san1.daznservices.com

- DAZN MEDIA SERVICES LIMITED -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 05:1a:93:a9:da:57:1f:73:0e:43:b2:3a:2f:52:e5:ff was issued on by DigiCert Inc.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

DAZN MEDIA SERVICES LIMITED

Organization: DAZN MEDIA SERVICES LIMITED
Locality: Feltham
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:1a:93:a9:da:57:1f:73:0e:43:b2:3a:2f:52:e5:ff
Serial Number (int): 6784134668590743792210298019572278783
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 64:74:f6:8e:a1:d1:b5:5b:49:64:07:ba:5b:35:e8:8f:08:e8:aa:22
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): e7:91:f6:ce:1c:87:3a:5c:29:8b:17:5c:38:94:20:64:2a:ee:a8:62
Fingerprint (sha256): 52:bb:11:10:f5:fe:dd:9d:fd:40:ef:31:b2:22:14:1b:0a:47:c9:09:94:37:c9:de:e1:5b:3f:fd:16:4f:7f:81

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate san1.daznservices.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san1.daznservices.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san1.daznservices.com
in.nba.sportingnews.com
fta.stage.daznfeeds.com
www.copasudamericana.com
player.daznfeeds.com
preprod.eplayerportal.daznservices.com
ep.stage.daznfeeds.com
stage.sportingnews.com
experts.sportingnews.com
es.stage.nba.sportingnews.com
player.daznservices.com
ca.nba.com
secure.eurobasketwomen.livebasketball.tv
www.copalibertadores.com
secure.wtatv.com
stage.www.goal.com
fantasygames.sportingnews.com
player.stage.daznfeeds.com
nba.sportingnews.com
in.nba.com
oauth.daznservices.com
adds.spox.com
portal.daznservices.com
stage.beta.sportingnews.com
secure.livebasketball.tv
cdn.sportfeeds.io
preprod.portal.daznservices.com
images-cdn.dazn.com
es.nba.com
asset.matchendirect.fr
secure.fibaasiachampionshipwomen.livebasketball.tv
starstrikers.goal.com
dy.snimg.com
secure.fibaworldcup.livebasketball.tv
daznstarstrikers.goal.com
secure.static.goal.com
ca.stage.nba.sportingnews.com
beta.goal.com
secure.eurobasket.livebasketball.tv
secure.goal.com
www.spox.com
secure.competitions.livebasketball.tv
api.stage.daznfeeds.com
m.spox.com
images-cdn-stag.dazn.com
api.bm.daznservices.com
secure.fibaasiachampionship.livebasketball.tv
secsynmedia-download.daznservices.com
beta.sportingnews.com
mx.stage.nba.sportingnews.com
www.sportingnews.com
archive.sportingnews.com
ar.nba.com
secure.euroleague.livebasketball.tv
api.daznfeeds.com
www.aol.sportingnews.com
stage.beta.goal.com
www.matchendirect.fr
mx.nba.com
secure.tr.euroleague.livebasketball.tv
stage.copalibertadores.com
secure.olympicqualifiers.livebasketball.tv
stage.nba.sportingnews.com
fta.daznfeeds.com
ar.nba.sportingnews.com
secure.afrobasket.livebasketball.tv
secure.fibaworldchampionshipwomen.livebasketball.tv
in.stage.nba.sportingnews.com
secure.facebookapp.goal.com
mx.nba.sportingnews.com
secure-geolocation.daznservices.com
s.spox.com
www.goal.com
es.nba.sportingnews.com
www.daznplayer.com
secure.spox.com
ep.daznfeeds.com
eplayerportal.daznservices.com
aol.sportingnews.com
secure.fibaamericaschampionshipwomen.livebasketball.tv
amp.sportingnews.com
ar.stage.nba.sportingnews.com
amp.spox.com
secure.olympicwomensqualifiers.livebasketball.tv
stage.copasudamericana.com
secure.fibaamericaschampionship.livebasketball.tv
cmsimages.dazn.com
