san4.premiumtv.co.uk

- PERFORM MEDIA SERVICES LIMITED -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0d:44:be:3f:d9:98:65:27:35:fd:f3:2c:d9:59:8c:f5 was issued on by DigiCert Inc.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PERFORM MEDIA SERVICES LIMITED

Organization: PERFORM MEDIA SERVICES LIMITED
Locality: Feltham
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:44:be:3f:d9:98:65:27:35:fd:f3:2c:d9:59:8c:f5
Serial Number (int): 17636898848125688380665009188785196277
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7c:de:69:9f:99:3c:15:17:6c:d1:19:53:2d:cc:ab:ad:a2:86:d0:af
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 3e:1b:37:0b:27:1a:ff:d0:b0:bb:da:ee:84:82:c7:42:04:ed:89:55
Fingerprint (sha256): 34:56:41:53:ff:c2:67:f3:1b:7b:80:96:15:32:5e:99:28:c1:01:e9:35:92:8a:2b:2f:75:68:e6:78:c0:e7:03

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate san4.premiumtv.co.uk

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san4.premiumtv.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san4.premiumtv.co.uk
secure.stage.csbtestingpvis.performgroup.com
secsynmedia-download.performgroup.com
secure.comeon.performgroup.com
secure.stage.csbtestingipfacts.performgroup.com
secure.mobile.comeon.performgroup.com
secure.uedbet.performgroup.com
secure.betonalfa.performgroup.com
secure.performretail.performgroup.com
secure.snairetail.performgroup.com
secure.mobile.efbet.performgroup.com
secure.baltbet.performgroup.com
secure.mobile.winline.performgroup.com
adds.spox.com
player.performgroup.com
secure.mobile.betbright.performgroup.com
secure.mobile.starbet.performgroup.com
secure.mobile.baltbet.performgroup.com
secure.efbet.performgroup.com
secure.mobile.stoloto.performgroup.com
secure.bethard.performgroup.com
secure.svenskaspelretail.performgroup.com
secure.mobile.orakulas.performgroup.com
secure.cashpointretail.performgroup.com
secure.mobile.188.performgroup.com
secure.mobile.fonbet.performgroup.com
secure.stage.csbtestingsvis.performgroup.com
secure.danskespilretail.performgroup.com
login-service.performgroup.com
secure.188.performgroup.com
stage.site-configuration-service.performgroup.com
secure.stage.csbtestingcricket.performgroup.com
secure.mobile.betonalfa.performgroup.com
secure.supermatch.performgroup.com
secure.eurobetretail.performgroup.com
cp.performgroup.com
secure.mobile.kladionica.performgroup.com
daznstarstrikers.goal.com
secure.stage.csbtestingpmfacts.performgroup.com
secure.oddsetretail.performgroup.com
secure.mobile.panbet.performgroup.com
secure.betdaq.performgroup.com
secure.mobile.sportsinteraction.performgroup.com
secure.starbet.performgroup.com
starstrikers.goal.com
secure.mobile.uedbet.performgroup.com
dy.snimg.com
secure.wtatv.com
secure.sportsinteraction.performgroup.com
secure.sunbet.performgroup.com
secure.winline.performgroup.com
secure.orakulas.performgroup.com
secure.betbright.performgroup.com
list-manager-service.performgroup.com
secure.stoloto.performgroup.com
amp.spox.com
secure.sansabetretail.performgroup.com
secure.fonbet.performgroup.com
site-configuration-service.performgroup.com
secure.tipicoretail.performgroup.com
secure.mobile.bethard.performgroup.com
secure.betclic.performgroup.com
secure.mobile.sunbet.performgroup.com
secure.stage.csbtestingall.performgroup.com
secure.mobile.betdaq.performgroup.com
secure.mobile.supermatch.performgroup.com
stage.list-manager-service.performgroup.com
secure.mobile.eurolotto.performgroup.com
secure.bet25retail.performgroup.com
secure.acqua.performgroup.com
secure.kladionica.performgroup.com
secure.paddypower.premiumtv.co.uk
secure.bet90retail.performgroup.com
secure.eurolotto.performgroup.com
secure.mobile.paddypower.performgroup.com
stage.login-service.performgroup.com

