san1.daznservices.com

- Dazn Media Services Limited -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 03:3a:51:b0:40:cb:00:cd:71:5c:21:1a:d3:3c:3b:40 was issued on by DigiCert Inc.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Dazn Media Services Limited

Organization: Dazn Media Services Limited
Locality: Feltham
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3a:51:b0:40:cb:00:cd:71:5c:21:1a:d3:3c:3b:40
Serial Number (int): 4290494044536722276692775613574691648
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 0f:e0:ed:20:0d:a6:7a:87:b9:b9:57:7e:82:8d:b2:6a:cb:87:94:c9
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 58:36:45:ea:3f:6f:60:4c:22:85:12:de:13:89:fb:17:d0:7b:f8:ae
Fingerprint (sha256): 48:db:51:ed:00:90:4b:51:9d:7d:09:9c:d8:2f:2c:21:0f:82:71:0c:29:d9:0a:fe:07:57:f5:a4:a3:88:27:33

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate san1.daznservices.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san1.daznservices.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san1.daznservices.com
tahminkolik.com
preprod.portal.daznservices.com
amp.spox.com
secure.fibaamericaschampionshipwomen.livebasketball.tv
daznstarstrikers.goal.com
s.spox.com
fantasygames.sportingnews.com
m.spox.com
api.stage.daznfeeds.com
stage.sahadan.com
ca.nba.com
secure.fibaworldcup.livebasketball.tv
in.nba.sportingnews.com
fta.stage.daznfeeds.com
nba.sportingnews.com
api.mackolikfeeds.com
secure.fibaamericaschampionship.livebasketball.tv
es.stage.nba.sportingnews.com
stage.beta.goal.com
www.spox.com
m.mackolik.com
in.stage.nba.sportingnews.com
images-cdn-stag.dazn.com
secure.eurobasketwomen.livebasketball.tv
www.aol.sportingnews.com
in.nba.com
portal.daznservices.com
fta.daznfeeds.com
secure.static.goal.com
experts.sportingnews.com
secure.fibaworldchampionshipwomen.livebasketball.tv
adds.spox.com
stage.nba.sportingnews.com
secure.euroleague.livebasketball.tv
secure.eurobasket.livebasketball.tv
secure.wtatv.com
preprod.eplayerportal.daznservices.com
starstrikers.goal.com
eplayerportal.daznservices.com
beta.mackolik.com
player.stage.daznfeeds.com
player.daznfeeds.com
ca.stage.nba.sportingnews.com
api.bm.daznservices.com
secure.fibaasiachampionship.livebasketball.tv
player.daznservices.com
mx.nba.sportingnews.com
secsynmedia-download.daznservices.com
stage.copalibertadores.com
stage.beta.sportingnews.com
aol.sportingnews.com
secure.olympicqualifiers.livebasketball.tv
secure.afrobasket.livebasketball.tv
m.sahadan.com
mx.nba.com
www.goal.com
secure.competitions.livebasketball.tv
beta.sahadan.com
www.copalibertadores.com
www.daznplayer.com
api.daznfeeds.com
amp.sportingnews.com
st.snimg.com
cdn.sportfeeds.io
secure.spox.com
ca.nba.sportingnews.com
stage.mackolik.com
secure.fibaasiachampionshipwomen.livebasketball.tv
oauth.daznservices.com
es.nba.sportingnews.com
beta.sportingnews.com
secure.tr.euroleague.livebasketball.tv
www.mackolik.com
beta.goal.com
ar.nba.sportingnews.com
stage.sportingnews.com
stage.www.goal.com
images.daznservices.com
dy.snimg.com
ar.stage.nba.sportingnews.com
secure.facebookapp.goal.com
www.matchendirect.fr
stage.copasudamericana.com
www.sportingnews.com
es.nba.com
www.copasudamericana.com
ar.nba.com
www.sahadan.com
secure.olympicwomensqualifiers.livebasketball.tv
images-cdn.dazn.com
archive.sportingnews.com
mx.stage.nba.sportingnews.com
secure.goal.com
secure.livebasketball.tv

