san3.premiumtv.co.uk

- PERFORM MEDIA SERVICES LIMITED -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 02:f8:f6:25:c5:7e:cf:95:37:f8:b3:e7:c6:97:f8:14 was issued on by DigiCert Inc.

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PERFORM MEDIA SERVICES LIMITED

Organization: PERFORM MEDIA SERVICES LIMITED
State / Province: Middlesex
Locality: Feltham
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:f8:f6:25:c5:7e:cf:95:37:f8:b3:e7:c6:97:f8:14
Serial Number (int): 3951138077812832206924373283588012052
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 7a:12:7f:c2:21:09:36:32:06:a5:3f:cd:e2:99:3e:b7:33:53:43:14
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 07:8d:4c:5f:af:d0:6d:21:7e:b2:dd:37:36:d4:01:03:3f:f7:6c:6f
Fingerprint (sha256): 47:57:59:60:2a:59:90:6b:76:1e:72:fb:c1:af:9f:df:39:9f:65:79:27:06:87:46:90:7b:b4:20:6e:29:0a:88

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate san3.premiumtv.co.uk

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san3.premiumtv.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san3.premiumtv.co.uk
secure.betologicretail.performgroup.com
secure.mobile.caliente.performgroup.com
secure.southamericanwomenschampionship.livebasketball.tv
secure.ics.performgroup.com
secure.betcart.performgroup.com
secure.bet9ja.performgroup.com
beta.sportingnews.com
hs-wcmc.performgroup.com
secure.retaretail.performgroup.com
secure.mobile.betlivebosnia.performgroup.com
secure.mobile.betcart.performgroup.com
secure.singaporepoolsretail.performgroup.com
secure.mobile.dafabet.performgroup.com
secure.mobile.redbet.performgroup.com
secure.mobile.vivobet.performgroup.com
secure.wscsportstechnologies.performgroup.com
secure.mobile.sportsbetaustralia.performgroup.com
dqm.performgroup.com
wab.performfeeds.com
secure.centrobasketchampionship.livebasketball.tv
cp2.performgroup.com
secure.caliente.performgroup.com
secure.mobile.britbet.performgroup.com
secure.mobile.pollachilena.performgroup.com
secure.mobile.bilyoner.performgroup.com
secure.betplay.performgroup.com
s1.swimg.net
secure.britbet.performgroup.com
secure.sportinglife.performgroup.com
secure.fibaasiacup.livebasketball.tv
secure.virginbet.performgroup.com
secure.olybetretail.performgroup.com
secure.betin.performgroup.com
secure.fonbetretail.performgroup.com
stage.sportingnews.com
secure.trotto.performgroup.com
secure.centrobasketwomenschampionship.livebasketball.tv
secure.dafabet.performgroup.com
secure.hkjc.premiumtv.co.uk
hs-wcmc-pp.performgroup.com
secure.betsafe.performgroup.com
secure.mobile.trotto.performgroup.com
secure.stanleybetretail.performgroup.com
secure.ekasaretail.performgroup.com
secure.betlivebosnia.performgroup.com
secure.ligastavokretail.performgroup.com
secure.rukb2v.performgroup.com
secure.mobile.virginbet.performgroup.com
secure.pollachilena.performgroup.com
secure.mobile.coralconnect.performgroup.com
secure.mobile.betin.performgroup.com
stage.beta.sportingnews.com
secure.olympicqualifiers.livebasketball.tv
secure.mobile.racingpost.performgroup.com
secure.mobile.totonl.performgroup.com
secure.mobile.racingpostpaddypower.performgroup.com
dmc.performgroup.com
secure.redbet.performgroup.com
www.stage.testwab.performgroup.com
secure.olympicwomensqualifiers.livebasketball.tv
secure.stsretail.performgroup.com
secure.mobile.betplay.performgroup.com
secure.mobile.rukb2v.performgroup.com
secure.mobile.betsafe.performgroup.com
stage.cp2.performgroup.com
secure.sportsbet.au.performgroup.com
secure.coralconnect.performgroup.com
secure.mobile.racingpostcoral.performgroup.com
stage.dqm.performgroup.com
securestage-testwab.performgroup.com
secure.mobile.racebets.performgroup.com
secure.bilyoner.performgroup.com
secure.racebets.performgroup.com
secure.vivobet.performgroup.com
dmc-pp.performgroup.com
secure.mobile.sportinglife.performgroup.com
secure.hkjc2.performgroup.com
secure.mobile.bet9ja.performgroup.com
secure.southamericanchampionship.livebasketball.tv
secure.totonl.performgroup.com

