san3.premiumtv.co.uk

- PERFORM MEDIA SERVICES LIMITED -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 61:36:55:1b:d5:2b:74:74:41:73:9b:23:ba:1b:9b:c2 was issued on by GeoTrust Inc..

With 77 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

PERFORM MEDIA SERVICES LIMITED

Organization: PERFORM MEDIA SERVICES LIMITED
Locality: Feltham
Country: GB

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 61:36:55:1b:d5:2b:74:74:41:73:9b:23:ba:1b:9b:c2
Serial Number (int): 129217225831447259481973620125596359618
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): db:b4:eb:11:32:8d:1b:21:70:85:44:ca:0e:83:08:2f:da:8a:c0:bf
Fingerprint (sha256): 00:89:12:2b:72:3d:1b:0c:7b:72:c7:6f:74:1b:93:fd:a8:24:fd:96:ef:51:7f:3f:50:63:24:bd:da:57:03:6e

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate san3.premiumtv.co.uk

77

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san3.premiumtv.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

s1.swimg.net
wab.performfeeds.com
secure.en.jsportslive.jp
secure.olympicqualifiers.livebasketball.tv
secure.fibaasiacup.livebasketball.tv
secure.centrobasketchampionship.livebasketball.tv
secure.olympicwomensqualifiers.livebasketball.tv
secure.southamericanwomenschampionship.livebasketball.tv
secure.southamericanchampionship.livebasketball.tv
secure.centrobasketwomenschampionship.livebasketball.tv
stage.sportingnews.com
beta.sportingnews.com
stage.beta.sportingnews.com
secure.betsafe.performgroup.com
hs-wcmc-pp.performgroup.com
secure.betlivebosnia.performgroup.com
secure.bilyoner.performgroup.com
secure.mobile.virginbet.performgroup.com
secure.mobile.racingpostpaddypower.performgroup.com
secure.virginbet.performgroup.com
secure.betplay.performgroup.com
secure.trotto.performgroup.com
secure.ics.performgroup.com
secure.pollachilena.performgroup.com
secure.betcart.performgroup.com
secure.mobile.rukb2v.performgroup.com
secure.olybetretail.performgroup.com
secure.dafabet.performgroup.com
secure.redbet.performgroup.com
securestage-testwab.performgroup.com
stage.cp2.performgroup.com
dmc-pp.performgroup.com
dqm.performgroup.com
www.stage.testwab.performgroup.com
secure.mobile.caliente.performgroup.com
secure.mobile.redbet.performgroup.com
dmc.performgroup.com
secure.mobile.bilyoner.performgroup.com
secure.stsretail.performgroup.com
secure.mobile.betin.performgroup.com
hs-wcmc.performgroup.com
secure.stanleybetretail.performgroup.com
stage.dqm.performgroup.com
secure.mobile.racingpost.performgroup.com
secure.mobile.coralconnect.performgroup.com
secure.fonbetretail.performgroup.com
secure.sportinglife.performgroup.com
secure.mobile.betplay.performgroup.com
secure.wscsportstechnologies.performgroup.com
secure.coralconnect.performgroup.com
secure.mobile.sportinglife.performgroup.com
secure.vivobet.performgroup.com
secure.mobile.betlivebosnia.performgroup.com
secure.rukb2v.performgroup.com
secure.ligastavokretail.performgroup.com
secure.mobile.vivobet.performgroup.com
secure.mobile.pollachilena.performgroup.com
secure.singaporepoolsretail.performgroup.com
secure.mobile.racingpostcoral.performgroup.com
secure.retaretail.performgroup.com
cp2.performgroup.com
secure.betologicretail.performgroup.com
secure.mobile.bet9ja.performgroup.com
secure.totonl.performgroup.com
secure.mobile.totonl.performgroup.com
secure.sportsbet.au.performgroup.com
secure.ekasaretail.performgroup.com
secure.mobile.sportsbetaustralia.performgroup.com
secure.hkjc2.performgroup.com
secure.mobile.betsafe.performgroup.com
secure.betin.performgroup.com
secure.caliente.performgroup.com
secure.mobile.betcart.performgroup.com
secure.bet9ja.performgroup.com
secure.mobile.dafabet.performgroup.com
secure.mobile.trotto.performgroup.com
san3.premiumtv.co.uk

