san1.daznservices.com

- DAZN MEDIA SERVICES LIMITED -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0c:6b:a2:c7:e4:5c:f0:2e:e8:e5:27:09:96:56:16:54 was issued on by DigiCert Inc.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

DAZN MEDIA SERVICES LIMITED

Organization: DAZN MEDIA SERVICES LIMITED
Locality: Feltham
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:6b:a2:c7:e4:5c:f0:2e:e8:e5:27:09:96:56:16:54
Serial Number (int): 16509613300717286588269508567955281492
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ab:5f:6b:e5:62:fe:47:11:55:f3:cc:1b:4b:97:6b:a2:85:2a:42:a8
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): ab:9d:50:d0:a5:29:b8:1d:27:32:f0:18:80:e5:90:43:6c:53:8c:ab
Fingerprint (sha256): 0d:60:1f:8d:c1:02:bb:fe:75:48:28:22:e6:b8:2c:f0:ec:b9:6b:9f:96:a9:3f:a1:82:e6:7e:03:58:9c:41:99

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate san1.daznservices.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san1.daznservices.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san1.daznservices.com
secure.eurobasketwomen.livebasketball.tv
st.snimg.com
fta.daznfeeds.com
ar.nba.com
ca.nba.com
secure.wtatv.com
secure.livebasketball.tv
adds.spox.com
secsynmedia-download.daznservices.com
player.daznservices.com
nba.sportingnews.com
cmsimages.dazn.com
secure.static.goal.com
aol.sportingnews.com
ca.nba.sportingnews.com
secure.olympicqualifiers.livebasketball.tv
api.mackolikfeeds.com
dy.snimg.com
experts.sportingnews.com
secure.eurobasket.livebasketball.tv
asset.matchendirect.fr
stage.beta.sportingnews.com
stage.sportingnews.com
secure.tr.euroleague.livebasketball.tv
secure.goal.com
m.spox.com
beta.sportingnews.com
secure.afrobasket.livebasketball.tv
www.copasudamericana.com
mx.stage.nba.sportingnews.com
archive.sportingnews.com
secure.olympicwomensqualifiers.livebasketball.tv
player.daznfeeds.com
images-cdn-stag.dazn.com
mx.nba.com
secure.fibaamericaschampionship.livebasketball.tv
m.mackolik.com
ar.nba.sportingnews.com
ar.stage.nba.sportingnews.com
api.bm.daznservices.com
s.spox.com
oauth.daznservices.com
m.sahadan.com
images-cdn.dazn.com
fta.stage.daznfeeds.com
secure.fibaasiachampionship.livebasketball.tv
es.nba.com
secure.competitions.livebasketball.tv
www.sahadan.com
www.mackolik.com
secure.fibaasiachampionshipwomen.livebasketball.tv
beta.sahadan.com
amp.spox.com
secure.spox.com
www.aol.sportingnews.com
fantasygames.sportingnews.com
secure.euroleague.livebasketball.tv
secure.fibaworldchampionshipwomen.livebasketball.tv
tahminkolik.com
www.daznplayer.com
in.nba.sportingnews.com
secure.facebookapp.goal.com
preprod.eplayerportal.daznservices.com
stage.www.goal.com
in.nba.com
www.matchendirect.fr
secure.fibaamericaschampionshipwomen.livebasketball.tv
stage.mackolik.com
daznstarstrikers.goal.com
api.daznfeeds.com
www.sportingnews.com
secure.fibaworldcup.livebasketball.tv
stage.copasudamericana.com
portal.daznservices.com
www.goal.com
stage.copalibertadores.com
es.stage.nba.sportingnews.com
ca.stage.nba.sportingnews.com
www.copalibertadores.com
preprod.portal.daznservices.com
player.stage.daznfeeds.com
starstrikers.goal.com
www.spox.com
api.stage.daznfeeds.com
ep.daznfeeds.com
mx.nba.sportingnews.com
beta.goal.com
ep.stage.daznfeeds.com
images.daznservices.com
eplayerportal.daznservices.com
stage.sahadan.com
stage.beta.goal.com
amp.sportingnews.com
stage.nba.sportingnews.com
in.stage.nba.sportingnews.com
beta.mackolik.com
es.nba.sportingnews.com
cdn.sportfeeds.io
stage.sportfeeds.io

