san3.premiumtv.co.uk

- PERFORM MEDIA SERVICES LIMITED -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 09:f9:c7:7b:69:fd:97:c5:cc:46:30:87:ac:a9:ee:85 was issued on by DigiCert Inc.

With 78 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PERFORM MEDIA SERVICES LIMITED

Organization: PERFORM MEDIA SERVICES LIMITED
State / Province: Middlesex
Locality: Feltham
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:f9:c7:7b:69:fd:97:c5:cc:46:30:87:ac:a9:ee:85
Serial Number (int): 13259979857217031862236981663304904325
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 24:ca:ed:d3:74:b3:16:e6:2d:71:65:41:f5:78:5b:25:a5:1e:16:e4
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 5b:a7:ad:b3:be:cb:09:f4:9a:06:39:71:a4:cd:6c:f2:ba:d7:17:0b
Fingerprint (sha256): 3c:dc:10:a5:0e:d3:36:5f:eb:7b:31:f4:c7:55:ec:0a:d4:00:b1:4c:15:5a:fd:b6:7e:e7:9e:e9:07:58:c6:dd

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate san3.premiumtv.co.uk

78

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san3.premiumtv.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san3.premiumtv.co.uk
secure.betplay.performgroup.com
secure.wscsportstechnologies.performgroup.com
secure.mobile.totonl.performgroup.com
secure.mobile.vivobet.performgroup.com
dqm.performgroup.com
secure.centrobasketchampionship.livebasketball.tv
stage.sportingnews.com
secure.mobile.bilyoner.performgroup.com
secure.mobile.betlivebosnia.performgroup.com
secure.mobile.caliente.performgroup.com
secure.bilyoner.performgroup.com
secure.mobile.betsafe.performgroup.com
secure.mobile.rukb2v.performgroup.com
secure.rukb2v.performgroup.com
secure.pollachilena.performgroup.com
secure.stanleybetretail.performgroup.com
s1.swimg.net
dmc-pp.performgroup.com
hs-wcmc.performgroup.com
secure.hkjc2.performgroup.com
secure.betsafe.performgroup.com
secure.trotto.performgroup.com
secure.dafabet.performgroup.com
dmc.performgroup.com
secure.mobile.dafabet.performgroup.com
stage.cp2.performgroup.com
secure.coralconnect.performgroup.com
secure.caliente.performgroup.com
secure.britbet.performgroup.com
securestage-testwab.performgroup.com
secure.virginbet.performgroup.com
secure.centrobasketwomenschampionship.livebasketball.tv
cp2.performgroup.com
secure.betcart.performgroup.com
secure.mobile.racingpostcoral.performgroup.com
wab.performfeeds.com
beta.sportingnews.com
secure.mobile.racingpostpaddypower.performgroup.com
stage.dqm.performgroup.com
www.stage.testwab.performgroup.com
secure.ics.performgroup.com
secure.sportinglife.performgroup.com
secure.vivobet.performgroup.com
secure.bet9ja.performgroup.com
secure.mobile.coralconnect.performgroup.com
secure.mobile.betcart.performgroup.com
secure.mobile.bet9ja.performgroup.com
secure.olympicqualifiers.livebasketball.tv
secure.fonbetretail.performgroup.com
stage.beta.sportingnews.com
secure.mobile.pollachilena.performgroup.com
secure.olympicwomensqualifiers.livebasketball.tv
hs-wcmc-pp.performgroup.com
secure.mobile.racingpost.performgroup.com
secure.fibaasiacup.livebasketball.tv
secure.redbet.performgroup.com
secure.mobile.virginbet.performgroup.com
secure.retaretail.performgroup.com
secure.stsretail.performgroup.com
secure.betin.performgroup.com
secure.mobile.betplay.performgroup.com
secure.totonl.performgroup.com
secure.betologicretail.performgroup.com
secure.southamericanwomenschampionship.livebasketball.tv
secure.mobile.trotto.performgroup.com
secure.mobile.redbet.performgroup.com
secure.ekasaretail.performgroup.com
secure.mobile.britbet.performgroup.com
secure.southamericanchampionship.livebasketball.tv
secure.mobile.sportinglife.performgroup.com
secure.sportsbet.au.performgroup.com
secure.betlivebosnia.performgroup.com
secure.ligastavokretail.performgroup.com
secure.olybetretail.performgroup.com
secure.mobile.betin.performgroup.com
secure.singaporepoolsretail.performgroup.com
secure.mobile.sportsbetaustralia.performgroup.com

