san1.daznservices.com

- DAZN MEDIA SERVICES LIMITED -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 07:fe:4a:45:9b:b9:4c:82:2b:b0:d6:c7:50:c9:e6:c5 was issued on by DigiCert Inc.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

DAZN MEDIA SERVICES LIMITED

Organization: DAZN MEDIA SERVICES LIMITED
Locality: Feltham
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:fe:4a:45:9b:b9:4c:82:2b:b0:d6:c7:50:c9:e6:c5
Serial Number (int): 10624945785810330135838933556725933765
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 77:e6:06:63:0d:35:47:e0:fd:3c:ab:72:bc:1c:b6:2c:6a:86:7f:38
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 9e:cd:d3:ec:b9:f0:fb:f5:88:2b:73:76:e1:18:a4:d7:b5:17:fd:2b
Fingerprint (sha256): 49:6c:f7:11:df:92:28:b1:81:2e:03:f5:6c:74:98:c5:17:f6:96:0c:62:97:62:81:70:8d:27:a4:d2:a5:e3:da

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate san1.daznservices.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san1.daznservices.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san1.daznservices.com
ep.stage.daznfeeds.com
images-cdn-stag.dazn.com
stage.sahadan.com
daznstarstrikers.goal.com
stage.mackolik.com
www.daznplayer.com
stage.copasudamericana.com
secure.static.goal.com
secure.fibaworldchampionshipwomen.livebasketball.tv
m.spox.com
in.nba.com
secure.eurobasket.livebasketball.tv
ca.stage.nba.sportingnews.com
tahminkolik.com
asset.matchendirect.fr
player.stage.daznfeeds.com
secure.fibaamericaschampionship.livebasketball.tv
in.nba.sportingnews.com
www.sahadan.com
secure.livebasketball.tv
ar.stage.nba.sportingnews.com
fantasygames.sportingnews.com
ca.nba.sportingnews.com
ar.nba.sportingnews.com
secure.eurobasketwomen.livebasketball.tv
es.nba.sportingnews.com
www.aol.sportingnews.com
beta.sportingnews.com
ar.nba.com
cdn.sportfeeds.io
m.sahadan.com
amp.spox.com
secure.afrobasket.livebasketball.tv
ep.daznfeeds.com
portal.daznservices.com
fta.stage.daznfeeds.com
www.spox.com
dy.snimg.com
stage.www.goal.com
api.stage.daznfeeds.com
secsynmedia-download.daznservices.com
player.daznfeeds.com
mx.nba.sportingnews.com
in.stage.nba.sportingnews.com
www.goal.com
experts.sportingnews.com
preprod.portal.daznservices.com
adds.spox.com
fta.daznfeeds.com
www.copasudamericana.com
www.sportingnews.com
api.bm.daznservices.com
oauth.daznservices.com
cmsimages.dazn.com
amp.sportingnews.com
stage.copalibertadores.com
archive.sportingnews.com
beta.mackolik.com
starstrikers.goal.com
es.nba.com
st.snimg.com
secure-geolocation.daznservices.com
images-cdn.dazn.com
beta.goal.com
es.stage.nba.sportingnews.com
images.daznservices.com
aol.sportingnews.com
stage.beta.sportingnews.com
beta.sahadan.com
www.copalibertadores.com
preprod.eplayerportal.daznservices.com
secure.fibaasiachampionship.livebasketball.tv
secure.facebookapp.goal.com
m.mackolik.com
secure.tr.euroleague.livebasketball.tv
secure.euroleague.livebasketball.tv
secure.goal.com
nba.sportingnews.com
api.daznfeeds.com
secure.olympicwomensqualifiers.livebasketball.tv
stage.beta.goal.com
mx.stage.nba.sportingnews.com
eplayerportal.daznservices.com
api.mackolikfeeds.com
stage.sportingnews.com
stage.nba.sportingnews.com
www.matchendirect.fr
secure.spox.com
www.mackolik.com
secure.competitions.livebasketball.tv
player.daznservices.com
secure.fibaworldcup.livebasketball.tv
s.spox.com
mx.nba.com
ca.nba.com
secure.olympicqualifiers.livebasketball.tv
secure.wtatv.com