Other certificates including the domain name daznservices.com

(limited to 100 certificates)
san15.performgroup.com
rails-management.daznservices.com
san17.performgroup.com
*.daznservices.com
ra.daznservices.com
san15.performgroup.com
stage.rails-management.daznservices.com
san18.performgroup.com
san18.performgroup.com
stage.rails-management.daznservices.com
san1.daznservices.com
san2.daznservices.com
san1.daznservices.com
san17.performgroup.com
san17.performgroup.com
san18.performgroup.com
stage.rails-management.daznservices.com
san15.performgroup.com
rails-management.daznservices.com
san1.daznservices.com
san1.daznservices.com
*.stage.daznservices.com
san18.performgroup.com
san2.daznservices.com
dev.rails-management.daznservices.com
san1.daznservices.com
san15.performgroup.com
san15.performgroup.com
san2.daznservices.com
san15.performgroup.com
san18.performgroup.com
san1.daznservices.com
san2.daznservices.com
san18.performgroup.com
san2.daznservices.com
san15.performgroup.com
san18.performgroup.com
san1.daznservices.com
san1.daznservices.com
san18.performgroup.com
san2.daznservices.com
san15.performgroup.com
san1.daznservices.com
san1.daznservices.com
dev.rails-management.daznservices.com
san1.daznservices.com
*.performgroup.com
san15.performgroup.com
san2.daznservices.com
san2.daznservices.com
san15.performgroup.com
ra.daznservices.com
san1.daznservices.com
san1.daznservices.com
san15.performgroup.com
san2.daznservices.com
san17.performgroup.com
san1.daznservices.com
san1.daznservices.com
san17.performgroup.com
test.rails-management.daznservices.com
ra.daznservices.com
*.dc1.daznservices.com
san2.daznservices.com
san1.daznservices.com
test.rails-management.daznservices.com
san1.daznservices.com
san1.daznservices.com
san17.performgroup.com
san2.daznservices.com
san1.daznservices.com
san1.daznservices.com
san15.performgroup.com
*.daznservices.com
san18.performgroup.com
san18.performgroup.com
san2.daznservices.com
san15.performgroup.com
ra.daznservices.com
*.dev.daznservices.com
san15.performgroup.com
ra.daznservices.com
san15.performgroup.com
san18.performgroup.com
san15.performgroup.com
san2.daznservices.com
dev.rails-management.daznservices.com
san15.performgroup.com
san15.performgroup.com
san18.performgroup.com
san15.performgroup.com
san2.daznservices.com
san17.performgroup.com
san17.performgroup.com
san18.performgroup.com
san1.daznservices.com
san1.daznservices.com
*.performgroup.com
san1.daznservices.com
test.rails-management.daznservices.com

Certificate

The complete raw certificate details for san1.daznservices.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0bj4if2bXXURcuhhdHo
4vnjVeRnrGZxL9qZzZsI7mwlxw1zrfMC+EL0ca8gpBMpH86Dy7M/cngZltU316aJ
gkeypSvwdDvIJY4ckjmUr0RNOnpNvBXw4zM8AqHpzPC20a/1eynyXBn83tt8gd99
YoMrPMqTs90l1t9me4bUVd8b52e/hOTGCNTBt+1Vix/KzsrxMausYIUGYg0HDMbW
jCJCkIaiSDLEN3+QKNjZYdsRwkkaFzIhJ8GG+7dJggTO7eYzM0LlPFdKIfFyhXiJ
C0IOD7ALg7MpBiRnBtzpEJtE57VISu0BbGXWOWgEt4Vqy7UPFdiA4cgdYEIL/swc
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16509613300717286588269508567955281492
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Feltham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DAZN MEDIA SERVICES LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san1.daznservices.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20611800954980714437462246557025697841023898373127457440544484296559395216269927389925283046702298979953295733134092713965871717077948991589287718262853137471789293112926291766237823934550195372446603769466713040861823680848847093623672139290611229010317955465264219483795555939488003713262670631082789728539852229223393678016772108311728653443540598468368047255628018031445757725648894067260860542928372650134220034265098738998045546466589419179636118917435938806482516606285935430503426187870791220581660537643428592773810633895072503455895793036327119065965539526581129314433360866076967436100568866020438389300327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab5f6be562fe471155f3cc1b4b976ba2852a42a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2549 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san1.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.eurobasketwomen.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st.snimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fta.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.wtatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adds.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secsynmedia-download.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmsimages.dazn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.static.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aol.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.olympicqualifiers.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.mackolikfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dy.snimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experts.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.eurobasket.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asset.matchendirect.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.beta.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.tr.euroleague.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.afrobasket.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.copasudamericana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.olympicwomensqualifiers.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-cdn-stag.dazn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaamericaschampionship.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.mackolik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.bm.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oauth.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.sahadan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-cdn.dazn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fta.stage.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaasiachampionship.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.competitions.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sahadan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mackolik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaasiachampionshipwomen.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.sahadan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aol.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantasygames.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.euroleague.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaworldchampionshipwomen.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tahminkolik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daznplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.facebookapp.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.eplayerportal.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.www.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matchendirect.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaamericaschampionshipwomen.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.mackolik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daznstarstrikers.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaworldcup.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.copasudamericana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.copalibertadores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.copalibertadores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.portal.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.stage.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starstrikers.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stage.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep.stage.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eplayerportal.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.sahadan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.beta.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.mackolik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.sportfeeds.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.sportfeeds.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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