id.nowtv.com

- Sky UK Limited -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0a:0a:d4:f9:b7:b8:2a:f7:94:6b:9c:45:e7:48:b0:ac was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Sky UK Limited

Organization: Sky UK Limited
Locality: Isleworth
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:0a:d4:f9:b7:b8:2a:f7:94:6b:9c:45:e7:48:b0:ac
Serial Number (int): 13348522581941349265821432816119361708
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 13:c0:68:38:99:6b:78:59:0e:31:76:b6:af:cb:ec:d6:ba:3a:e6:f6
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 2d:ea:cd:5b:8c:a8:82:60:56:a1:03:cd:d9:97:2b:88:39:bb:fa:44
Fingerprint (sha256): 08:fe:aa:cc:95:1b:10:c1:b2:31:99:1d:a9:b8:b5:2b:5b:44:81:7d:d7:05:d7:a0:04:25:5c:c7:5b:bf:ba:84

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate id.nowtv.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for id.nowtv.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

id.nowtv.com
api.id.nowtv.com

Other certificates including the domain name nowtv.com

(limited to 100 certificates)
secure03.stage.lithium.com
skyidapp.sky.com
www.nowtv.com
crosstv.nowtv.com
secure03.stage.lithium.com
secure03.stage.lithium.com
search.nowtv.com
chromecast.nowtv.com
www.stage.nowtv.com
www.nowtv.com
uiapi.id.int.nowtv.it
services.stage.nowtv.com
secure03.stage.lithium.com
ie.api.atom.nowtv.com
crmg-local.nowtv.com
geekzone.nowtv.com
www.stage.nowtv.com

help.nowtv.com
roku.int.nowtv.com
staging.ott.sky.com
stg1.skyidapp.sky.com
secure03.stage.lithium.com
api.nowtv.com
secure03.stage.lithium.com
uc18.janrainengage.com
ie.api.stage2.atom.nowtv.com
secure03.stage.lithium.com
slo.skyidappintl.sky.com
*.api.stage.nowtv.com
id.nowtv.com
secure03.stage.lithium.com
skyidapp.sky.com
slo.skyidappintl.sky.com
www.stage.nowtv.com
www.stage.nowtv.com
ie.api.atom.nowtv.com
click.messaging.nowtv.com
www.stage.nowtv.com
services.nowtv.com
secure03.stage.lithium.com
ott.sky.com
*.api.nowtv.com
uiapi.id.int.nowtv.it
secure03.stage.lithium.com
uc18.janrainengage.com
slo.skyidappintl.sky.com
secure03.stage.lithium.com
ie.api.stage1.atom.nowtv.com
secure03.stage.lithium.com

www.stage.nowtv.com
www.nowtv.com
my.nowtv.com
uiapi.id.int.nowtv.it
staging.ott.sky.com
crmg.nowtv.com
secure03.stage.lithium.com
www.nowtv.com
onebrief.nowtv.com
stage-mcs-gatekeeper.sky.com
services.stage.nowtv.com
secure03.stage.lithium.com

secure03.stage.lithium.com
community.nowtv.com
interest.sky.com
staging.ott.sky.com
secure03.stage.lithium.com
secure03.stage.lithium.com
nowtv.com
nowtv.com
cms.stage1.atom.nowtv.com
device.nowtv.com
api.atom.nowtv.com
slo.skyidappintl.sky.com
www.stage.nowtv.com
signup.nowtv.com
*.api.nowtv.com
skyidapp.sky.com
www.stage.nowtv.com
secure03.stage.lithium.com
ott.sky.com
cks-thirdparty.ovp.stable-int.nowtv.com
www.nowtv.com
webstatic.stage.nowtv.com
watch.stage.nowtv.com
*.stage.nowtv.com
www.stage.nowtv.com
secure03.stage.lithium.com
api.stage1.atom.nowtv.com

www.nowtv.com
uc18.janrainengage.com
www.nowtv.com
www.stage.nowtv.com
uiapi.id.int.nowtv.it
secure03.stage.lithium.com
services.nowtv.com
ott.sky.com

Certificate

The complete raw certificate details for id.nowtv.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJGGxJ0C5iM8ZK9To2qa
q8ggOKPcRRMmENMXxd+NIt4BoB4y3/rAm4ZfpEmBxfpTjx24nTNLXuGVzX2PBORP
6jx5hWKORJsP6rvoWJRVpf6Jlpa459KqtgRzZsEFCcjOJKYb/RMC9RF9EcWEKxUl
3sAmmfTI4+x3RQmNiWapVqTNn5ILF0eCialrsQL3tZakp5FnnIgeNGw55/5XtEQS
WFDT683drfaPwP5QhkIjwG0zhKCm7VUdrVbb54gbizQ7l2zeOtBoSc4I0Tm9uEwQ
HY4oTBdK6LWpzg80YwzFokEaLMVU1GiiG+AVLe9gVtB57y0Ihu0Hnm/AAKBtRFiu
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13348522581941349265821432816119361708
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Isleworth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sky UK Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'id.nowtv.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16735218016488516464361436115402600977286043536338987907265574948916718840627020862552930148664260637071746077793070042559812350541281771685365698844089803977524425371688176779733766106967355717093176181193917458241483131456886625830091473837994364414972484851875587722722453054173399220302271638795580608231205530066214911765092101047467697806522897433124448823636698963706819500475127171295144737966944421624927389525462097746458314128978777198519902481823666681249262822245334765237540810573039982978490523389493922596353494747159506427987795989970526161139260873414322201365028690673548253403511724661818749660891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13c06838996b78590e3176b6afcbecd6ba3ae6f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.id.nowtv.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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