san1.daznservices.com

- DAZN Media Services Limited -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0f:dc:4b:67:f1:93:d2:6c:9e:38:ee:c1:67:bb:4c:cc was issued on by DigiCert Inc.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

DAZN Media Services Limited

Organization: DAZN Media Services Limited
Locality: Feltham
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:dc:4b:67:f1:93:d2:6c:9e:38:ee:c1:67:bb:4c:cc
Serial Number (int): 21082254661637006179380782884112256204
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c3:6d:ca:68:e1:81:b6:f9:46:4a:43:cb:4e:5e:f6:6e:34:be:59:cc
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 71:7d:3f:e6:c2:f8:21:63:2c:17:4e:0e:49:1f:fb:fc:d9:20:83:2e
Fingerprint (sha256): 39:79:b0:e2:a7:f9:fb:31:6d:c1:cc:91:42:df:b9:e8:08:ae:38:37:a6:01:7f:e8:42:7d:4b:e8:3b:83:b5:41

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6-1.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6-1.crl

Check the revocation status for certificate san1.daznservices.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san1.daznservices.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.spox.com
www.sportingnews.com
www.matchendirect.fr
www.goal.com
www.daznplayer.com
www.aol.sportingnews.com
widgets.bm.daznservices.com
vod.premrugby.aka.oss1.daznservices.com
starstrikers.goal.com
stage.www.goal.com
stage.sportingnews.com
stage.nba.sportingnews.com
stage.beta.sportingnews.com
stage.beta.goal.com
st.snimg.com
secure.wtatv.com
secure.tr.euroleague.livebasketball.tv
secure.static.goal.com
secure.spox.com
secure.olympicwomensqualifiers.livebasketball.tv
secure.olympicqualifiers.livebasketball.tv
secure.livebasketball.tv
secure.goal.com
secure.fibaworldcup.livebasketball.tv
secure.fibaworldchampionshipwomen.livebasketball.tv
secure.fibaasiachampionshipwomen.livebasketball.tv
secure.fibaasiachampionship.livebasketball.tv
secure.fibaamericaschampionshipwomen.livebasketball.tv
secure.fibaamericaschampionship.livebasketball.tv
secure.facebookapp.goal.com
secure.euroleague.livebasketball.tv
secure.eurobasketwomen.livebasketball.tv
secure.eurobasket.livebasketball.tv
secure.competitions.livebasketball.tv
secure.afrobasket.livebasketball.tv
secure-geolocation.daznservices.com
secsynmedia-download.daznservices.com
san1.daznservices.com
s.spox.com
preprod.portal.daznservices.com
preprod.eplayerportal.daznservices.com
portal.performgroup.com
portal.daznservices.com
portal-staging.performgroup.com
portal-preprod.performgroup.com
player.stage.daznfeeds.com
player.daznservices.com
player.daznfeeds.com
oauth.daznservices.com
nba.sportingnews.com
mx.stage.nba.sportingnews.com
mx.nba.sportingnews.com
mx.nba.com
m.spox.com
in.stage.nba.sportingnews.com
in.nba.sportingnews.com
in.nba.com
images.preprod.daznservices.com
images.daznservices.com
images-cdn.dazn.com
images-cdn-stag.dazn.com
fta.stage.daznfeeds.com
fta.daznfeeds.com
fantasygames.sportingnews.com
experts.sportingnews.com
es.stage.nba.sportingnews.com
es.nba.sportingnews.com
es.nba.com
eplayerportal.daznservices.com
ep.stage.daznfeeds.com
ep.daznfeeds.com
dy.snimg.com
daznstarstrikers.goal.com
cmsimages.dazn.com
cdn.sportfeeds.io
ca.stage.nba.sportingnews.com
ca.nba.sportingnews.com
ca.nba.com
beta.sportingnews.com
beta.goal.com
asset.matchendirect.fr
archive.sportingnews.com
ar.stage.nba.sportingnews.com
ar.nba.sportingnews.com
ar.nba.com
api.stage.daznfeeds.com
api.daznfeeds.com
api.bm.daznservices.com
aol.sportingnews.com
amp.spox.com
amp.sportingnews.com
adds.spox.com

