san4.premiumtv.co.uk

- PERFORM MEDIA SERVICES LIMITED -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 01:2c:26:3d:c1:ab:2e:27:0c:12:ee:91:a5:7b:bf:96 was issued on by DigiCert Inc.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PERFORM MEDIA SERVICES LIMITED

Organization: PERFORM MEDIA SERVICES LIMITED
State / Province: Middlesex
Locality: Feltham
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:2c:26:3d:c1:ab:2e:27:0c:12:ee:91:a5:7b:bf:96
Serial Number (int): 1558464681980851581984802818955657110
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 20:e3:1f:62:e8:19:2e:5c:e2:e2:47:a9:6f:09:c7:2f:e7:40:66:5a
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): d1:c9:cc:b4:03:a8:6f:53:06:43:0a:f1:4d:54:d6:ea:df:da:5f:99
Fingerprint (sha256): 28:90:23:cc:4e:60:82:af:6c:50:41:bb:7e:37:0c:96:aa:54:da:5e:6e:ac:cd:04:1d:10:68:15:04:82:27:1d

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate san4.premiumtv.co.uk

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san4.premiumtv.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san4.premiumtv.co.uk
secure.stage.csbtestingcricket.performgroup.com
dy.snimg.com
login-service.performgroup.com
secure.winline.performgroup.com
secure.comeon.performgroup.com
secure.sansabetretail.performgroup.com
secure.bethard.performgroup.com
site-configuration-service.performgroup.com
secure.performretail.performgroup.com
secure.paddypower.premiumtv.co.uk
secure.mobile.kladionica.performgroup.com
secure.mobile.comeon.performgroup.com
secure.stage.csbtestingpvis.performgroup.com
secure.mobile.efbet.performgroup.com
secure.sunbet.performgroup.com
cp.performgroup.com
secure.snairetail.performgroup.com
secure.stage.csbtestingall.performgroup.com
secure.mobile.starbet.performgroup.com
secure.mobile.188.performgroup.com
secure.mobile.uedbet.performgroup.com
secure.eurobetretail.performgroup.com
secure.supermatch.performgroup.com
secure.stage.csbtestingpmfacts.performgroup.com
daznstarstrikers.goal.com
secure.mobile.bethard.performgroup.com
secure.fonbet.performgroup.com
secure.wtatv.com
secure.acqua.performgroup.com
secure.stoloto.performgroup.com
secure.mobile.baltbet.performgroup.com
player.performgroup.com
secure.cashpointretail.performgroup.com
secure.tipicoretail.performgroup.com
secure.oddsetretail.performgroup.com
secure.188.performgroup.com
secure.mobile.orakulas.performgroup.com
secure.stage.csbtestingipfacts.performgroup.com
secure.mobile.eurolotto.performgroup.com
secure.mobile.betdaq.performgroup.com
secsynmedia-download.performgroup.com
secure.eurolotto.performgroup.com
stage.login-service.performgroup.com
secure.mobile.sunbet.performgroup.com
secure.mobile.sportsinteraction.performgroup.com
secure.bet90retail.performgroup.com
secure.stage.csbtestingsvis.performgroup.com
secure.mobile.paddypower.performgroup.com
secure.svenskaspelretail.performgroup.com
secure.mobile.stoloto.performgroup.com
list-manager-service.performgroup.com
secure.mobile.winline.performgroup.com
secure.mobile.panbet.performgroup.com
secure.danskespilretail.performgroup.com
starstrikers.goal.com
secure.kladionica.performgroup.com
secure.bet25retail.performgroup.com
secure.sportsinteraction.performgroup.com
secure.betclic.performgroup.com
stage.site-configuration-service.performgroup.com
secure.efbet.performgroup.com
secure.betonalfa.performgroup.com
secure.uedbet.performgroup.com
secure.starbet.performgroup.com
amp.spox.com
secure.betdaq.performgroup.com
secure.baltbet.performgroup.com
stage.list-manager-service.performgroup.com
secure.mobile.fonbet.performgroup.com
secure.mobile.supermatch.performgroup.com
secure.orakulas.performgroup.com
secure.mobile.betbright.performgroup.com
secure.mobile.betonalfa.performgroup.com
adds.spox.com
secure.betbright.performgroup.com