Other certificates including the domain name premiumtv.co.uk

(limited to 100 certificates)
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san4.premiumtv.co.uk
san12.performgroup.com
san7.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san12.performgroup.com
san9.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san12.performgroup.com
san5.premiumtv.co.uk
san7.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san10.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san5.premiumtv.co.uk
san11.performgroup.com
san3.premiumtv.co.uk
san5.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san7.premiumtv.co.uk
san7.premiumtv.co.uk
san5.premiumtv.co.uk
san5.premiumtv.co.uk
san7.premiumtv.co.uk
san12.performgroup.com
san7.premiumtv.co.uk
san12.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san5.premiumtv.co.uk
san10.performgroup.com
san4.premiumtv.co.uk
san3.premiumtv.co.uk
san3.premiumtv.co.uk
san5.premiumtv.co.uk
san11.performgroup.com
san7.premiumtv.co.uk
san3.premiumtv.co.uk
san10.performgroup.com
san10.performgroup.com
san3.premiumtv.co.uk
san4.premiumtv.co.uk
san8.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san5.premiumtv.co.uk
san12.performgroup.com
san10.performgroup.com
san5.premiumtv.co.uk
san7.premiumtv.co.uk
level3-01.performgroup.com
san4.premiumtv.co.uk
san3.premiumtv.co.uk
san12.performgroup.com
san5.premiumtv.co.uk
san3.premiumtv.co.uk
san10.performgroup.com
san7.premiumtv.co.uk
san9.performgroup.com
*.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san5.premiumtv.co.uk
san5.premiumtv.co.uk
san10.performgroup.com
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san10.performgroup.com
san3.premiumtv.co.uk
san10.performgroup.com
san8.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san3.premiumtv.co.uk
san12.performgroup.com
san4.premiumtv.co.uk
*.premiumtv.co.uk
san4.premiumtv.co.uk
san4.premiumtv.co.uk
san7.premiumtv.co.uk
san7.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san4.premiumtv.co.uk
san5.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san3.premiumtv.co.uk