Other certificates including the domain name daznservices.com

(limited to 100 certificates)
san15.performgroup.com
rails-management.daznservices.com
san17.performgroup.com
*.daznservices.com
ra.daznservices.com
san15.performgroup.com
stage.rails-management.daznservices.com
san18.performgroup.com
san18.performgroup.com
stage.rails-management.daznservices.com
san1.daznservices.com
san2.daznservices.com
san1.daznservices.com
san17.performgroup.com
san17.performgroup.com
san18.performgroup.com
stage.rails-management.daznservices.com
san15.performgroup.com
rails-management.daznservices.com
san1.daznservices.com
san1.daznservices.com
*.stage.daznservices.com
san18.performgroup.com
san2.daznservices.com
dev.rails-management.daznservices.com
san1.daznservices.com
san15.performgroup.com
san15.performgroup.com
san2.daznservices.com
san15.performgroup.com
san18.performgroup.com
san1.daznservices.com
san2.daznservices.com
san18.performgroup.com
san2.daznservices.com
san15.performgroup.com
san18.performgroup.com
san1.daznservices.com
san1.daznservices.com
san18.performgroup.com
san2.daznservices.com
san15.performgroup.com
san1.daznservices.com
san1.daznservices.com
dev.rails-management.daznservices.com
san1.daznservices.com
*.performgroup.com
san15.performgroup.com
san2.daznservices.com
san2.daznservices.com
san15.performgroup.com
ra.daznservices.com
san1.daznservices.com
san1.daznservices.com
san15.performgroup.com
san2.daznservices.com
san17.performgroup.com
san1.daznservices.com
san1.daznservices.com
san17.performgroup.com
test.rails-management.daznservices.com
ra.daznservices.com
*.dc1.daznservices.com
san2.daznservices.com
san1.daznservices.com
test.rails-management.daznservices.com
san1.daznservices.com
san1.daznservices.com
san17.performgroup.com
san2.daznservices.com
san1.daznservices.com
san1.daznservices.com
san15.performgroup.com
*.daznservices.com
san18.performgroup.com
san18.performgroup.com
san2.daznservices.com
san15.performgroup.com
ra.daznservices.com
*.dev.daznservices.com
san15.performgroup.com
ra.daznservices.com
san15.performgroup.com
san18.performgroup.com
san15.performgroup.com
san2.daznservices.com
dev.rails-management.daznservices.com
san15.performgroup.com
san15.performgroup.com
san18.performgroup.com
san15.performgroup.com
san2.daznservices.com
san17.performgroup.com
san17.performgroup.com
san18.performgroup.com
san1.daznservices.com
san1.daznservices.com
*.performgroup.com
san1.daznservices.com
test.rails-management.daznservices.com