st.snimg.com
ca.nba.sportingnews.com
images.daznservices.com

Other certificates including the domain name daznservices.com

(limited to 100 certificates)
san15.performgroup.com
rails-management.daznservices.com
san17.performgroup.com
*.daznservices.com
ra.daznservices.com
san15.performgroup.com
stage.rails-management.daznservices.com
san18.performgroup.com
san18.performgroup.com
stage.rails-management.daznservices.com
san1.daznservices.com
san2.daznservices.com
san1.daznservices.com
san17.performgroup.com
san17.performgroup.com
san18.performgroup.com
stage.rails-management.daznservices.com
san15.performgroup.com
rails-management.daznservices.com
san1.daznservices.com
san1.daznservices.com
*.stage.daznservices.com
san18.performgroup.com
san2.daznservices.com
dev.rails-management.daznservices.com
san1.daznservices.com
san15.performgroup.com
san15.performgroup.com
san2.daznservices.com
san15.performgroup.com
san18.performgroup.com
san1.daznservices.com
san2.daznservices.com
san18.performgroup.com
san2.daznservices.com
san15.performgroup.com
san18.performgroup.com
san1.daznservices.com
san1.daznservices.com
san18.performgroup.com
san2.daznservices.com
san15.performgroup.com
san1.daznservices.com
san1.daznservices.com
dev.rails-management.daznservices.com
san1.daznservices.com
*.performgroup.com
san15.performgroup.com
san2.daznservices.com
san2.daznservices.com
san15.performgroup.com
ra.daznservices.com
san1.daznservices.com
san1.daznservices.com
san15.performgroup.com
san2.daznservices.com
san17.performgroup.com
san1.daznservices.com
san1.daznservices.com
san17.performgroup.com
test.rails-management.daznservices.com
ra.daznservices.com
*.dc1.daznservices.com
san2.daznservices.com
san1.daznservices.com
test.rails-management.daznservices.com
san1.daznservices.com
san1.daznservices.com
san17.performgroup.com
san2.daznservices.com
san1.daznservices.com
san1.daznservices.com
san15.performgroup.com
*.daznservices.com
san18.performgroup.com
san18.performgroup.com
san2.daznservices.com
san15.performgroup.com
ra.daznservices.com
*.dev.daznservices.com
san15.performgroup.com
ra.daznservices.com
san15.performgroup.com
san18.performgroup.com
san15.performgroup.com
san2.daznservices.com
dev.rails-management.daznservices.com
san15.performgroup.com
san15.performgroup.com
san18.performgroup.com
san15.performgroup.com
san2.daznservices.com
san17.performgroup.com
san17.performgroup.com
san18.performgroup.com
san1.daznservices.com
san1.daznservices.com
*.performgroup.com
san1.daznservices.com
test.rails-management.daznservices.com

Certificate

The complete raw certificate details for san1.daznservices.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOZjCCDU6gAwIBAgIQBRqTqdpXH3MOQ7I6L1Ll/zANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjAwNzA4MDAwMDAwWhcN
MjEwMjA5MTIwMDAwWjBlMQswCQYDVQQGEwJHQjEQMA4GA1UEBxMHRmVsdGhhbTEk
MCIGA1UEChMbREFaTiBNRURJQSBTRVJWSUNFUyBMSU1JVEVEMR4wHAYDVQQDExVz
YW4xLmRhem5zZXJ2aWNlcy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDZMCYo6MczeXulKJvZVwTbwSuiwdIKxtuJQQyO4NWV1D/J05IATX7QaRx3
s5+JIcabeCCUnXzTQsPGHPzEDBFDQvJt3qYh7Z9nTUVIYqDMY9IyEoIa9eSmJkyB
TqkfAqnqJ4OViiVXNUx0fOd67vAIj17E5aOtzsBnGFaiGNoYek1ZW1Mf5zV6XIHA
DPOAVBdf9qNztIOPSYsuECpkHxtbUUf97YnT99WvI8grC8g51FvLPQgZk2j71bAA
