san4.premiumtv.co.uk

- PERFORM MEDIA SERVICES LIMITED -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 01:14:c9:1a:bb:0e:84:8c:ed:93:cf:c4:d9:37:e3:c7 was issued on by DigiCert Inc.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PERFORM MEDIA SERVICES LIMITED

Organization: PERFORM MEDIA SERVICES LIMITED
Locality: Feltham
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:14:c9:1a:bb:0e:84:8c:ed:93:cf:c4:d9:37:e3:c7
Serial Number (int): 1437152815109419532207704641931568071
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 00:ed:2f:6b:55:d2:d0:5c:77:74:3f:cd:b6:44:f7:46:62:3d:1e:b3
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 94:5b:66:e3:a9:5d:f5:75:6e:a3:a0:73:db:23:92:eb:9d:3e:d1:e0
Fingerprint (sha256): 04:5d:9c:35:f9:5a:83:c0:77:a1:02:22:bb:c6:ba:8f:56:ee:95:3d:9e:16:26:65:e1:3d:4b:63:92:a2:2c:0c

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate san4.premiumtv.co.uk

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san4.premiumtv.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san4.premiumtv.co.uk
secure.paddypower.premiumtv.co.uk
secure.comeon.performgroup.com
secure.supermatch.performgroup.com
secure.danskespilretail.performgroup.com
secure.cashpointretail.performgroup.com
secure.sansabetretail.performgroup.com
secure.mobile.betonalfa.performgroup.com
secure.mobile.winline.performgroup.com
secure.stage.csbtestingipfacts.performgroup.com
secure.winline.performgroup.com
secure.mobile.sunbet.performgroup.com
secure.mobile.betbright.performgroup.com
secure.uedbet.performgroup.com
secure.stage.csbtestingpmfacts.performgroup.com
login-service.performgroup.com
secure.stage.csbtestingall.performgroup.com
secure.starbet.performgroup.com
secure.stage.csbtestingsvis.performgroup.com
secure.mobile.sportsinteraction.performgroup.com
stage.site-configuration-service.performgroup.com
secure.mobile.uedbet.performgroup.com
secure.betbright.performgroup.com
stage.login-service.performgroup.com
secure.sportsinteraction.performgroup.com
secsynmedia-download.performgroup.com
secure.stoloto.performgroup.com
daznstarstrikers.goal.com
secure.sunbet.performgroup.com
secure.wtatv.com
secure.mobile.comeon.performgroup.com
secure.stage.csbtestingcricket.performgroup.com
secure.eurobetretail.performgroup.com
list-manager-service.performgroup.com
secure.mobile.eurolotto.performgroup.com
secure.188.performgroup.com
secure.betdaq.performgroup.com
player.performgroup.com
secure.mobile.bethard.performgroup.com
secure.baltbet.performgroup.com
secure.mobile.baltbet.performgroup.com
secure.tipicoretail.performgroup.com
secure.bet90retail.performgroup.com
secure.acqua.performgroup.com
secure.oddsetretail.performgroup.com
secure.orakulas.performgroup.com
secure.stage.csbtestingpvis.performgroup.com
amp.spox.com
secure.mobile.kladionica.performgroup.com
secure.mobile.paddypower.performgroup.com
secure.mobile.stoloto.performgroup.com
secure.mobile.188.performgroup.com
secure.mobile.starbet.performgroup.com
secure.performretail.performgroup.com
secure.betclic.performgroup.com
secure.mobile.orakulas.performgroup.com
secure.efbet.performgroup.com
secure.mobile.panbet.performgroup.com
secure.mobile.efbet.performgroup.com
stage.list-manager-service.performgroup.com
secure.mobile.betdaq.performgroup.com
site-configuration-service.performgroup.com
starstrikers.goal.com
secure.fonbet.performgroup.com
secure.mobile.supermatch.performgroup.com
secure.bet25retail.performgroup.com
secure.kladionica.performgroup.com
secure.eurolotto.performgroup.com
dy.snimg.com
cp.performgroup.com
secure.betonalfa.performgroup.com
secure.mobile.fonbet.performgroup.com
secure.snairetail.performgroup.com
secure.svenskaspelretail.performgroup.com
secure.bethard.performgroup.com
adds.spox.com