Other certificates including the domain name premiumtv.co.uk

(limited to 100 certificates)
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san4.premiumtv.co.uk
san12.performgroup.com
san7.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san12.performgroup.com
san9.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san12.performgroup.com
san5.premiumtv.co.uk
san7.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san10.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san5.premiumtv.co.uk
san11.performgroup.com
san3.premiumtv.co.uk
san5.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san7.premiumtv.co.uk
san7.premiumtv.co.uk
san5.premiumtv.co.uk
san5.premiumtv.co.uk
san7.premiumtv.co.uk
san12.performgroup.com
san7.premiumtv.co.uk
san12.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san5.premiumtv.co.uk
san10.performgroup.com
san4.premiumtv.co.uk
san3.premiumtv.co.uk
san3.premiumtv.co.uk
san5.premiumtv.co.uk
san11.performgroup.com
san7.premiumtv.co.uk
san3.premiumtv.co.uk
san10.performgroup.com
san10.performgroup.com
san3.premiumtv.co.uk
san4.premiumtv.co.uk
san8.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san5.premiumtv.co.uk
san12.performgroup.com
san10.performgroup.com
san5.premiumtv.co.uk
san7.premiumtv.co.uk
level3-01.performgroup.com
san4.premiumtv.co.uk
san3.premiumtv.co.uk
san12.performgroup.com
san5.premiumtv.co.uk
san3.premiumtv.co.uk
san10.performgroup.com
san7.premiumtv.co.uk
san9.performgroup.com
*.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san5.premiumtv.co.uk
san5.premiumtv.co.uk
san10.performgroup.com
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san10.performgroup.com
san3.premiumtv.co.uk
san10.performgroup.com
san8.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san3.premiumtv.co.uk
san12.performgroup.com
san4.premiumtv.co.uk
*.premiumtv.co.uk
san4.premiumtv.co.uk
san4.premiumtv.co.uk
san7.premiumtv.co.uk
san7.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san4.premiumtv.co.uk
san5.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san3.premiumtv.co.uk

Certificate

The complete raw certificate details for san4.premiumtv.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LpqN37LXYyU0awG6AKU
RYD0H9HM5KGzcc35z0lLF7qWyEcXShoqkrM1NoCBuATYPqXXmAW149PVZY23A/Xr
h8oBnsJI6k/ojsJ19ZoDSk1Kef8BRuTrcrzlNU8MyHL6bjZrFpjY+PtVDA+Gx3E5
9HHFM7S4P8zat7RK7K0iZJJQ739ktWndGgydQWAeVY2hQxFV/AcZalEJNPNEnVDv
u6lzMx3KZ0yxPYViw4urdoARyJQbna2OPDNhdNGq+y9bJA3bcOpmFRnNrNrNf1SP
uBZIV+Opt5aJvgXzLMjYRvcszBWHy3/oL3ADnjh5rTteL50NeXGUf/U7Zf1Gyeng
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1558464681980851581984802818955657110
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Middlesex'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Feltham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PERFORM MEDIA SERVICES LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san4.premiumtv.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27864351710381682067802315875363679861732319973292231881931358632823915766659868794857497165454646792749695314918688828906034814285145462157560332052839827334373337827904849083884175432449902167342271893863895026783355814558147602438456942488590576669534484458486645359207589266280403819390231968205955765706953125229024651694668140622310403486604758496952617759484847042777562490568815550080134192386367975982629814134720330882262253702335293388235337975121842442899954558979029733219385785264308654085925897705739986218204358853686409952366783748005444844380073569545057837910226641082653696041132877232535279099963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20e31f62e8192e5ce2e247a96f09c72fe740665a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2778 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san4.premiumtv.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stage.csbtestingcricket.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dy.snimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-service.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.winline.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.comeon.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sansabetretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bethard.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site-configuration-service.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.performretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.paddypower.premiumtv.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.kladionica.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.comeon.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stage.csbtestingpvis.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.efbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sunbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.snairetail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stage.csbtestingall.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.starbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.188.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.uedbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.eurobetretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.supermatch.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stage.csbtestingpmfacts.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daznstarstrikers.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.bethard.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fonbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.wtatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.acqua.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stoloto.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.baltbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.cashpointretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.tipicoretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.oddsetretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.188.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.orakulas.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stage.csbtestingipfacts.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.eurolotto.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.betdaq.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secsynmedia-download.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.eurolotto.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.login-service.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.sunbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.sportsinteraction.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bet90retail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stage.csbtestingsvis.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.paddypower.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.svenskaspelretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.stoloto.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'list-manager-service.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.winline.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.panbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.danskespilretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starstrikers.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.kladionica.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bet25retail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sportsinteraction.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betclic.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.site-configuration-service.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.efbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betonalfa.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.uedbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.starbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betdaq.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.baltbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.list-manager-service.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.fonbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.supermatch.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.orakulas.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.betbright.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.betonalfa.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adds.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betbright.performgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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