qVRMQaC3ETytHM+M5mSb5Ko7PNKo2qGWS5Cm08Va/DcoLKLQfLk9eB2LHrnja3sh
DQJUUr6RnDFSPqUruq707Qtksc0rAgMBAAGjggsoMIILJDAfBgNVHSMEGDAWgBQP
gGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQUZHT2jqHRtVtJZAe6WzXojwjo
qiIwgglYBgNVHREEgglPMIIJS4IVc2FuMS5kYXpuc2VydmljZXMuY29tghdpbi5u
YmEuc3BvcnRpbmduZXdzLmNvbYIXZnRhLnN0YWdlLmRhem5mZWVkcy5jb22CGHd3
dy5jb3Bhc3VkYW1lcmljYW5hLmNvbYIUcGxheWVyLmRhem5mZWVkcy5jb22CJnBy
ZXByb2QuZXBsYXllcnBvcnRhbC5kYXpuc2VydmljZXMuY29tghZlcC5zdGFnZS5k
YXpuZmVlZHMuY29tghZzdGFnZS5zcG9ydGluZ25ld3MuY29tghhleHBlcnRzLnNw
b3J0aW5nbmV3cy5jb22CHWVzLnN0YWdlLm5iYS5zcG9ydGluZ25ld3MuY29tghdw
bGF5ZXIuZGF6bnNlcnZpY2VzLmNvbYIKY2EubmJhLmNvbYIoc2VjdXJlLmV1cm9i
YXNrZXR3b21lbi5saXZlYmFza2V0YmFsbC50doIYd3d3LmNvcGFsaWJlcnRhZG9y
ZXMuY29tghBzZWN1cmUud3RhdHYuY29tghJzdGFnZS53d3cuZ29hbC5jb22CHWZh
bnRhc3lnYW1lcy5zcG9ydGluZ25ld3MuY29tghpwbGF5ZXIuc3RhZ2UuZGF6bmZl
ZWRzLmNvbYIUbmJhLnNwb3J0aW5nbmV3cy5jb22CCmluLm5iYS5jb22CFm9hdXRo
LmRhem5zZXJ2aWNlcy5jb22CDWFkZHMuc3BveC5jb22CF3BvcnRhbC5kYXpuc2Vy
dmljZXMuY29tghtzdGFnZS5iZXRhLnNwb3J0aW5nbmV3cy5jb22CGHNlY3VyZS5s
aXZlYmFza2V0YmFsbC50doIRY2RuLnNwb3J0ZmVlZHMuaW+CH3ByZXByb2QucG9y
dGFsLmRhem5zZXJ2aWNlcy5jb22CE2ltYWdlcy1jZG4uZGF6bi5jb22CCmVzLm5i
YS5jb22CFmFzc2V0Lm1hdGNoZW5kaXJlY3QuZnKCMnNlY3VyZS5maWJhYXNpYWNo
YW1waW9uc2hpcHdvbWVuLmxpdmViYXNrZXRiYWxsLnR2ghVzdGFyc3RyaWtlcnMu
Z29hbC5jb22CDGR5LnNuaW1nLmNvbYIlc2VjdXJlLmZpYmF3b3JsZGN1cC5saXZl
YmFza2V0YmFsbC50doIZZGF6bnN0YXJzdHJpa2Vycy5nb2FsLmNvbYIWc2VjdXJl
LnN0YXRpYy5nb2FsLmNvbYIdY2Euc3RhZ2UubmJhLnNwb3J0aW5nbmV3cy5jb22C
DWJldGEuZ29hbC5jb22CI3NlY3VyZS5ldXJvYmFza2V0LmxpdmViYXNrZXRiYWxs
LnR2gg9zZWN1cmUuZ29hbC5jb22CDHd3dy5zcG94LmNvbYIlc2VjdXJlLmNvbXBl
dGl0aW9ucy5saXZlYmFza2V0YmFsbC50doIXYXBpLnN0YWdlLmRhem5mZWVkcy5j
b22CCm0uc3BveC5jb22CGGltYWdlcy1jZG4tc3RhZy5kYXpuLmNvbYIXYXBpLmJt
LmRhem5zZXJ2aWNlcy5jb22CLXNlY3VyZS5maWJhYXNpYWNoYW1waW9uc2hpcC5s
aXZlYmFza2V0YmFsbC50doIlc2Vjc3lubWVkaWEtZG93bmxvYWQuZGF6bnNlcnZp
Y2VzLmNvbYIVYmV0YS5zcG9ydGluZ25ld3MuY29tgh1teC5zdGFnZS5uYmEuc3Bv
cnRpbmduZXdzLmNvbYIUd3d3LnNwb3J0aW5nbmV3cy5jb22CGGFyY2hpdmUuc3Bv
cnRpbmduZXdzLmNvbYIKYXIubmJhLmNvbYIjc2VjdXJlLmV1cm9sZWFndWUubGl2
ZWJhc2tldGJhbGwudHaCEWFwaS5kYXpuZmVlZHMuY29tghh3d3cuYW9sLnNwb3J0
aW5nbmV3cy5jb22CE3N0YWdlLmJldGEuZ29hbC5jb22CFHd3dy5tYXRjaGVuZGly
ZWN0LmZyggpteC5uYmEuY29tgiZzZWN1cmUudHIuZXVyb2xlYWd1ZS5saXZlYmFz
a2V0YmFsbC50doIac3RhZ2UuY29wYWxpYmVydGFkb3Jlcy5jb22CKnNlY3VyZS5v
bHltcGljcXVhbGlmaWVycy5saXZlYmFza2V0YmFsbC50doIac3RhZ2UubmJhLnNw
b3J0aW5nbmV3cy5jb22CEWZ0YS5kYXpuZmVlZHMuY29tghdhci5uYmEuc3BvcnRp
bmduZXdzLmNvbYIjc2VjdXJlLmFmcm9iYXNrZXQubGl2ZWJhc2tldGJhbGwudHaC
M3NlY3VyZS5maWJhd29ybGRjaGFtcGlvbnNoaXB3b21lbi5saXZlYmFza2V0YmFs
bC50doIdaW4uc3RhZ2UubmJhLnNwb3J0aW5nbmV3cy5jb22CG3NlY3VyZS5mYWNl
Ym9va2FwcC5nb2FsLmNvbYIXbXgubmJhLnNwb3J0aW5nbmV3cy5jb22CI3NlY3Vy
ZS1nZW9sb2NhdGlvbi5kYXpuc2VydmljZXMuY29tggpzLnNwb3guY29tggx3d3cu
Z29hbC5jb22CF2VzLm5iYS5zcG9ydGluZ25ld3MuY29tghJ3d3cuZGF6bnBsYXll
ci5jb22CD3NlY3VyZS5zcG94LmNvbYIQZXAuZGF6bmZlZWRzLmNvbYIeZXBsYXll
cnBvcnRhbC5kYXpuc2VydmljZXMuY29tghRhb2wuc3BvcnRpbmduZXdzLmNvbYI2
c2VjdXJlLmZpYmFhbWVyaWNhc2NoYW1waW9uc2hpcHdvbWVuLmxpdmViYXNrZXRi
YWxsLnR2ghRhbXAuc3BvcnRpbmduZXdzLmNvbYIdYXIuc3RhZ2UubmJhLnNwb3J0
aW5nbmV3cy5jb22CDGFtcC5zcG94LmNvbYIwc2VjdXJlLm9seW1waWN3b21lbnNx
dWFsaWZpZXJzLmxpdmViYXNrZXRiYWxsLnR2ghpzdGFnZS5jb3Bhc3VkYW1lcmlj