Certificate

The complete raw certificate details for san3.premiumtv.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQTDCCDzSgAwIBAgIQCfnHe2n9l8XMRjCHrKnuhTANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xODA1MDgwMDAwMDBaFw0xOTA3MDMxMjAwMDBaMHsxCzAJBgNVBAYTAkdCMRIw
EAYDVQQIEwlNaWRkbGVzZXgxEDAOBgNVBAcTB0ZlbHRoYW0xJzAlBgNVBAoTHlBF
UkZPUk0gTUVESUEgU0VSVklDRVMgTElNSVRFRDEdMBsGA1UEAxMUc2FuMy5wcmVt
aXVtdHYuY28udWswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVHwpJ
MK6TzIRtQgB3hSEO8kinme+HwuhglzqYgaZTA4H1tYknylZJ2xvcVZ8wBqpmsweD
G/wycH2Qeck82YYasBT0QstGcHQa9jQ8FKpSlZzMu+CNUGjeYkhJZrZPyJgnAZRQ
1G+hf8IqCJlbcenitE/PYDtMmMyUXqVScHTbDvVNia+jZL/f609PmCpgcGvvLcXy
EnDJaEpvEUeB0H1THk5jZCkC4Qs3kl8US5zncO+vYYntqQhTHivDGH6u29LsiGAT
TuSECsCHyEwEhSFCB8d/OCkZe79ukl8zO+M3Fn+lYA3kAXbfUd4R+47uSzBb3YBq
zga8m4gVaUZR1PnjAgMBAAGjggznMIIM4zAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3
se3yo0MWOJ5sxTAdBgNVHQ4EFgQUJMrt03SzFuYtcWVB9XhbJaUeFuQwggtLBgNV
HREEggtCMIILPoIUc2FuMy5wcmVtaXVtdHYuY28udWuCH3NlY3VyZS5iZXRwbGF5
LnBlcmZvcm1ncm91cC5jb22CLXNlY3VyZS53c2NzcG9ydHN0ZWNobm9sb2dpZXMu
cGVyZm9ybWdyb3VwLmNvbYIlc2VjdXJlLm1vYmlsZS50b3RvbmwucGVyZm9ybWdy
b3VwLmNvbYImc2VjdXJlLm1vYmlsZS52aXZvYmV0LnBlcmZvcm1ncm91cC5jb22C
FGRxbS5wZXJmb3JtZ3JvdXAuY29tgjFzZWN1cmUuY2VudHJvYmFza2V0Y2hhbXBp
b25zaGlwLmxpdmViYXNrZXRiYWxsLnR2ghZzdGFnZS5zcG9ydGluZ25ld3MuY29t
gidzZWN1cmUubW9iaWxlLmJpbHlvbmVyLnBlcmZvcm1ncm91cC5jb22CLHNlY3Vy
ZS5tb2JpbGUuYmV0bGl2ZWJvc25pYS5wZXJmb3JtZ3JvdXAuY29tgidzZWN1cmUu
bW9iaWxlLmNhbGllbnRlLnBlcmZvcm1ncm91cC5jb22CIHNlY3VyZS5iaWx5b25l
ci5wZXJmb3JtZ3JvdXAuY29tgiZzZWN1cmUubW9iaWxlLmJldHNhZmUucGVyZm9y
bWdyb3VwLmNvbYIlc2VjdXJlLm1vYmlsZS5ydWtiMnYucGVyZm9ybWdyb3VwLmNv
bYIec2VjdXJlLnJ1a2Iydi5wZXJmb3JtZ3JvdXAuY29tgiRzZWN1cmUucG9sbGFj
aGlsZW5hLnBlcmZvcm1ncm91cC5jb22CKHNlY3VyZS5zdGFubGV5YmV0cmV0YWls
LnBlcmZvcm1ncm91cC5jb22CDHMxLnN3aW1nLm5ldIIXZG1jLXBwLnBlcmZvcm1n
cm91cC5jb22CGGhzLXdjbWMucGVyZm9ybWdyb3VwLmNvbYIdc2VjdXJlLmhramMy
LnBlcmZvcm1ncm91cC5jb22CH3NlY3VyZS5iZXRzYWZlLnBlcmZvcm1ncm91cC5j
b22CHnNlY3VyZS50cm90dG8ucGVyZm9ybWdyb3VwLmNvbYIfc2VjdXJlLmRhZmFi
ZXQucGVyZm9ybWdyb3VwLmNvbYIUZG1jLnBlcmZvcm1ncm91cC5jb22CJnNlY3Vy
ZS5tb2JpbGUuZGFmYWJldC5wZXJmb3JtZ3JvdXAuY29tghpzdGFnZS5jcDIucGVy
Zm9ybWdyb3VwLmNvbYIkc2VjdXJlLmNvcmFsY29ubmVjdC5wZXJmb3JtZ3JvdXAu
Y29tgiBzZWN1cmUuY2FsaWVudGUucGVyZm9ybWdyb3VwLmNvbYIfc2VjdXJlLmJy
aXRiZXQucGVyZm9ybWdyb3VwLmNvbYIkc2VjdXJlc3RhZ2UtdGVzdHdhYi5wZXJm
b3JtZ3JvdXAuY29tgiFzZWN1cmUudmlyZ2luYmV0LnBlcmZvcm1ncm91cC5jb22C
N3NlY3VyZS5jZW50cm9iYXNrZXR3b21lbnNjaGFtcGlvbnNoaXAubGl2ZWJhc2tl
dGJhbGwudHaCFGNwMi5wZXJmb3JtZ3JvdXAuY29tgh9zZWN1cmUuYmV0Y2FydC5w
ZXJmb3JtZ3JvdXAuY29tgi5zZWN1cmUubW9iaWxlLnJhY2luZ3Bvc3Rjb3JhbC5w
ZXJmb3JtZ3JvdXAuY29tghR3YWIucGVyZm9ybWZlZWRzLmNvbYIVYmV0YS5zcG9y
dGluZ25ld3MuY29tgjNzZWN1cmUubW9iaWxlLnJhY2luZ3Bvc3RwYWRkeXBvd2Vy
LnBlcmZvcm1ncm91cC5jb22CGnN0YWdlLmRxbS5wZXJmb3JtZ3JvdXAuY29tgiJ3
d3cuc3RhZ2UudGVzdHdhYi5wZXJmb3JtZ3JvdXAuY29tghtzZWN1cmUuaWNzLnBl
cmZvcm1ncm91cC5jb22CJHNlY3VyZS5zcG9ydGluZ2xpZmUucGVyZm9ybWdyb3Vw
LmNvbYIfc2VjdXJlLnZpdm9iZXQucGVyZm9ybWdyb3VwLmNvbYIec2VjdXJlLmJl
dDlqYS5wZXJmb3JtZ3JvdXAuY29tgitzZWN1cmUubW9iaWxlLmNvcmFsY29ubmVj
dC5wZXJmb3JtZ3JvdXAuY29tgiZzZWN1cmUubW9iaWxlLmJldGNhcnQucGVyZm9y
bWdyb3VwLmNvbYIlc2VjdXJlLm1vYmlsZS5iZXQ5amEucGVyZm9ybWdyb3VwLmNv
bYIqc2VjdXJlLm9seW1waWNxdWFsaWZpZXJzLmxpdmViYXNrZXRiYWxsLnR2giRz
ZWN1cmUuZm9uYmV0cmV0YWlsLnBlcmZvcm1ncm91cC5jb22CG3N0YWdlLmJldGEu
c3BvcnRpbmduZXdzLmNvbYIrc2VjdXJlLm1vYmlsZS5wb2xsYWNoaWxlbmEucGVy
Zm9ybWdyb3VwLmNvbYIwc2VjdXJlLm9seW1waWN3b21lbnNxdWFsaWZpZXJzLmxp
dmViYXNrZXRiYWxsLnR2ghtocy13Y21jLXBwLnBlcmZvcm1ncm91cC5jb22CKXNl
Y3VyZS5tb2JpbGUucmFjaW5ncG9zdC5wZXJmb3JtZ3JvdXAuY29tgiRzZWN1cmUu
ZmliYWFzaWFjdXAubGl2ZWJhc2tldGJhbGwudHaCHnNlY3VyZS5yZWRiZXQucGVy
Zm9ybWdyb3VwLmNvbYIoc2VjdXJlLm1vYmlsZS52aXJnaW5iZXQucGVyZm9ybWdy
b3VwLmNvbYIic2VjdXJlLnJldGFyZXRhaWwucGVyZm9ybWdyb3VwLmNvbYIhc2Vj
dXJlLnN0c3JldGFpbC5wZXJmb3JtZ3JvdXAuY29tgh1zZWN1cmUuYmV0aW4ucGVy
Zm9ybWdyb3VwLmNvbYImc2VjdXJlLm1vYmlsZS5iZXRwbGF5LnBlcmZvcm1ncm91
cC5jb22CHnNlY3VyZS50b3RvbmwucGVyZm9ybWdyb3VwLmNvbYInc2VjdXJlLmJl
dG9sb2dpY3JldGFpbC5wZXJmb3JtZ3JvdXAuY29tgjhzZWN1cmUuc291dGhhbWVy
aWNhbndvbWVuc2NoYW1waW9uc2hpcC5saXZlYmFza2V0YmFsbC50doIlc2VjdXJl
