common.spotify.com
- Spotify AB -
Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 03:f1:9b:da:a0:0e:56:5b:52:63:39:d4:97:00:29:96 was issued on by DigiCert Inc.
With 43 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Spotify AB
Organization:
Spotify AB
Locality:
Stockholm
Country: SE
Country: SE
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:f1:9b:da:a0:0e:56:5b:52:63:39:d4:97:00:29:96Serial Number (int): 5242188625024569536726283633215678870
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 0d:21:80:40:16:81:ed:5a:03:57:32:59:aa:fa:19:e6:80:31:52:a3
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17
Fingerprint (sha1): f4:63:e0:df:65:c8:3c:a5:7a:ae:85:ab:52:22:47:72:2b:89:ed:64
Fingerprint (sha256): fa:9f:8f:5a:8d:b3:2f:4e:af:16:f3:99:91:1e:16:12:1d:e0:53:b0:4f:8a:49:5a:11:65:b8:97:18:4f:fe:cf
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
Check the revocation status for certificate common.spotify.com
43
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for common.spotify.com
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Agreement
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
common.spotify.com
chrt.fm
*.chrt.fm
chtbl.com
*.chtbl.com
megaphone.fm
*.megaphone.fm
megaphone.cloud
*.megaphone.cloud
megaphone.link
*.megaphone.link
anchor.fm
*.anchor.fm
megaphone-staging.fm
*.megaphone-staging.fm
eu.confidence.dev
*.eu.confidence.dev
us.confidence.dev
*.us.confidence.dev
spotify.dev
*.spotify.dev
confidence.dev
*.confidence.dev
confidence.spotify.com
*.confidence.spotify.com
chrtnotchtbl.com
*.chrtnotchtbl.com
findawayvoices.com
*.findawayvoices.com
withspotify.com
*.withspotify.com
byspotify.com
*.byspotify.com
atspotify.com
*.atspotify.com
forspotify.com
*.forspotify.com
tospotify.com
*.tospotify.com
fromspotify.com
*.fromspotify.com
enspotify.com
*.enspotify.com
chrt.fm
*.chrt.fm
chtbl.com
*.chtbl.com
megaphone.fm
*.megaphone.fm
megaphone.cloud
*.megaphone.cloud
megaphone.link
*.megaphone.link
anchor.fm
*.anchor.fm
megaphone-staging.fm
*.megaphone-staging.fm
eu.confidence.dev
*.eu.confidence.dev
us.confidence.dev
*.us.confidence.dev
spotify.dev
*.spotify.dev
confidence.dev
*.confidence.dev
confidence.spotify.com
*.confidence.spotify.com
chrtnotchtbl.com
*.chrtnotchtbl.com
findawayvoices.com
*.findawayvoices.com
withspotify.com
*.withspotify.com
byspotify.com
*.byspotify.com
atspotify.com
*.atspotify.com
forspotify.com
*.forspotify.com
tospotify.com
*.tospotify.com
fromspotify.com
*.fromspotify.com
enspotify.com
*.enspotify.com
Other certificates including the domain name spotify.com
(limited to 100 certificates)
mydata.spotify.com
pci.spotify.com
lexikon-slack-app.spotify.com
download.spotify.com
canary-certificate-for-noop.spotify.com
secure02.lithium.com
adanalytics.spotify.com
noteable.spotify.com
info.backstage.spotify.com
www.newsroom.spotify.com
noteable.spotify.com
canary-certificate-for-noop.spotify.com
secure02.lithium.com
experimentation.spotify.com
pci.spotify.com
canary-certificate-for-noop.spotify.com
connect.spotify.com
eu2.status.fireblocks.com
eu2.status.fireblocks.com
canary-certificate-for-noop.spotify.com
eu4-1.cdn.salesforce-communities.com
download.spotify.com
canary-certificate-for-noop.spotify.com
canary-certificate-for-noop.spotify.com
eu2.status.fireblocks.com
mydata.spotify.com
eu2.status.fireblocks.com
eu4-1.cdn.salesforce-communities.com
hrblog.spotify.com
audio-fa-quic-svcb.cdn-gslb.spotify.com
noteable.spotify.com
secure02.lithium.com
testing-open.spotify.com
secure02.lithium.com
pay.spotify.com
*.ash.spotify.com
feedback.spotify.com
any.spotify.com
www.newsroom.spotify.com
promo.spotify.com
www.newsroom.spotify.com
heads-fa.spotify.com