Certificate

The complete raw certificate details for san1.daznservices.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPVjCCDj6gAwIBAgIQD9xLZ/GT0myeOO7BZ7tMzDANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjIwMTE0MDAwMDAwWhcN
MjMwMTE0MjM1OTU5WjBlMQswCQYDVQQGEwJHQjEQMA4GA1UEBxMHRmVsdGhhbTEk
MCIGA1UEChMbREFaTiBNZWRpYSBTZXJ2aWNlcyBMaW1pdGVkMR4wHAYDVQQDExVz
YW4xLmRhem5zZXJ2aWNlcy5jb20wWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAQE
k5Vq/T9bsjogiYGHHkgmea2QhyxOVqoNJv3n8jU2JlbwpmANptimDNTMIbFkjenC
DrUztDBoUXv0EjeKsghOo4IM4zCCDN8wHwYDVR0jBBgwFoAUD4BhHIIxYdUvKOeN
Rji0LOHG2eIwHQYDVR0OBBYEFMNtymjhgbb5RkpDy05e9m40vlnMMIIJrgYDVR0R
BIIJpTCCCaGCDHd3dy5zcG94LmNvbYIUd3d3LnNwb3J0aW5nbmV3cy5jb22CFHd3
dy5tYXRjaGVuZGlyZWN0LmZyggx3d3cuZ29hbC5jb22CEnd3dy5kYXpucGxheWVy
LmNvbYIYd3d3LmFvbC5zcG9ydGluZ25ld3MuY29tght3aWRnZXRzLmJtLmRhem5z
ZXJ2aWNlcy5jb22CJ3ZvZC5wcmVtcnVnYnkuYWthLm9zczEuZGF6bnNlcnZpY2Vz
LmNvbYIVc3RhcnN0cmlrZXJzLmdvYWwuY29tghJzdGFnZS53d3cuZ29hbC5jb22C
FnN0YWdlLnNwb3J0aW5nbmV3cy5jb22CGnN0YWdlLm5iYS5zcG9ydGluZ25ld3Mu
Y29tghtzdGFnZS5iZXRhLnNwb3J0aW5nbmV3cy5jb22CE3N0YWdlLmJldGEuZ29h
bC5jb22CDHN0LnNuaW1nLmNvbYIQc2VjdXJlLnd0YXR2LmNvbYImc2VjdXJlLnRy
LmV1cm9sZWFndWUubGl2ZWJhc2tldGJhbGwudHaCFnNlY3VyZS5zdGF0aWMuZ29h
bC5jb22CD3NlY3VyZS5zcG94LmNvbYIwc2VjdXJlLm9seW1waWN3b21lbnNxdWFs
aWZpZXJzLmxpdmViYXNrZXRiYWxsLnR2gipzZWN1cmUub2x5bXBpY3F1YWxpZmll
cnMubGl2ZWJhc2tldGJhbGwudHaCGHNlY3VyZS5saXZlYmFza2V0YmFsbC50doIP
c2VjdXJlLmdvYWwuY29tgiVzZWN1cmUuZmliYXdvcmxkY3VwLmxpdmViYXNrZXRi
YWxsLnR2gjNzZWN1cmUuZmliYXdvcmxkY2hhbXBpb25zaGlwd29tZW4ubGl2ZWJh
c2tldGJhbGwudHaCMnNlY3VyZS5maWJhYXNpYWNoYW1waW9uc2hpcHdvbWVuLmxp
dmViYXNrZXRiYWxsLnR2gi1zZWN1cmUuZmliYWFzaWFjaGFtcGlvbnNoaXAubGl2
ZWJhc2tldGJhbGwudHaCNnNlY3VyZS5maWJhYW1lcmljYXNjaGFtcGlvbnNoaXB3
b21lbi5saXZlYmFza2V0YmFsbC50doIxc2VjdXJlLmZpYmFhbWVyaWNhc2NoYW1w
aW9uc2hpcC5saXZlYmFza2V0YmFsbC50doIbc2VjdXJlLmZhY2Vib29rYXBwLmdv
YWwuY29tgiNzZWN1cmUuZXVyb2xlYWd1ZS5saXZlYmFza2V0YmFsbC50doIoc2Vj
dXJlLmV1cm9iYXNrZXR3b21lbi5saXZlYmFza2V0YmFsbC50doIjc2VjdXJlLmV1
cm9iYXNrZXQubGl2ZWJhc2tldGJhbGwudHaCJXNlY3VyZS5jb21wZXRpdGlvbnMu
bGl2ZWJhc2tldGJhbGwudHaCI3NlY3VyZS5hZnJvYmFza2V0LmxpdmViYXNrZXRi
YWxsLnR2giNzZWN1cmUtZ2VvbG9jYXRpb24uZGF6bnNlcnZpY2VzLmNvbYIlc2Vj
c3lubWVkaWEtZG93bmxvYWQuZGF6bnNlcnZpY2VzLmNvbYIVc2FuMS5kYXpuc2Vy
dmljZXMuY29tggpzLnNwb3guY29tgh9wcmVwcm9kLnBvcnRhbC5kYXpuc2Vydmlj
ZXMuY29tgiZwcmVwcm9kLmVwbGF5ZXJwb3J0YWwuZGF6bnNlcnZpY2VzLmNvbYIX
cG9ydGFsLnBlcmZvcm1ncm91cC5jb22CF3BvcnRhbC5kYXpuc2VydmljZXMuY29t
gh9wb3J0YWwtc3RhZ2luZy5wZXJmb3JtZ3JvdXAuY29tgh9wb3J0YWwtcHJlcHJv
ZC5wZXJmb3JtZ3JvdXAuY29tghpwbGF5ZXIuc3RhZ2UuZGF6bmZlZWRzLmNvbYIX
cGxheWVyLmRhem5zZXJ2aWNlcy5jb22CFHBsYXllci5kYXpuZmVlZHMuY29tghZv
YXV0aC5kYXpuc2VydmljZXMuY29tghRuYmEuc3BvcnRpbmduZXdzLmNvbYIdbXgu
c3RhZ2UubmJhLnNwb3J0aW5nbmV3cy5jb22CF214Lm5iYS5zcG9ydGluZ25ld3Mu
Y29tggpteC5uYmEuY29tggptLnNwb3guY29tgh1pbi5zdGFnZS5uYmEuc3BvcnRp
bmduZXdzLmNvbYIXaW4ubmJhLnNwb3J0aW5nbmV3cy5jb22CCmluLm5iYS5jb22C
H2ltYWdlcy5wcmVwcm9kLmRhem5zZXJ2aWNlcy5jb22CF2ltYWdlcy5kYXpuc2Vy
dmljZXMuY29tghNpbWFnZXMtY2RuLmRhem4uY29tghhpbWFnZXMtY2RuLXN0YWcu
ZGF6bi5jb22CF2Z0YS5zdGFnZS5kYXpuZmVlZHMuY29tghFmdGEuZGF6bmZlZWRz
LmNvbYIdZmFudGFzeWdhbWVzLnNwb3J0aW5nbmV3cy5jb22CGGV4cGVydHMuc3Bv
cnRpbmduZXdzLmNvbYIdZXMuc3RhZ2UubmJhLnNwb3J0aW5nbmV3cy5jb22CF2Vz