secure.fibaamericaschampionshipwomen.livebasketball.tv
secure.fibaasiachampionshipwomen.livebasketball.tv

Other certificates including the domain name daznservices.com

(limited to 100 certificates)
san15.performgroup.com
rails-management.daznservices.com
san17.performgroup.com
*.daznservices.com
ra.daznservices.com
san15.performgroup.com
stage.rails-management.daznservices.com
san18.performgroup.com
san18.performgroup.com
stage.rails-management.daznservices.com
san1.daznservices.com
san2.daznservices.com
san1.daznservices.com
san17.performgroup.com
san17.performgroup.com
san18.performgroup.com
stage.rails-management.daznservices.com
san15.performgroup.com
rails-management.daznservices.com
san1.daznservices.com
san1.daznservices.com
*.stage.daznservices.com
san18.performgroup.com
san2.daznservices.com
dev.rails-management.daznservices.com
san1.daznservices.com
san15.performgroup.com
san15.performgroup.com
san2.daznservices.com
san15.performgroup.com
san18.performgroup.com
san1.daznservices.com
san2.daznservices.com
san18.performgroup.com
san2.daznservices.com
san15.performgroup.com
san18.performgroup.com
san1.daznservices.com
san1.daznservices.com
san18.performgroup.com
san2.daznservices.com
san15.performgroup.com
san1.daznservices.com
san1.daznservices.com
dev.rails-management.daznservices.com
san1.daznservices.com
*.performgroup.com
san15.performgroup.com
san2.daznservices.com
san2.daznservices.com
san15.performgroup.com
ra.daznservices.com
san1.daznservices.com
san1.daznservices.com
san15.performgroup.com
san2.daznservices.com
san17.performgroup.com
san1.daznservices.com
san1.daznservices.com
san17.performgroup.com
test.rails-management.daznservices.com
ra.daznservices.com
*.dc1.daznservices.com
san2.daznservices.com
san1.daznservices.com
test.rails-management.daznservices.com
san1.daznservices.com
san1.daznservices.com
san17.performgroup.com
san2.daznservices.com
san1.daznservices.com
san1.daznservices.com
san15.performgroup.com
*.daznservices.com
san18.performgroup.com
san18.performgroup.com
san2.daznservices.com
san15.performgroup.com
ra.daznservices.com
*.dev.daznservices.com
san15.performgroup.com
ra.daznservices.com
san15.performgroup.com
san18.performgroup.com
san15.performgroup.com
san2.daznservices.com
dev.rails-management.daznservices.com
san15.performgroup.com
san15.performgroup.com
san18.performgroup.com
san15.performgroup.com
san2.daznservices.com
san17.performgroup.com
san17.performgroup.com
san18.performgroup.com
san1.daznservices.com
san1.daznservices.com
*.performgroup.com
san1.daznservices.com
test.rails-management.daznservices.com

Certificate

The complete raw certificate details for san1.daznservices.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPHDCCDgSgAwIBAgIQB/5KRZu5TIIrsNbHUMnmxTANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjAwNzAzMDAwMDAwWhcN
MjEwMjA5MTIwMDAwWjBlMQswCQYDVQQGEwJHQjEQMA4GA1UEBxMHRmVsdGhhbTEk
MCIGA1UEChMbREFaTiBNRURJQSBTRVJWSUNFUyBMSU1JVEVEMR4wHAYDVQQDExVz
YW4xLmRhem5zZXJ2aWNlcy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCuCg05sEYn8E+3mIEVT8AZeH/1o0sWbXBUCj6tFd8d8RthkHr3iwbf3nlB
++ckpRvY61a63MVgU3310Q1Mdg7lld0Dk571dD0pGTw622XvOxJbETek2thk6d3f
5HAw986X2p42DabMiNwWq1PbpzEQ+olHh3mz3aZUcCu6eMRgVwadw4GGIMZABROW
S+N2vI4DiaiGEj6D3IqqYT5c6F3Tv9XZQGaEN78c64yI6K+9P8orHZf9ZWYgFBDy
dACBFWfShxlkKiNyglCH/kqkpWJQ1J1FWAcl2DXT8giwkq0/zE1bS3T2YBWicG+b