canvas.spotify.com
www.hrblog.spotify.com
secure02.lithium.com
lexikon-slack-app.spotify.com
canary-certificate-for-noop.spotify.com
secure01.stage.lithium.com
newsroom.spotify.com
partner-links.spotify.com
tags.spotify.com
dynamicworkplace4wtc.spotify.com
ads.spotify.com
eu2.status.fireblocks.com
assets.spotify.com
admin.adanalytics.spotify.com
promo.spotify.com
canvas.spotify.com
secure02.lithium.com
www.newsroom.spotify.com
secure02.lithium.com
secure02.lithium.com
recsys-challenge.spotify.com
canary-certificate-for-noop.spotify.com
pci-testing.spotify.com
investors.spotify.com
www.noteable.spotify.com
canary-certificate-for-noop.spotify.com
tableau-slack-app.spotify.com
eu2.status.fireblocks.com
secure02.lithium.com
pci.spotify.com
canary-certificate-for-noop.spotify.com
canary-certificate-for-noop.spotify.com
www.newsroom.spotify.com
wl.spotify.com
help.adanalytics.spotify.com
canary-certificate-for-noop.spotify.com
tableau-slack-app.spotify.com
secure02.lithium.com
common.spotify.com
eu2.status.fireblocks.com
promo.spotify.com
canvas.spotify.com
canvas.spotify.com
secure01.stage.lithium.com
*.spotify.com
developer.spotify.com
news.confidence.spotify.com
canary-certificate-for-noop.spotify.com
tableau-slack-app.spotify.com
admin.adanalytics.spotify.com
backstage-licensing.spotify.com
hrblog.spotify.com
mydata.spotify.com
wl.spotify.com
developer.spotify.com
mydata.spotify.com
developer.spotify.com
canary-certificate-for-noop.spotify.com
pci.spotify.com
lexikon-slack-app.spotify.com
download.spotify.com
canary-certificate-for-noop.spotify.com
secure02.lithium.com
adanalytics.spotify.com
noteable.spotify.com
info.backstage.spotify.com
www.newsroom.spotify.com
noteable.spotify.com
canary-certificate-for-noop.spotify.com
secure02.lithium.com
experimentation.spotify.com
pci.spotify.com
canary-certificate-for-noop.spotify.com
connect.spotify.com
eu2.status.fireblocks.com
eu2.status.fireblocks.com
canary-certificate-for-noop.spotify.com
eu4-1.cdn.salesforce-communities.com
download.spotify.com
canary-certificate-for-noop.spotify.com
canary-certificate-for-noop.spotify.com
eu2.status.fireblocks.com
mydata.spotify.com
eu2.status.fireblocks.com
eu4-1.cdn.salesforce-communities.com
hrblog.spotify.com
audio-fa-quic-svcb.cdn-gslb.spotify.com
noteable.spotify.com
secure02.lithium.com
testing-open.spotify.com
secure02.lithium.com
pay.spotify.com
*.ash.spotify.com
feedback.spotify.com
any.spotify.com
www.newsroom.spotify.com
promo.spotify.com
www.newsroom.spotify.com
heads-fa.spotify.com
canvas.spotify.com
www.hrblog.spotify.com
secure02.lithium.com
lexikon-slack-app.spotify.com
canary-certificate-for-noop.spotify.com
secure01.stage.lithium.com
newsroom.spotify.com
partner-links.spotify.com
tags.spotify.com
dynamicworkplace4wtc.spotify.com
ads.spotify.com
eu2.status.fireblocks.com
assets.spotify.com
admin.adanalytics.spotify.com
promo.spotify.com
canvas.spotify.com
secure02.lithium.com
www.newsroom.spotify.com
secure02.lithium.com
secure02.lithium.com
recsys-challenge.spotify.com
canary-certificate-for-noop.spotify.com
pci-testing.spotify.com
investors.spotify.com
www.noteable.spotify.com
canary-certificate-for-noop.spotify.com
tableau-slack-app.spotify.com
eu2.status.fireblocks.com
secure02.lithium.com
pci.spotify.com
canary-certificate-for-noop.spotify.com
canary-certificate-for-noop.spotify.com
www.newsroom.spotify.com
wl.spotify.com
help.adanalytics.spotify.com
canary-certificate-for-noop.spotify.com
tableau-slack-app.spotify.com
secure02.lithium.com
common.spotify.com
eu2.status.fireblocks.com
promo.spotify.com
canvas.spotify.com
canvas.spotify.com
secure01.stage.lithium.com
*.spotify.com
developer.spotify.com
