co.betway.com

- Digital Gaming Corporation -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 6f:df:71:90:e6:31:47:90:be:77:d4:e3:81:65:c3:ff was issued on by Entrust, Inc..

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Digital Gaming Corporation

Organization: Digital Gaming Corporation
Locality: London
Country: GB

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 6f:df:71:90:e6:31:47:90:be:77:d4:e3:81:65:c3:ff
Serial Number (int): 148704493123960670728453989340532818943
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 2f:dc:3c:24:44:07:e0:b0:63:30:0c:3d:01:28:ea:aa:63:62:e0:30
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 03:9e:b6:61:04:6c:82:95:e7:25:80:00:ff:fc:94:5b:3c:50:eb:dd
Fingerprint (sha256): 32:ea:1f:eb:d4:5e:9f:32:2a:61:3c:0b:48:94:46:2c:0a:06:ab:34:2a:0d:aa:c1:b5:7f:75:57:41:b6:e8:77

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate co.betway.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for co.betway.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

co.betway.com
admin.co.betway.com
api.co.betway.com
cdn.co.betway.com
notifyapi.co.betway.com
webservices.co.betway.com
wp.co.betway.com

Other certificates including the domain name betway.com

(limited to 100 certificates)
support.lingo4all.com
support.lingo4all.com
smetric.betway.com
dk-bwcosports.betway.com
support.lingo4all.com
support.lingo4all.com
support.lingo4all.com
support.lingo4all.com
support.lingo4all.com
dk-bwcosports.betway.com
webmail.wintech.eu
smetric.betway.com
helpdesk.compti.co.ao
incapsula.com
incapsula.com
support.onmon.global
support.lingo4all.com
cloud.email1.betway.com
qwerty.aaathavan.com
support.lingo4all.com
support.lingo4all.com
helpdesk.miadistribution.com.au
support.thetelephony.co
incapsula.com
view.email1.betway.com
grassroots.betway.com
support.gamingedge.net
support.signalmash.com
dk-bwpasports.betway.com
ia.betway.com
support.lingo4all.com
incapsula.com
incapsula.com
global-row-uat.betway.com
incapsula.com
incapsula.com
support.lingo4all.com
*.betway.com
support.lingo4all.com
support.lingo4all.com
dk-bwnjsports.betway.com
pages.email1.betway.com
akamai-san64.exacttarget.com
support.bringpro.com
desk.zurot.org
help.gogappi.com
dk-bwcosports.betway.com
support.ospreymeasurement.com
in.betway.com
www.betway.com
images.betway.com
help.gogappi.com
co.betway.com
incapsula.com
support.lingo4all.com
desk.zurot.org
support.goliveus.com
support.onmon.global
ia.betway.com
webmail.wintech.eu
nexsource-sbo.nexus-sr.com
support.whiteoakpartners.com
support.gamingedge.net
nexsource-sbo.nexus-sr.com
support.lingo4all.com
support.tappyrewards.com
support.lingo4all.com
desk.rickandnix.com
helpdesk.ennoventure.com
dk-bwpasports.betway.com
support.thetelephony.co
helpdesk.miadistribution.com.au
servicedesk.onex.co
www.unvs.club
support.thetelephony.co
support.onmon.global
nexsource-sbo.nexus-sr.com
desk.rickandnix.com
support.lingo4all.com
support.goliveus.com
s.betway.com
support.lingo4all.com
support.az.betway.com
helpdesk.ennoventure.com
desk.rickandnix.com
desk.zurot.org
support.ameritrex.net
helpdesk.ennoventure.com
support.signalmash.com
*.betway.com
incapsula.com
www.betway.com
support.gamingedge.net
incapsula.com
support.niveshonline.com
support.lingo4all.com
s.betway.com
smetric.betway.com
zoho.silvprop.com
support.lingo4all.com

Certificate

The complete raw certificate details for co.betway.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFIFHC1rlwZx1ekzVy87
+FxOSRuqb6oeaCIuT4kNK79YqQX+gPW7jl7yeZhGUDzepOEQmDZp2tbQGKxGuwqo
BrJqmwvCCIZ+VpK/+Ayzcfzn+rBZxzJBpWwznw0SW9fU7pr9REr0XSTen2Zd9ZaY
IgkqJlzrouLUVefUJDVAg2fSHst8GxHcAcTqtwRujN4u2fPWeUed1RWA6NRxKbHQ
rMf0nF8EMZeVvGTitd873uIKmIwTwNRYAS2diNN57C4p3vRaiQD+VcndNzo06lnp
zHWLXVAtBn+s8W1T2wJHoaroEuNre2UwIqdbLu4/qkTsJtD6GtMMwYI1FUPj59C5
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 148704493123960670728453989340532818943
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 09:32:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-08 09:32:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digital Gaming Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'co.betway.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21753434004457759485626107716337047083745717239572400871195125863964360504549034536803655284681701502180348610048343947630427316549675265246513476225919048643559188396677059339834428112618593555112712625366241573766494685038702068544836810461766746694329668071618886063109143042603813375137600411445656002799833863863049850792643079895255745279044472111275409717770748370113349884893738844254835758393145695179181834717748190546591368007958784047352760067708738427558022462506293774596519862606285050723711051906750550875113609878278490987262891342516793740818800382018536788640594769295964360951788786019116667419037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2fdc3c244407e0b063300c3d0128eaaa6362e030
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co.betway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.co.betway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.co.betway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.co.betway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notifyapi.co.betway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservices.co.betway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp.co.betway.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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