Lm1vYmlsZS50cm90dG8ucGVyZm9ybWdyb3VwLmNvbYIlc2VjdXJlLm1vYmlsZS5y
ZWRiZXQucGVyZm9ybWdyb3VwLmNvbYIjc2VjdXJlLmVrYXNhcmV0YWlsLnBlcmZv
cm1ncm91cC5jb22CJnNlY3VyZS5tb2JpbGUuYnJpdGJldC5wZXJmb3JtZ3JvdXAu
Y29tgjJzZWN1cmUuc291dGhhbWVyaWNhbmNoYW1waW9uc2hpcC5saXZlYmFza2V0
YmFsbC50doIrc2VjdXJlLm1vYmlsZS5zcG9ydGluZ2xpZmUucGVyZm9ybWdyb3Vw
LmNvbYIkc2VjdXJlLnNwb3J0c2JldC5hdS5wZXJmb3JtZ3JvdXAuY29tgiVzZWN1
cmUuYmV0bGl2ZWJvc25pYS5wZXJmb3JtZ3JvdXAuY29tgihzZWN1cmUubGlnYXN0
YXZva3JldGFpbC5wZXJmb3JtZ3JvdXAuY29tgiRzZWN1cmUub2x5YmV0cmV0YWls
LnBlcmZvcm1ncm91cC5jb22CJHNlY3VyZS5tb2JpbGUuYmV0aW4ucGVyZm9ybWdy
b3VwLmNvbYIsc2VjdXJlLnNpbmdhcG9yZXBvb2xzcmV0YWlsLnBlcmZvcm1ncm91
cC5jb22CMXNlY3VyZS5tb2JpbGUuc3BvcnRzYmV0YXVzdHJhbGlhLnBlcmZvcm1n
cm91cC5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjA+BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY2RwLmdlb3RydXN0LmNv
bS9HZW9UcnVzdFJTQUNBMjAxOC5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEw
KjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZn
gQwBAgIwdQYIKwYBBQUHAQEEaTBnMCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVz
Lmdlb3RydXN0LmNvbTA9BggrBgEFBQcwAoYxaHR0cDovL2NhY2VydHMuZ2VvdHJ1
c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNydDAJBgNVHRMEAjAAMBMGCisGAQQB
1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAqB/Z4FSCMRn9ovib7o9Ir
HsSwdoU/xgjxViPAae97NW3DnIiVbbCuu7lo/i8rFCBfTz0scK4cB+QKM6vBrw7p
6amv3cJRzhQeF7IeQfnssA09wsF0nFnXn/VZj7G4dt65OkxxSPckCpPR/+31G8cy
7Nhiyau40qLf1+oF7vASoB8GGyDVM6tcLWmqmgwcGUzzivDY/O00htPdLZZ2J09n
X0JMmSukJGQWpFUawKHW0djko69WhGJEab0OsTjP3AVs3U2/eMHu3OKqO/eY05/y
Z9YEoKUgVv6qrCTJwMfEhUsKNCgqcl4eRZiuOGi1t/n7gKi7L7r82fSNd5ZB6niR
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1R8KSTCuk8yEbUIAd4Uh
DvJIp5nvh8LoYJc6mIGmUwOB9bWJJ8pWSdsb3FWfMAaqZrMHgxv8MnB9kHnJPNmG
GrAU9ELLRnB0GvY0PBSqUpWczLvgjVBo3mJISWa2T8iYJwGUUNRvoX/CKgiZW3Hp
4rRPz2A7TJjMlF6lUnB02w71TYmvo2S/3+tPT5gqYHBr7y3F8hJwyWhKbxFHgdB9
Ux5OY2QpAuELN5JfFEuc53Dvr2GJ7akIUx4rwxh+rtvS7IhgE07khArAh8hMBIUh
QgfHfzgpGXu/bpJfMzvjNxZ/pWAN5AF231HeEfuO7kswW92Aas4GvJuIFWlGUdT5
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13259979857217031862236981663304904325
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Middlesex'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Feltham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PERFORM MEDIA SERVICES LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san3.premiumtv.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26904065440660428501477115496124196757747726227983925057036589923122176404613248065883350383256201779338893250875242417704426987316280785783499900747002472347839899267833830128684705275110965109042350745839875639135554331678910821162891660283633649291960776334079768095575996460465596190753574144758662760409225572730909144658487821688902808936403593383460176253713583021243166560951547717007935567791196254698249464440707743540229118962085917144841189682361228430773501864290351898458850819355504536757284566220357216366786403193976821312617129838510195829393672815822800636401894877006089224384005212914641748163043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24caedd374b316e62d716541f5785b25a51e16e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2882 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san3.premiumtv.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betplay.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.wscsportstechnologies.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.totonl.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.vivobet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dqm.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.centrobasketchampionship.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.bilyoner.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.betlivebosnia.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.caliente.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bilyoner.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.betsafe.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.rukb2v.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.rukb2v.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.pollachilena.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stanleybetretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1.swimg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmc-pp.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs-wcmc.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.hkjc2.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betsafe.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.trotto.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.dafabet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmc.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.dafabet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.cp2.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.coralconnect.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.caliente.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.britbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securestage-testwab.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.virginbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.centrobasketwomenschampionship.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp2.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betcart.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.racingpostcoral.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wab.performfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.racingpostpaddypower.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.dqm.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage.testwab.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ics.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sportinglife.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.vivobet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bet9ja.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.coralconnect.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.betcart.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.bet9ja.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.olympicqualifiers.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fonbetretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.beta.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.pollachilena.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.olympicwomensqualifiers.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs-wcmc-pp.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.racingpost.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaasiacup.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.redbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.virginbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.retaretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stsretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betin.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.betplay.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.totonl.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betologicretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.southamericanwomenschampionship.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.trotto.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.redbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ekasaretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.britbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.southamericanchampionship.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.sportinglife.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sportsbet.au.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betlivebosnia.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ligastavokretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.olybetretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.betin.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.singaporepoolsretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.sportsbetaustralia.performgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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