HowsncKywoxOZx4GwKRtxmZCSR5/AgMBAAGjggveMIIL2jAfBgNVHSMEGDAWgBQP
gGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQUd+YGYw01R+D9PKtyvBy2LGqG
fzgwggoOBgNVHREEggoFMIIKAYIVc2FuMS5kYXpuc2VydmljZXMuY29tghZlcC5z
dGFnZS5kYXpuZmVlZHMuY29tghhpbWFnZXMtY2RuLXN0YWcuZGF6bi5jb22CEXN0
YWdlLnNhaGFkYW4uY29tghlkYXpuc3RhcnN0cmlrZXJzLmdvYWwuY29tghJzdGFn
ZS5tYWNrb2xpay5jb22CEnd3dy5kYXpucGxheWVyLmNvbYIac3RhZ2UuY29wYXN1
ZGFtZXJpY2FuYS5jb22CFnNlY3VyZS5zdGF0aWMuZ29hbC5jb22CM3NlY3VyZS5m
aWJhd29ybGRjaGFtcGlvbnNoaXB3b21lbi5saXZlYmFza2V0YmFsbC50doIKbS5z
cG94LmNvbYIKaW4ubmJhLmNvbYIjc2VjdXJlLmV1cm9iYXNrZXQubGl2ZWJhc2tl
dGJhbGwudHaCHWNhLnN0YWdlLm5iYS5zcG9ydGluZ25ld3MuY29tgg90YWhtaW5r
b2xpay5jb22CFmFzc2V0Lm1hdGNoZW5kaXJlY3QuZnKCGnBsYXllci5zdGFnZS5k
YXpuZmVlZHMuY29tgjFzZWN1cmUuZmliYWFtZXJpY2FzY2hhbXBpb25zaGlwLmxp
dmViYXNrZXRiYWxsLnR2ghdpbi5uYmEuc3BvcnRpbmduZXdzLmNvbYIPd3d3LnNh
aGFkYW4uY29tghhzZWN1cmUubGl2ZWJhc2tldGJhbGwudHaCHWFyLnN0YWdlLm5i
YS5zcG9ydGluZ25ld3MuY29tgh1mYW50YXN5Z2FtZXMuc3BvcnRpbmduZXdzLmNv
bYIXY2EubmJhLnNwb3J0aW5nbmV3cy5jb22CF2FyLm5iYS5zcG9ydGluZ25ld3Mu
Y29tgihzZWN1cmUuZXVyb2Jhc2tldHdvbWVuLmxpdmViYXNrZXRiYWxsLnR2ghdl
cy5uYmEuc3BvcnRpbmduZXdzLmNvbYIYd3d3LmFvbC5zcG9ydGluZ25ld3MuY29t
ghViZXRhLnNwb3J0aW5nbmV3cy5jb22CCmFyLm5iYS5jb22CEWNkbi5zcG9ydGZl
ZWRzLmlvgg1tLnNhaGFkYW4uY29tggxhbXAuc3BveC5jb22CI3NlY3VyZS5hZnJv
YmFza2V0LmxpdmViYXNrZXRiYWxsLnR2ghBlcC5kYXpuZmVlZHMuY29tghdwb3J0
YWwuZGF6bnNlcnZpY2VzLmNvbYIXZnRhLnN0YWdlLmRhem5mZWVkcy5jb22CDHd3
dy5zcG94LmNvbYIMZHkuc25pbWcuY29tghJzdGFnZS53d3cuZ29hbC5jb22CF2Fw
aS5zdGFnZS5kYXpuZmVlZHMuY29tgiVzZWNzeW5tZWRpYS1kb3dubG9hZC5kYXpu
c2VydmljZXMuY29tghRwbGF5ZXIuZGF6bmZlZWRzLmNvbYIXbXgubmJhLnNwb3J0
aW5nbmV3cy5jb22CHWluLnN0YWdlLm5iYS5zcG9ydGluZ25ld3MuY29tggx3d3cu
Z29hbC5jb22CGGV4cGVydHMuc3BvcnRpbmduZXdzLmNvbYIfcHJlcHJvZC5wb3J0
YWwuZGF6bnNlcnZpY2VzLmNvbYINYWRkcy5zcG94LmNvbYIRZnRhLmRhem5mZWVk
cy5jb22CGHd3dy5jb3Bhc3VkYW1lcmljYW5hLmNvbYIUd3d3LnNwb3J0aW5nbmV3
cy5jb22CF2FwaS5ibS5kYXpuc2VydmljZXMuY29tghZvYXV0aC5kYXpuc2Vydmlj
ZXMuY29tghJjbXNpbWFnZXMuZGF6bi5jb22CFGFtcC5zcG9ydGluZ25ld3MuY29t
ghpzdGFnZS5jb3BhbGliZXJ0YWRvcmVzLmNvbYIYYXJjaGl2ZS5zcG9ydGluZ25l
d3MuY29tghFiZXRhLm1hY2tvbGlrLmNvbYIVc3RhcnN0cmlrZXJzLmdvYWwuY29t
ggplcy5uYmEuY29tggxzdC5zbmltZy5jb22CI3NlY3VyZS1nZW9sb2NhdGlvbi5k
YXpuc2VydmljZXMuY29tghNpbWFnZXMtY2RuLmRhem4uY29tgg1iZXRhLmdvYWwu
Y29tgh1lcy5zdGFnZS5uYmEuc3BvcnRpbmduZXdzLmNvbYIXaW1hZ2VzLmRhem5z
ZXJ2aWNlcy5jb22CFGFvbC5zcG9ydGluZ25ld3MuY29tghtzdGFnZS5iZXRhLnNw
b3J0aW5nbmV3cy5jb22CEGJldGEuc2FoYWRhbi5jb22CGHd3dy5jb3BhbGliZXJ0
YWRvcmVzLmNvbYImcHJlcHJvZC5lcGxheWVycG9ydGFsLmRhem5zZXJ2aWNlcy5j
b22CLXNlY3VyZS5maWJhYXNpYWNoYW1waW9uc2hpcC5saXZlYmFza2V0YmFsbC50
doIbc2VjdXJlLmZhY2Vib29rYXBwLmdvYWwuY29tgg5tLm1hY2tvbGlrLmNvbYIm
c2VjdXJlLnRyLmV1cm9sZWFndWUubGl2ZWJhc2tldGJhbGwudHaCI3NlY3VyZS5l
dXJvbGVhZ3VlLmxpdmViYXNrZXRiYWxsLnR2gg9zZWN1cmUuZ29hbC5jb22CFG5i
YS5zcG9ydGluZ25ld3MuY29tghFhcGkuZGF6bmZlZWRzLmNvbYIwc2VjdXJlLm9s
eW1waWN3b21lbnNxdWFsaWZpZXJzLmxpdmViYXNrZXRiYWxsLnR2ghNzdGFnZS5i
ZXRhLmdvYWwuY29tgh1teC5zdGFnZS5uYmEuc3BvcnRpbmduZXdzLmNvbYIeZXBs
YXllcnBvcnRhbC5kYXpuc2VydmljZXMuY29tghVhcGkubWFja29saWtmZWVkcy5j
b22CFnN0YWdlLnNwb3J0aW5nbmV3cy5jb22CGnN0YWdlLm5iYS5zcG9ydGluZ25l
d3MuY29tghR3d3cubWF0Y2hlbmRpcmVjdC5mcoIPc2VjdXJlLnNwb3guY29tghB3
d3cubWFja29saWsuY29tgiVzZWN1cmUuY29tcGV0aXRpb25zLmxpdmViYXNrZXRi
YWxsLnR2ghdwbGF5ZXIuZGF6bnNlcnZpY2VzLmNvbYIlc2VjdXJlLmZpYmF3b3Js
ZGN1cC5saXZlYmFza2V0YmFsbC50doIKcy5zcG94LmNvbYIKbXgubmJhLmNvbYIK