Other certificates including the domain name daznservices.com

(limited to 100 certificates)
san15.performgroup.com
rails-management.daznservices.com
san17.performgroup.com
*.daznservices.com
ra.daznservices.com
san15.performgroup.com
stage.rails-management.daznservices.com
san18.performgroup.com
san18.performgroup.com
stage.rails-management.daznservices.com
san1.daznservices.com
san2.daznservices.com
san1.daznservices.com
san17.performgroup.com
san17.performgroup.com
san18.performgroup.com
stage.rails-management.daznservices.com
san15.performgroup.com
rails-management.daznservices.com
san1.daznservices.com
san1.daznservices.com
*.stage.daznservices.com
san18.performgroup.com
san2.daznservices.com
dev.rails-management.daznservices.com
san1.daznservices.com
san15.performgroup.com
san15.performgroup.com
san2.daznservices.com
san15.performgroup.com
san18.performgroup.com
san1.daznservices.com
san2.daznservices.com
san18.performgroup.com
san2.daznservices.com
san15.performgroup.com
san18.performgroup.com
san1.daznservices.com
san1.daznservices.com
san18.performgroup.com
san2.daznservices.com
san15.performgroup.com
san1.daznservices.com
san1.daznservices.com
dev.rails-management.daznservices.com
san1.daznservices.com
*.performgroup.com
san15.performgroup.com
san2.daznservices.com
san2.daznservices.com
san15.performgroup.com
ra.daznservices.com
san1.daznservices.com
san1.daznservices.com
san15.performgroup.com
san2.daznservices.com
san17.performgroup.com
san1.daznservices.com
san1.daznservices.com
san17.performgroup.com
test.rails-management.daznservices.com
ra.daznservices.com
*.dc1.daznservices.com
san2.daznservices.com
san1.daznservices.com
test.rails-management.daznservices.com
san1.daznservices.com
san1.daznservices.com
san17.performgroup.com
san2.daznservices.com
san1.daznservices.com
san1.daznservices.com
san15.performgroup.com
*.daznservices.com
san18.performgroup.com
san18.performgroup.com
san2.daznservices.com
san15.performgroup.com
ra.daznservices.com
*.dev.daznservices.com
san15.performgroup.com
ra.daznservices.com
san15.performgroup.com
san18.performgroup.com
san15.performgroup.com
san2.daznservices.com
dev.rails-management.daznservices.com
san15.performgroup.com
san15.performgroup.com
san18.performgroup.com
san15.performgroup.com
san2.daznservices.com
san17.performgroup.com
san17.performgroup.com
san18.performgroup.com
san1.daznservices.com
san1.daznservices.com
*.performgroup.com
san1.daznservices.com
test.rails-management.daznservices.com

Certificate

The complete raw certificate details for san1.daznservices.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hqN2xrkfGPdXeZ/yMrZ
mwvtRrATf1inSN0AimCxi8R64aq+D8hY3YQVSYQxOJCo/uOd418fP1DkEhCDiRl3
+jIJgnZzMPXXWXdoLQcJJqI+g2fcTKzx1VrALczoZwi3/vzBdGB73GF8xH7v8Dc8
7HpOCTTaVFhlJ0vBkVBjeWc9D5MnoQ+QNl1GFphdrs7A+Wjhw8/EpAuJn/VPQCBj
SADjYQLwjdxZbizybgL4rbUt/Xy2gufqa13bxVDKZm215edd/b4QUnuD896JYtYp
jdH0ebLwtyf8AMPzh6cWYuV1dHcxM6AA2rIRQAL+TUfAEHRiIIYGnZS3K/LGu+E+
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4290494044536722276692775613574691648
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Feltham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dazn Media Services Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san1.daznservices.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27028091589573410462233512111751055512466445967222955294237889539726126434066370119717301570113455959215544449688609705087274612236390999224104189645826107200489423021570374245946449239346533369130248023066706690182126044320743172319737070921203332339111160394463429058968018721586579659856887278438496448280345832168313307679401096547604081985311196258599731218634439096330775279142477422360697422705626878656450098388846368506149033799507444073720994836742599372651598670219711879353882645201621700365911115754470870845814604175213443403587547046314139476443882960088676602639796824716209764116198176489936441654861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0fe0ed200da67a87b9b9577e828db26acb8794c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2442 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san1.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tahminkolik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.portal.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaamericaschampionshipwomen.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daznstarstrikers.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantasygames.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stage.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.sahadan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaworldcup.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fta.stage.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.mackolikfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaamericaschampionship.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.beta.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.mackolik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-cdn-stag.dazn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.eurobasketwomen.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aol.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fta.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.static.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experts.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaworldchampionshipwomen.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adds.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.euroleague.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.eurobasket.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.wtatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.eplayerportal.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starstrikers.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eplayerportal.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.mackolik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.stage.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.bm.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaasiachampionship.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secsynmedia-download.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.copalibertadores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.beta.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aol.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.olympicqualifiers.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.afrobasket.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.sahadan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.competitions.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.sahadan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.copalibertadores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daznplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st.snimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.sportfeeds.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.mackolik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaasiachampionshipwomen.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oauth.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.tr.euroleague.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mackolik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.www.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dy.snimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.facebookapp.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matchendirect.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.copasudamericana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.copasudamericana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sahadan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.olympicwomensqualifiers.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-cdn.dazn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.livebasketball.tv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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