Other certificates including the domain name premiumtv.co.uk

(limited to 100 certificates)
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san4.premiumtv.co.uk
san12.performgroup.com
san7.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san12.performgroup.com
san9.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san12.performgroup.com
san5.premiumtv.co.uk
san7.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san10.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san5.premiumtv.co.uk
san11.performgroup.com
san3.premiumtv.co.uk
san5.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san7.premiumtv.co.uk
san7.premiumtv.co.uk
san5.premiumtv.co.uk
san5.premiumtv.co.uk
san7.premiumtv.co.uk
san12.performgroup.com
san7.premiumtv.co.uk
san12.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san5.premiumtv.co.uk
san10.performgroup.com
san4.premiumtv.co.uk
san3.premiumtv.co.uk
san3.premiumtv.co.uk
san5.premiumtv.co.uk
san11.performgroup.com
san7.premiumtv.co.uk
san3.premiumtv.co.uk
san10.performgroup.com
san10.performgroup.com
san3.premiumtv.co.uk
san4.premiumtv.co.uk
san8.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san5.premiumtv.co.uk
san12.performgroup.com
san10.performgroup.com
san5.premiumtv.co.uk
san7.premiumtv.co.uk
level3-01.performgroup.com
san4.premiumtv.co.uk
san3.premiumtv.co.uk
san12.performgroup.com
san5.premiumtv.co.uk
san3.premiumtv.co.uk
san10.performgroup.com
san7.premiumtv.co.uk
san9.performgroup.com
*.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san5.premiumtv.co.uk
san5.premiumtv.co.uk
san10.performgroup.com
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san10.performgroup.com
san3.premiumtv.co.uk
san10.performgroup.com
san8.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san3.premiumtv.co.uk
san12.performgroup.com
san4.premiumtv.co.uk
*.premiumtv.co.uk
san4.premiumtv.co.uk
san4.premiumtv.co.uk
san7.premiumtv.co.uk
san7.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san4.premiumtv.co.uk
san5.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san3.premiumtv.co.uk

Certificate

The complete raw certificate details for san3.premiumtv.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfw23ADzD/7Ga7BLBHCX
VD1AnSA7zKnuaYHRchQVzX4KG034uM+LQpRMithVSZomokn+kjDu9zfBVTzCjbsJ
UVJ2h5ObO/L0uYemjDjngf5PrggMS3eqxds48AlCsbf7ZuLsArMRIivymofueqT4
dMRvihIuiqfrmMZKSwEcqG8EE+A4s+f29r0OE+1PMbrWnj9z36uqZkpI5SybmJgg
NyFWefasowiHdYX30rBSF41RV7QtKjk8IECt7Q1GBCp/Kx3C0cFKyGXpxVn6CgCb
c76RC8c+BhN+x4Zhphzo2fLPbd+9q4uAZZQHg6kzLS8Bn1E3HdVgxR4ZADmXHNe5
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 129217225831447259481973620125596359618
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Feltham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PERFORM MEDIA SERVICES LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'san3.premiumtv.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23983411142587624285726337915217899894456415722569280632355180550926551217840281727418492251616585006094697358490605438788613856045870279878114235605519575890039784119342756811945118318544495372344179020338598658758462374432885705981099920281013785310002314031563056763679081333866562310545891634547786880090253355995973245402325379854489362809591824729305887263519137059298547141935602597826013782161561726977935236246407637534728192432520136143043859829373240158710104460416918339470744593058839863856927682620740093900499616917421820568392720502608437966810272977396208513731598185943379259378330681259902138562919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2835 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1.swimg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wab.performfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.en.jsportslive.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.olympicqualifiers.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaasiacup.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.centrobasketchampionship.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.olympicwomensqualifiers.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.southamericanwomenschampionship.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.southamericanchampionship.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.centrobasketwomenschampionship.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.beta.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betsafe.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs-wcmc-pp.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betlivebosnia.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bilyoner.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.virginbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.racingpostpaddypower.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.virginbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betplay.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.trotto.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ics.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.pollachilena.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betcart.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.rukb2v.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.olybetretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.dafabet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.redbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securestage-testwab.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.cp2.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmc-pp.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dqm.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage.testwab.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.caliente.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.redbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmc.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.bilyoner.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stsretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.betin.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs-wcmc.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stanleybetretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.dqm.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.racingpost.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.coralconnect.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fonbetretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sportinglife.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.betplay.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.wscsportstechnologies.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.coralconnect.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.sportinglife.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.vivobet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.betlivebosnia.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.rukb2v.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ligastavokretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.vivobet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.pollachilena.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.singaporepoolsretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.racingpostcoral.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.retaretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp2.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betologicretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.bet9ja.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.totonl.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.totonl.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sportsbet.au.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ekasaretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.sportsbetaustralia.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.hkjc2.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.betsafe.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betin.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.caliente.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.betcart.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bet9ja.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.dafabet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.trotto.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san3.premiumtv.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001600c02fc0d00000403004630440220036d75329c4ad35fa310e727b0b4f7bb25bb83e835a77c63ea4f0b5d50511cba022003bf325bace5a2571ebc67a2a74c773787fe041b2eedccdea566c2337d60db01007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001600c02fc290000040300463044022060f4a8ec9824d073e087a869a1000388fecb65c345e942260cba0083c92066ab02202a61c40135cc3f50ddd8bde39694bf308f4fd99304209a62912eae1b88fde2d5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008fbd12218982971d9aa0f1854b9535d8ba7e39059b2fdfca3f3896ce57cb0af4abafe1d21b16c962a632410bd25043ff924639810fa335dd5f74bc68a0a32bee7ebe6c3c2bcdef91f797fec373a5edc59493d04e3baf2a24603ad0d369684dd6d4dad453ec98e11e8948b7e205a2575fc52db66dcbc199f772d3007258cf14e8d161716aa2c8dce65ba56dd5695fedbfd9c1db41847b75572b611bba04a62924ad6f9af0ec3704c2516d0f8fc74e5839ecb8808e51a61393912f084fc7f57310900ae65ad4dca2c88cd5606da99604a941597666f07bfb5155769e6066fc06b1b6ecb3d4fe1c7e19dab7443049e531f1e3e4c2affca4b799f4e333ae6f667af8