce2e5139132191a7d0aa9cc299922ed967a6c35f9e5d9f1f8a932117702f1ef0f3c8e7ab87cf026ee05f419e4b817134177db0111cb05ecf62546fc940ed0b9aa5c3ee5a66a322afe759570f6a35933db3cf926952e9a58a3c95639af3045bf97716a421d7142ee21604861c5e57d