Y2EubmJhLmNvbYIqc2VjdXJlLm9seW1waWNxdWFsaWZpZXJzLmxpdmViYXNrZXRi
YWxsLnR2ghBzZWN1cmUud3RhdHYuY29tgjZzZWN1cmUuZmliYWFtZXJpY2FzY2hh
bXBpb25zaGlwd29tZW4ubGl2ZWJhc2tldGJhbGwudHaCMnNlY3VyZS5maWJhYXNp
YWNoYW1waW9uc2hpcHdvbWVuLmxpdmViYXNrZXRiYWxsLnR2MA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAv
oC2gK4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmww
L6AtoCuGKWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3Js
MEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHwGCCsGAQUFBwEBBHAwbjAk
BggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAC
hjpodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJl
U2VydmVyQ0EuY3J0MAkGA1UdEwQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJ
KoZIhvcNAQELBQADggEBAMKDTarwkHwNQUpAojOzM2hEwlT9HKzqXQAXoKKCXnis
WDjtS9cmeNeSYo8VnEbr4fuY9uh7VLuZdQkT9B3ybZDvxnZIzl6XURfrEqU5o2vo
39QgtT1bFbvOeKp6fU9mk62D05wNje1zh1M4uPSeqaNxWW2s+wkA2psDqmN1Q96k
b5JahtRHJDCQ7x0rZ1jKIYTzlm2zI2UvZfJy0+xo9rBSy20kZ6nrGJ9J7hBkFgsR
syj0okqsT2hG03IVnJXvUcy/Trlbj9r7025S7riL6lUjT0vR6oSovRo6WMPfAMS8
h1P0XAQc70EJpbtIVMh74CRFDmiOx3/v3rhUir8aWeI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgoNObBGJ/BPt5iBFU/A
GXh/9aNLFm1wVAo+rRXfHfEbYZB694sG3955QfvnJKUb2OtWutzFYFN99dENTHYO
5ZXdA5Oe9XQ9KRk8Ottl7zsSWxE3pNrYZOnd3+RwMPfOl9qeNg2mzIjcFqtT26cx
EPqJR4d5s92mVHArunjEYFcGncOBhiDGQAUTlkvjdryOA4mohhI+g9yKqmE+XOhd
07/V2UBmhDe/HOuMiOivvT/KKx2X/WVmIBQQ8nQAgRVn0ocZZCojcoJQh/5KpKVi
UNSdRVgHJdg10/IIsJKtP8xNW0t09mAVonBvmx6MLJ3CssKMTmceBsCkbcZmQkke
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10624945785810330135838933556725933765
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Feltham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DAZN MEDIA SERVICES LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san1.daznservices.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21970421723120873026753532039420171037485735383996705203301155745448648346145826186981574668025319483959220851257581495452386180378007718977311638796389137936154480023200810038964928714571677786892947308359815965819787980325952948187473489315749344083438047204094873649311360769389865182653593820043517490644159703304913114126495258472672030580329609219759652339957222334916702588640324203889186959754370824118075957708532802026612107369463992730643511525833356110863186264454355303520459612727171778316044532211030452364168862843991401173929236749748237659814921792449082586140377057856078282435917633525699272318591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							77e606630d3547e0fd3cab72bc1cb62c6a867f38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2565 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san1.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep.stage.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-cdn-stag.dazn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.sahadan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daznstarstrikers.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.mackolik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daznplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.copasudamericana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.static.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaworldchampionshipwomen.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.eurobasket.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tahminkolik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asset.matchendirect.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.stage.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaamericaschampionship.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sahadan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantasygames.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.eurobasketwomen.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aol.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.sportfeeds.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.sahadan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.afrobasket.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fta.stage.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dy.snimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.www.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stage.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secsynmedia-download.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experts.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.portal.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adds.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fta.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.copasudamericana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.bm.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oauth.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmsimages.dazn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.copalibertadores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.mackolik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starstrikers.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st.snimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-geolocation.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-cdn.dazn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aol.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.beta.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.sahadan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.copalibertadores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.eplayerportal.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaasiachampionship.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.facebookapp.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.mackolik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.tr.euroleague.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.euroleague.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.olympicwomensqualifiers.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.beta.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eplayerportal.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.mackolikfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matchendirect.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mackolik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.competitions.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaworldcup.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.olympicqualifiers.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.wtatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaamericaschampionshipwomen.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaasiachampionshipwomen.livebasketball.tv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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