Other certificates including the domain name premiumtv.co.uk

(limited to 100 certificates)
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san4.premiumtv.co.uk
san12.performgroup.com
san7.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san12.performgroup.com
san9.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san12.performgroup.com
san5.premiumtv.co.uk
san7.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san10.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san5.premiumtv.co.uk
san11.performgroup.com
san3.premiumtv.co.uk
san5.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san7.premiumtv.co.uk
san7.premiumtv.co.uk
san5.premiumtv.co.uk
san5.premiumtv.co.uk
san7.premiumtv.co.uk
san12.performgroup.com
san7.premiumtv.co.uk
san12.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san5.premiumtv.co.uk
san10.performgroup.com
san4.premiumtv.co.uk
san3.premiumtv.co.uk
san3.premiumtv.co.uk
san5.premiumtv.co.uk
san11.performgroup.com
san7.premiumtv.co.uk
san3.premiumtv.co.uk
san10.performgroup.com
san10.performgroup.com
san3.premiumtv.co.uk
san4.premiumtv.co.uk
san8.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san5.premiumtv.co.uk
san12.performgroup.com
san10.performgroup.com
san5.premiumtv.co.uk
san7.premiumtv.co.uk
level3-01.performgroup.com
san4.premiumtv.co.uk
san3.premiumtv.co.uk
san12.performgroup.com
san5.premiumtv.co.uk
san3.premiumtv.co.uk
san10.performgroup.com
san7.premiumtv.co.uk
san9.performgroup.com
*.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san5.premiumtv.co.uk
san5.premiumtv.co.uk
san10.performgroup.com
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san10.performgroup.com
san3.premiumtv.co.uk
san10.performgroup.com
san8.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san3.premiumtv.co.uk
san12.performgroup.com
san4.premiumtv.co.uk
*.premiumtv.co.uk
san4.premiumtv.co.uk
san4.premiumtv.co.uk
san7.premiumtv.co.uk
san7.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san4.premiumtv.co.uk
san5.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san3.premiumtv.co.uk

Certificate

The complete raw certificate details for san3.premiumtv.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SAiGQFDpOaOdry4gwLR
m1Gne6uZHM1rFuBEfydWjxIYBVBhavGjUiGc+7/gnfj0gdV1Pb5NFb/LijSiKAvv
kiFaIrONIHTof7WU+GZOQKdMWHG0c/zTlWCM3mVpQLy3OYQzAAsFIIYvimXxqfTx
a/v5Innxe2TecX4THa8Qv1/7EkJ/UEky4fJ0NYLWj8AL4K8Addw+BovCg/XHmGW2
X+Lb/bgU81Vwmb/uova5HAE17Szi+ZcbS04tykWqfEd3ot5MHU0kmEgnM8/N+g77
JyWGt+XkfOcsbZRCjN91Zi2iKt2kACFizuCLEW/UINlB0U+o4RF+KU+sUobgWVkW
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3951138077812832206924373283588012052
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Middlesex'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Feltham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PERFORM MEDIA SERVICES LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san3.premiumtv.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26904604426322816439765365488279214485294148434577097319178240430552328700248485932237952522490547222759088559086511133692856665820361484338159394858838310802368152220639451637435127843925973330075775196431024049632238782062949363077085822081671230652820845626461409897793812394668786609069941257698705535954622455862921822128835187782417303155092501814369777991874242206790001910409463485573735323381506488969281150651615415966778924746719289031062887865495634632224177222369300688744294421229588188004174370706239301298807069155632470030216629302993768161480788602125164621527118405456589578170570341659891795039933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a127fc22109363206a53fcde2993eb733534314
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2986 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san3.premiumtv.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betologicretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.caliente.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.southamericanwomenschampionship.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ics.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betcart.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bet9ja.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs-wcmc.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.retaretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.betlivebosnia.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.betcart.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.singaporepoolsretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.dafabet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.redbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.vivobet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.wscsportstechnologies.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.sportsbetaustralia.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dqm.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wab.performfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.centrobasketchampionship.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp2.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.caliente.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.britbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.pollachilena.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.bilyoner.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betplay.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1.swimg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.britbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sportinglife.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaasiacup.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.virginbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.olybetretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betin.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fonbetretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.trotto.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.centrobasketwomenschampionship.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.dafabet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.hkjc.premiumtv.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs-wcmc-pp.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betsafe.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.trotto.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stanleybetretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ekasaretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betlivebosnia.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ligastavokretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.rukb2v.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.virginbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.pollachilena.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.coralconnect.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.betin.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.beta.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.olympicqualifiers.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.racingpost.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.totonl.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.racingpostpaddypower.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmc.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.redbet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage.testwab.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.olympicwomensqualifiers.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stsretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.betplay.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.rukb2v.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.betsafe.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.cp2.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sportsbet.au.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.coralconnect.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.racingpostcoral.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.dqm.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securestage-testwab.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.racebets.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bilyoner.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.racebets.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.vivobet.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmc-pp.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.sportinglife.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.hkjc2.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.bet9ja.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.southamericanchampionship.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.totonl.performgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000163ac0b74000000040300473045022041bca4c69944fa98022333147632057e30762a3c3b8eca3f3cc370af044f0ce0022100e9ac467e99ffd1cfee11f177d5910f9a24fcc2ec096414790177eb7d2a861a330076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000163ac0b749e00000403004730450221009170b7172fffd952a03f3d2f4f42b59d6cc5fd57dc250ea52677972397f86b15022026f86d5910ee3bee1865a8475491977bb44df6d9f41bf42d8ae2ff29965d5c41
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00814d6906ec154c0f04cbe2fbf4c0c0da1299c9ee53f7ee4131c856d02ce20682b6d4d08a4bb13dfd1447771d3ca2c84cbe5b0b766fa2e3c7ef400413370abea2f588fd7760eb38128e4d9c44e73e1f4e843e649bcecacad79fb62981a1d5f7f5bf78e2fab9b8a99ea4ba861b3b515f57c42a5fced873f0c52479b70bb53f9d3f837d1cff3558c5dad8a401c00920034b888e5ce828859bd38f03a0bba2a647d434b85f37c32bfa304c1103fdeeb8802536d35a43944670dd8b3a1b00d1c1e42bcf66063a34426f77eb82e7026f200ba617718ab5137f9c4f8812d6be736c8673df43d23805601d02393a007cb0e292b3a259588c6b6ac85a3e4a0fac0257dade