news.confidence.spotify.com
canary-certificate-for-noop.spotify.com
tableau-slack-app.spotify.com
admin.adanalytics.spotify.com
backstage-licensing.spotify.com
hrblog.spotify.com
mydata.spotify.com
wl.spotify.com
developer.spotify.com
mydata.spotify.com
developer.spotify.com
canary-certificate-for-noop.spotify.com
Certificate
The complete raw certificate details for common.spotify.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIII0TCCB7mgAwIBAgIQA/Gb2qAOVltSYznUlwApljANBgkqhkiG9w0BAQsFADBZ MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjQw NjIxMDAwMDAwWhcNMjUwNzIyMjM1OTU5WjBTMQswCQYDVQQGEwJTRTESMBAGA1UE BxMJU3RvY2tob2xtMRMwEQYDVQQKEwpTcG90aWZ5IEFCMRswGQYDVQQDExJjb21t b24uc3BvdGlmeS5jb20wWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAARP5Zsx0Maq ggweQ0AQHg5+/Eg6BYa35qqV6v0TzzmZK4zet8rBFJEHYO7SmZqnu+oCVfnptOkX mQfYttXbqd+Co4IGZDCCBmAwHwYDVR0jBBgwFoAUdIWAwGbH3zfez70pN6oDHb7t zRcwHQYDVR0OBBYEFA0hgEAWge1aA1cyWar6GeaAMVKjMIIC8QYDVR0RBIIC6DCC AuSCEmNvbW1vbi5zcG90aWZ5LmNvbYIHY2hydC5mbYIJKi5jaHJ0LmZtggljaHRi bC5jb22CCyouY2h0YmwuY29tggxtZWdhcGhvbmUuZm2CDioubWVnYXBob25lLmZt gg9tZWdhcGhvbmUuY2xvdWSCESoubWVnYXBob25lLmNsb3Vkgg5tZWdhcGhvbmUu bGlua4IQKi5tZWdhcGhvbmUubGlua4IJYW5jaG9yLmZtggsqLmFuY2hvci5mbYIU bWVnYXBob25lLXN0YWdpbmcuZm2CFioubWVnYXBob25lLXN0YWdpbmcuZm2CEWV1 LmNvbmZpZGVuY2UuZGV2ghMqLmV1LmNvbmZpZGVuY2UuZGV2ghF1cy5jb25maWRl bmNlLmRldoITKi51cy5jb25maWRlbmNlLmRldoILc3BvdGlmeS5kZXaCDSouc3Bv dGlmeS5kZXaCDmNvbmZpZGVuY2UuZGV2ghAqLmNvbmZpZGVuY2UuZGV2ghZjb25m aWRlbmNlLnNwb3RpZnkuY29tghgqLmNvbmZpZGVuY2Uuc3BvdGlmeS5jb22CEGNo cnRub3RjaHRibC5jb22CEiouY2hydG5vdGNodGJsLmNvbYISZmluZGF3YXl2b2lj ZXMuY29tghQqLmZpbmRhd2F5dm9pY2VzLmNvbYIPd2l0aHNwb3RpZnkuY29tghEq LndpdGhzcG90aWZ5LmNvbYINYnlzcG90aWZ5LmNvbYIPKi5ieXNwb3RpZnkuY29t gg1hdHNwb3RpZnkuY29tgg8qLmF0c3BvdGlmeS5jb22CDmZvcnNwb3RpZnkuY29t ghAqLmZvcnNwb3RpZnkuY29tgg10b3Nwb3RpZnkuY29tgg8qLnRvc3BvdGlmeS5j b22CD2Zyb21zcG90aWZ5LmNvbYIRKi5mcm9tc3BvdGlmeS5jb22CDWVuc3BvdGlm eS5jb22CDyouZW5zcG90aWZ5LmNvbTA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcG CCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/ BAQDAgOIMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBnwYDVR0fBIGX MIGUMEigRqBEhkJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9i YWxHMlRMU1JTQVNIQTI1NjIwMjBDQTEtMS5jcmwwSKBGoESGQmh0dHA6Ly9jcmw0 LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbEcyVExTUlNBU0hBMjU2MjAyMENB MS0xLmNybDCBhwYIKwYBBQUHAQEEezB5MCQGCCsGAQUFBzABhhhodHRwOi8vb2Nz cC5kaWdpY2VydC5jb20wUQYIKwYBBQUHMAKGRWh0dHA6Ly9jYWNlcnRzLmRpZ2lj ZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbEcyVExTUlNBU0hBMjU2MjAyMENBMS0xLmNy dDAMBgNVHRMBAf8EAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdwAS8U40 vVNyTIQGGcOPP3oT+Oe1YoeInG0wBYTr5YYmOgAAAZA8s2/NAAAEAwBIMEYCIQCW 6E/zUyRj7g7W2XfIhc2x1JUizU+lIDok5r/w+6djqQIhAPC6LUnO5AD8DL93+DDt jvPR43Ur//LlO3EB6MJEwytDAHUAfVkeEuF4KnscYWd8Xv340IdcFKBOlZ65Ay/Z DowuebgAAAGQPLNvyAAABAMARjBEAiAZTBTkHP8a5CXjK5ztQLVhOTe4izm/AhWv 8OjWwYgWAAIgU5miVnk5hwQLHFdAZnFEAzBlhC/pI1L+7r1ax+ca2S4AdgDm0jFj QHeMwRBBBtdxuc7B0kD2loSG+7qHMh39HjeOUAAAAZA8s2/hAAAEAwBHMEUCIQCA tfN252Ib9+86Pls8nP9uBLr1z1SdY1VI1ljoaA1bwAIgTwm7IGG5vhIsmN64Grt4 TU1s7P70iLh0giT5IgJvwn4wDQYJKoZIhvcNAQELBQADggEBAA9FaqlgKH/3yCaO mOM+HAZu96H7ZMzHbI5qRD9ztTVRwscd2gi9C1SXRQxs0wAN3h2sb9/occPAFdqF lhZBegM6ZO6MksxSNJcBMT6ROctUx6CqGSbxyR3vAyeAdKxebFpfvLlo54EFx6P2 eM4THDMxJqJLFk6n6vfaZzBd+cV1Tu+8zlZ9jySg4LtN74YOjOHN70bHpQp6esm+ dUY6Scms0SKlPBYZT5ChpURiSY7Z/bD12JCSeTUa2wRjbY2GQaiOIQa1r4DiqFey pxOUc415YObWCv0OxsEETZtDcbUasScjCUSclmWvTVrXjvlghlMHYamVw5FNzoZv yOSPtl8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAET+WbMdDGqoIMHkNAEB4OfvxIOgWG t+aqler9E885mSuM3rfKwRSRB2Du0pmap7vqAlX56bTpF5kH2LbV26nfgg== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5242188625024569536726283633215678870 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-22 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stockholm' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Spotify AB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'common.spotify.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 00044fe59b31d0c6aa820c1e4340101e0e7efc483a0586b7e6aa95eafd13cf39992b8cdeb7cac114910760eed2999aa7bbea0255f9e9b4e9179907d8b6d5dba9df82 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0d2180401681ed5a03573259aafa19e6803152a3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (744 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'common.spotify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chrt.fm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chrt.fm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chtbl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chtbl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megaphone.fm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.megaphone.fm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megaphone.cloud' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.megaphone.cloud' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megaphone.link' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.megaphone.link' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anchor.fm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anchor.fm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megaphone-staging.fm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.megaphone-staging.fm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.confidence.dev' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu.confidence.dev' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.confidence.dev' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us.confidence.dev' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotify.dev' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spotify.dev' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confidence.dev' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.confidence.dev' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confidence.spotify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.confidence.spotify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chrtnotchtbl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chrtnotchtbl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findawayvoices.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.findawayvoices.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'withspotify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.withspotify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byspotify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.byspotify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atspotify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atspotify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forspotify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forspotify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tospotify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tospotify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fromspotify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fromspotify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enspotify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enspotify.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 0388 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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