YW5hLmNvbYIxc2VjdXJlLmZpYmFhbWVyaWNhc2NoYW1waW9uc2hpcC5saXZlYmFz
a2V0YmFsbC50doISY21zaW1hZ2VzLmRhem4uY29tggxzdC5zbmltZy5jb22CF2Nh
Lm5iYS5zcG9ydGluZ25ld3MuY29tghdpbWFnZXMuZGF6bnNlcnZpY2VzLmNvbTAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGsG
A1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zc2NhLXNo
YTItZzYuY3JsMC+gLaArhilodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc3NjYS1z
aGEyLWc2LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIB
FhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB8BggrBgEF
BQcBAQRwMG4wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBG
BggrBgEFBQcwAoY6aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0
U0hBMlNlY3VyZVNlcnZlckNBLmNydDAJBgNVHRMEAjAAMBMGCisGAQQB1nkCBAMB
Af8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBco6xzPaw0li2Rc5mx4rVav71KeYCd
woh4jB+HJFJxjSSVcyOZ0/c/EArv+/JgkblqU3VxWHs/FWJAN1jml9MfWH+Pcwon
Vb/OXvY7hiSRN+0Pt20rfX+0tf7+aQ4/0rdEGaiszLNDsso4/oSU+I5zq5dXTGV3
K8ElmL2wE2+d/0s3HxJx5DQlYczc4wEKk6tD8m8X+krw5Y9IdtM81fH3Do9yXaxX
q69GVHRbzr9si8LRu7Xo+lMTuxiDn2TyL3OjyRepKpUmFCsDxudzD4NibnV1CqsT
il9wa8kSO0uj3SBN6aN2xPZaOmNB1Yic8wNji+QvccXfzA2d3kPK51mk
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TAmKOjHM3l7pSib2VcE
28ErosHSCsbbiUEMjuDVldQ/ydOSAE1+0Gkcd7OfiSHGm3gglJ1800LDxhz8xAwR
Q0Lybd6mIe2fZ01FSGKgzGPSMhKCGvXkpiZMgU6pHwKp6ieDlYolVzVMdHzneu7w
CI9exOWjrc7AZxhWohjaGHpNWVtTH+c1elyBwAzzgFQXX/ajc7SDj0mLLhAqZB8b
W1FH/e2J0/fVryPIKwvIOdRbyz0IGZNo+9WwAKlUTEGgtxE8rRzPjOZkm+SqOzzS
qNqhlkuQptPFWvw3KCyi0Hy5PXgdix6542t7IQ0CVFK+kZwxUj6lK7qu9O0LZLHN
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6784134668590743792210298019572278783
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Feltham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DAZN MEDIA SERVICES LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san1.daznservices.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27417455364892627933968265562432593435230105221756774149113263353617180424592259398677611260815224368092830982202916147808779187919371575463941818279771324468030715596992367035150043523750803763904116755828696760990380092133328375423635730576731074019989540653362956634704562642341615789230803688694417981536030159745842752656402377815124218057943638112611506468981850257717284716227016329128553448878924703556085087627418967358348076203841068602136755547180112170681692784081154167252049970136295157076676520259597727116466641576068816029778593795393255452785872639376300710063952321357456807239582820590923833003307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6474f68ea1d1b55b496407ba5b35e88f08e8aa22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2383 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san1.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fta.stage.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.copasudamericana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.eplayerportal.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep.stage.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experts.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.eurobasketwomen.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.copalibertadores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.wtatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.www.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantasygames.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.stage.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oauth.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adds.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.beta.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.sportfeeds.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.portal.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-cdn.dazn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asset.matchendirect.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaasiachampionshipwomen.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starstrikers.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dy.snimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaworldcup.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daznstarstrikers.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.static.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.eurobasket.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.competitions.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stage.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-cdn-stag.dazn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.bm.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaasiachampionship.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secsynmedia-download.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.euroleague.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aol.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.beta.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matchendirect.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.tr.euroleague.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.copalibertadores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.olympicqualifiers.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fta.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.afrobasket.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaworldchampionshipwomen.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.facebookapp.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-geolocation.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daznplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep.daznfeeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eplayerportal.daznservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aol.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaamericaschampionshipwomen.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.stage.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.spox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.olympicwomensqualifiers.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.copasudamericana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaamericaschampionship.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmsimages.dazn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st.snimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.nba.sportingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.daznservices.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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