Lm5iYS5zcG9ydGluZ25ld3MuY29tggplcy5uYmEuY29tgh5lcGxheWVycG9ydGFs
LmRhem5zZXJ2aWNlcy5jb22CFmVwLnN0YWdlLmRhem5mZWVkcy5jb22CEGVwLmRh
em5mZWVkcy5jb22CDGR5LnNuaW1nLmNvbYIZZGF6bnN0YXJzdHJpa2Vycy5nb2Fs
LmNvbYISY21zaW1hZ2VzLmRhem4uY29tghFjZG4uc3BvcnRmZWVkcy5pb4IdY2Eu
c3RhZ2UubmJhLnNwb3J0aW5nbmV3cy5jb22CF2NhLm5iYS5zcG9ydGluZ25ld3Mu
Y29tggpjYS5uYmEuY29tghViZXRhLnNwb3J0aW5nbmV3cy5jb22CDWJldGEuZ29h
bC5jb22CFmFzc2V0Lm1hdGNoZW5kaXJlY3QuZnKCGGFyY2hpdmUuc3BvcnRpbmdu
ZXdzLmNvbYIdYXIuc3RhZ2UubmJhLnNwb3J0aW5nbmV3cy5jb22CF2FyLm5iYS5z
cG9ydGluZ25ld3MuY29tggphci5uYmEuY29tghdhcGkuc3RhZ2UuZGF6bmZlZWRz
LmNvbYIRYXBpLmRhem5mZWVkcy5jb22CF2FwaS5ibS5kYXpuc2VydmljZXMuY29t
ghRhb2wuc3BvcnRpbmduZXdzLmNvbYIMYW1wLnNwb3guY29tghRhbXAuc3BvcnRp
bmduZXdzLmNvbYINYWRkcy5zcG94LmNvbTAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMG8GA1UdHwRoMGYwMaAvoC2GK2h0dHA6
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYtMS5jcmwwMaAvoC2GK2h0
dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYtMS5jcmwwPgYDVR0g
BDcwNTAzBgZngQwBAgIwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2Vy
dC5jb20vQ1BTMHwGCCsGAQUFBwEBBHAwbjAkBggrBgEFBQcwAYYYaHR0cDovL29j
c3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5kaWdp
Y2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAwGA1UdEwEB
/wQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AOg+0No+9QY1MudXKLyJ
a8kD08vREWvs62nhd31tBr1uAAABflod5MoAAAQDAEcwRQIgXqktONvzBVxiIUfs
1QwFoh9zdFmNz+PX2+ccVjozbQECIQDv7dM9m+sImWCNwwwBMjO/g/Q30/IoisMa
lJHORx46cQB1ADXPGRu/sWxXvw+tTG1Cy7u2JyAmUeo/4SrvqAPDO9ZMAAABflod
5REAAAQDAEYwRAIgPSa02L4/1mtPbv0c7+UiAnx7gXIQ2BM86+eN6yA/aW8CIEgk
UDoAGDrmBbZv0FPUgot4rtpmnGMFJX6gnMnwynhoAHYAs3N3B+GEUPhjhtYFqdwR
CUp5LbFnDAuH3PADDnk2pZoAAAF+Wh3lMQAABAMARzBFAiEAzpydOjdFxqbVzLso
aTDloaWxaRkmE8/W+YxZeEs3eX8CIGFobyywZtd/pxAWNj4Fmlqxjt1gk7qa1Af2
pzzHNKcpMA0GCSqGSIb3DQEBCwUAA4IBAQDaZsAtwaSnilD5ADFxkI0AP/d/Whci
Ck7DHzACxiW8YMHGLcHOE+FakZxzZ8Aob5KW6JtAhr9iwQHgv9OCT6c92W3K1Tom
9zh9fP52b3t7odnWCTL6c7rtSoDOHz1VyXTYU2mStXQsWFo9LjUUfoODKDP/Q25P
5b3lpfVAlnjbOrDpXkxZcKZEEZxpMBlimwa7clYHS38NamjJfc2M4wSPyna+MxLQ
ST2cBieCjB28+0izjU6xEA7s4xO02RTt2EKgNuA+7K8y1GzY1TbS3EXQP+fXBkxe
R1Ug1OR3oyswQPhBMkM2k9su9J7o0BEl1R2BHgpvVOEK+t3E9IEXqsKv
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEBJOVav0/W7I6IImBhx5IJnmtkIcs
TlaqDSb95/I1NiZW8KZgDabYpgzUzCGxZI3pwg61M7QwaFF79BI3irIITg==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21082254661637006179380782884112256204
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Feltham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DAZN Media Services Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san1.daznservices.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00040493956afd3f5bb23a208981871e482679ad90872c4e56aa0d26fde7f235362656f0a6600da6d8a60cd4cc21b1648de9c20eb533b43068517bf412378ab2084e
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c36dca68e181b6f9464a43cb4e5ef66e34be59cc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2469 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matchendirect.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daznplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aol.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.bm.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vod.premrugby.aka.oss1.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starstrikers.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.www.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.beta.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.beta.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st.snimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.wtatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.tr.euroleague.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.static.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.olympicwomensqualifiers.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.olympicqualifiers.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaworldcup.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaworldchampionshipwomen.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaasiachampionshipwomen.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaasiachampionship.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaamericaschampionshipwomen.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaamericaschampionship.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.facebookapp.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.euroleague.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.eurobasketwomen.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.eurobasket.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.competitions.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.afrobasket.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-geolocation.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secsynmedia-download.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san1.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.portal.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.eplayerportal.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-staging.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-preprod.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.stage.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oauth.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.preprod.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-cdn.dazn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-cdn-stag.dazn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fta.stage.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fta.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantasygames.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experts.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eplayerportal.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep.stage.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dy.snimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daznstarstrikers.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmsimages.dazn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.sportfeeds.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asset.matchendirect.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stage.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.bm.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aol.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adds.spox.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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