Other certificates including the domain name premiumtv.co.uk

(limited to 100 certificates)
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san4.premiumtv.co.uk
san12.performgroup.com
san7.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san12.performgroup.com
san9.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san12.performgroup.com
san5.premiumtv.co.uk
san7.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san10.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san5.premiumtv.co.uk
san11.performgroup.com
san3.premiumtv.co.uk
san5.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san7.premiumtv.co.uk
san7.premiumtv.co.uk
san5.premiumtv.co.uk
san5.premiumtv.co.uk
san7.premiumtv.co.uk
san12.performgroup.com
san7.premiumtv.co.uk
san12.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san5.premiumtv.co.uk
san10.performgroup.com
san4.premiumtv.co.uk
san3.premiumtv.co.uk
san3.premiumtv.co.uk
san5.premiumtv.co.uk
san11.performgroup.com
san7.premiumtv.co.uk
san3.premiumtv.co.uk
san10.performgroup.com
san10.performgroup.com
san3.premiumtv.co.uk
san4.premiumtv.co.uk
san8.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san5.premiumtv.co.uk
san12.performgroup.com
san10.performgroup.com
san5.premiumtv.co.uk
san7.premiumtv.co.uk
level3-01.performgroup.com
san4.premiumtv.co.uk
san3.premiumtv.co.uk
san12.performgroup.com
san5.premiumtv.co.uk
san3.premiumtv.co.uk
san10.performgroup.com
san7.premiumtv.co.uk
san9.performgroup.com
*.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san5.premiumtv.co.uk
san5.premiumtv.co.uk
san10.performgroup.com
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san10.performgroup.com
san3.premiumtv.co.uk
san10.performgroup.com
san8.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san3.premiumtv.co.uk
san12.performgroup.com
san4.premiumtv.co.uk
*.premiumtv.co.uk
san4.premiumtv.co.uk
san4.premiumtv.co.uk
san7.premiumtv.co.uk
san7.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san4.premiumtv.co.uk
san5.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san3.premiumtv.co.uk

Certificate

The complete raw certificate details for san4.premiumtv.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeL3SQI/dj2eW3QD1SyN
UaJsv0fUkiJYNk2uAMS+kp81a2xVZ7bWqDqXvx8BS4aPsW277QWoZb1dkj3MSUaI
6BFTEKgbvX8Dh0Tz09kbNvzIl4iSAskJ/Lc9Wk/8x5q1z0RsAfPb5RshRna30m+v
P+ta+JBU7CLar323IzvuXbzfRj02s1JOXZYabHO1qjHf2pdTRXfPa6ly7qdEWrDu
m33Zpne0QQu1RfUQfL5lRwaH6IRNUH2is6RM6otRFmDEpe5UKmZSOPvPk8Xh1h7f
BCfeu1ZpHoW6dhZlL+T/dFWFWMeji/5dlqUP5S00wxsw6EpSMJs36K8eIEsGwFmh
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17636898848125688380665009188785196277
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-31 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Feltham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PERFORM MEDIA SERVICES LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san4.premiumtv.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24980867163448658355810658905675169508595543112172816260874359037849859710894264586678490161983949623534411961608665366802569083288793557594257495797138824555534657386968565242128282350847204275171216524748986287722206087471834864555631437963960407300057780721027586909113443175021611982386991987104546838646838924037960840944899720419802540912135204198717399816922762140281646449264068377715043226562044837996022362515093314207971411430390950408650663050555404670723965838532201476249821930685741255100721055737075578187638379548990857806931259779596534190498716937623919969143363624075893952577029142048506778329353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7cde699f993c15176cd119532dccabada286d0af
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2778 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san4.premiumtv.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stage.csbtestingpvis.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secsynmedia-download.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.comeon.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stage.csbtestingipfacts.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.comeon.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.uedbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betonalfa.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.performretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.snairetail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.efbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.baltbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.winline.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adds.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.betbright.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.starbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.baltbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.efbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.stoloto.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bethard.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.svenskaspelretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.orakulas.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.cashpointretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.188.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.fonbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stage.csbtestingsvis.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.danskespilretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-service.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.188.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.site-configuration-service.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stage.csbtestingcricket.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.betonalfa.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.supermatch.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.eurobetretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.kladionica.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daznstarstrikers.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stage.csbtestingpmfacts.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.oddsetretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.panbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betdaq.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.sportsinteraction.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.starbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starstrikers.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.uedbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dy.snimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.wtatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sportsinteraction.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sunbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.winline.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.orakulas.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betbright.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'list-manager-service.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stoloto.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sansabetretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fonbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site-configuration-service.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.tipicoretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.bethard.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betclic.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.sunbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stage.csbtestingall.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.betdaq.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.supermatch.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.list-manager-service.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.eurolotto.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bet25retail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.acqua.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.kladionica.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.paddypower.premiumtv.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bet90retail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.eurolotto.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.paddypower.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.login-service.performgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001620a3634bc0000040300463044022001d60bbd91c7fbcf8cae949e363281180f86b45d3c66f6a86b21912d6382c7a80220035d5ce06f170e24ee75351ecfcf949051b3f452b153d9eb32504273bc800ef10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001620a3635e60000040300473045022068ebc87a294014eadadeef8f992e13b6498a80aa1bb83662605c04b73fc4f78c022100b740f0fd4ed12e28f270533197f62c00981f0906ab5ff52e30eabed6849a5863
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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