Other certificates including the domain name premiumtv.co.uk

(limited to 100 certificates)
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san4.premiumtv.co.uk
san12.performgroup.com
san7.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san12.performgroup.com
san9.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san12.performgroup.com
san5.premiumtv.co.uk
san7.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san10.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san5.premiumtv.co.uk
san11.performgroup.com
san3.premiumtv.co.uk
san5.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san7.premiumtv.co.uk
san7.premiumtv.co.uk
san5.premiumtv.co.uk
san5.premiumtv.co.uk
san7.premiumtv.co.uk
san12.performgroup.com
san7.premiumtv.co.uk
san12.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san5.premiumtv.co.uk
san10.performgroup.com
san4.premiumtv.co.uk
san3.premiumtv.co.uk
san3.premiumtv.co.uk
san5.premiumtv.co.uk
san11.performgroup.com
san7.premiumtv.co.uk
san3.premiumtv.co.uk
san10.performgroup.com
san10.performgroup.com
san3.premiumtv.co.uk
san4.premiumtv.co.uk
san8.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san5.premiumtv.co.uk
san12.performgroup.com
san10.performgroup.com
san5.premiumtv.co.uk
san7.premiumtv.co.uk
level3-01.performgroup.com
san4.premiumtv.co.uk
san3.premiumtv.co.uk
san12.performgroup.com
san5.premiumtv.co.uk
san3.premiumtv.co.uk
san10.performgroup.com
san7.premiumtv.co.uk
san9.performgroup.com
*.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san5.premiumtv.co.uk
san5.premiumtv.co.uk
san10.performgroup.com
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san10.performgroup.com
san3.premiumtv.co.uk
san10.performgroup.com
san8.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san3.premiumtv.co.uk
san12.performgroup.com
san4.premiumtv.co.uk
*.premiumtv.co.uk
san4.premiumtv.co.uk
san4.premiumtv.co.uk
san7.premiumtv.co.uk
san7.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san4.premiumtv.co.uk
san5.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san3.premiumtv.co.uk

Certificate

The complete raw certificate details for san4.premiumtv.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMFTck8+fi4TjLzFYxx0
eLnnzdR7pAvBfRmI/xr3xCpIxXGmsqmuuCh8YrDb/Kqj9nPuJ805Fv96tVNnyuxB
vXKisfoPtw9p5PVhMAf0u+BnfxhBjT69gR+m+IkwwGMBa5UIBHxOu6f3xAVZ6BJM
Qe6PR5lk1ew7rFasFiV4Ku8sMeFVTfvLovixQl6X/bjzWbXozVZJTmlpHG45GaHM
ep4K1UcK2G7wkTsymKXUgTGibPTHQ4puNC323roJWpQGy1gkMDDNTSaERpuhc7Dy
pRCiv79ekfeveQYq3aSknmKhWbTWboTY0AuwZfNwYM431XpNRCwlHFVgkDwgAyD7
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1437152815109419532207704641931568071
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Feltham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PERFORM MEDIA SERVICES LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san4.premiumtv.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24333087138920478650753052040772042928677770658420394737051754854012298973230663034389880727484148835974216728357607645196695429879735993603645507339510286094486247930959321400206653126274010844696897408497661497906568194390853526805909402056656512504086380740330788208749022211026319684213975058266483581714539018271651033210585087299289021353718792173859587144475851335479209913329297626501256442096849233768617976434925822196384149183401900088646535779772205328133340515565225813354020471627472203233312666566716114768137681704411513255205828595736606366647771733032562099990925861647992466166370520836587481267191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							00ed2f6b55d2d05c77743fcdb644f746623d1eb3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2778 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san4.premiumtv.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.paddypower.premiumtv.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.comeon.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.supermatch.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.danskespilretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.cashpointretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sansabetretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.betonalfa.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.winline.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stage.csbtestingipfacts.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.winline.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.sunbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.betbright.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.uedbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stage.csbtestingpmfacts.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-service.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stage.csbtestingall.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.starbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stage.csbtestingsvis.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.sportsinteraction.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.site-configuration-service.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.uedbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betbright.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.login-service.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sportsinteraction.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secsynmedia-download.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stoloto.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daznstarstrikers.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sunbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.wtatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.comeon.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stage.csbtestingcricket.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.eurobetretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'list-manager-service.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.eurolotto.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.188.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betdaq.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.bethard.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.baltbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.baltbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.tipicoretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bet90retail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.acqua.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.oddsetretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.orakulas.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stage.csbtestingpvis.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.kladionica.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.paddypower.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.stoloto.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.188.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.starbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.performretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betclic.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.orakulas.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.efbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.panbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.efbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.list-manager-service.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.betdaq.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site-configuration-service.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starstrikers.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fonbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.supermatch.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bet25retail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.kladionica.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.eurolotto.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dy.snimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betonalfa.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.fonbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.snairetail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.svenskaspelretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bethard.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adds.spox.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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