san17.performgroup.com

- Perform Media Services Ltd -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 01:fa:87:d5:4a:2c:fa:02:c8:f6:cc:31:b7:94:cc:9d was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Perform Media Services Ltd

Organization: Perform Media Services Ltd
Organization unit: Hanover House
State / Province: Middlesex
Locality: Feltham
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:fa:87:d5:4a:2c:fa:02:c8:f6:cc:31:b7:94:cc:9d
Serial Number (int): 2630057234269995399685341940175654045
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 20:13:eb:96:61:ca:78:7f:2c:e0:5f:ab:48:d0:ad:de:e4:ae:9a:e9
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): d6:dd:3b:69:d3:35:a4:9b:c4:f0:4c:09:7e:e6:7a:55:47:bd:53:2d
Fingerprint (sha256): 76:44:7c:54:e2:a4:33:56:d4:55:ba:b6:56:c3:89:90:04:66:b9:14:f2:36:6a:15:3a:b3:bf:18:8c:01:72:c8

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate san17.performgroup.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san17.performgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san17.performgroup.com
player.daznservices.com

Other certificates including the domain name performgroup.com

(limited to 100 certificates)
ssl004.insnw.net
san3.premiumtv.co.uk
san11.performgroup.com
brandportal.performgroup.com
level3-01.performgroup.com
san15.performgroup.com
www.performgroup.com
www.performgroup.com
san4.premiumtv.co.uk
san18.performgroup.com
san14.performgroup.com
san12.performgroup.com
san7.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san17.performgroup.com
ssl004.insnw.net
san12.performgroup.com
san11.performgroup.com
san9.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san12.performgroup.com
www.performgroup.com
san5.premiumtv.co.uk
san7.premiumtv.co.uk
san8.premiumtv.co.uk
san16.performgroup.com
san4.premiumtv.co.uk
san9.performgroup.com
san15.performgroup.com
san9.performgroup.com
san15.performgroup.com
san18.performgroup.com
san18.performgroup.com
san10.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san5.premiumtv.co.uk
san15.performgroup.com
san15.performgroup.com
san11.performgroup.com
ssl004.insnw.net
san2.daznservices.com
san3.premiumtv.co.uk
san17.performgroup.com
san17.performgroup.com
ssl004.insnw.net
san18.performgroup.com
brandportal.performgroup.com
san12.performgroup.com
*.performgroup.com
san3.premiumtv.co.uk
san16.performgroup.com
san16.performgroup.com
san15.performgroup.com
san7.premiumtv.co.uk
www.worldcup.performgroup.com
performgroup.com
san7.premiumtv.co.uk
ssl004.insnw.net
san12.performgroup.com
san1.daznservices.com
san11.performgroup.com
san7.premiumtv.co.uk
san15.performgroup.com
san5.premiumtv.co.uk
san5.premiumtv.co.uk
san16.performgroup.com
san18.performgroup.com
san7.premiumtv.co.uk
san2.daznservices.com
san12.performgroup.com
san14.performgroup.com
san7.premiumtv.co.uk
san12.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san5.premiumtv.co.uk
san10.performgroup.com
san15.performgroup.com
san4.premiumtv.co.uk
san15.performgroup.com
san2.daznservices.com
*.dev.performgroup.com
ssl004.insnw.net
san3.premiumtv.co.uk
san15.performgroup.com
san3.premiumtv.co.uk
performgroup.com
www.performgroup.com
san11.performgroup.com
san5.premiumtv.co.uk
san11.performgroup.com
san7.premiumtv.co.uk
san3.premiumtv.co.uk
san16.performgroup.com
san10.performgroup.com
san11.performgroup.com
san10.performgroup.com

Certificate

The complete raw certificate details for san17.performgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0Kz/Kvsjvf+REvyUrUu
1vltEPIFWaB9NomO23A29aLpk7Co+euccCDupIAHkDWUiqEBIHAFVwSIEYWdnNgn
xxATzl2lMWsLONGeXpfT1A0Z4wAOQSTUkE6Rjd9tWwy05dlC8PplN6s4AeEr0k60
DK63d6Cbqdvwt0jtGvt5zU1S6HqdsLCroaYanKoG6unMUoifmO64GnMM8Xzj6G7H
+23NB8XTJolE8slLX+4CyeRqxhWGYpESVK9O27DB3jufTApLJECWV/OYMy6UMsgi
Vprvu8YdpDTaMXMMvFPH3/EgKaMsqm7WfXKLZ6a3jRkGtoRsYrRWfPkUsg3C5QTh
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2630057234269995399685341940175654045
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Middlesex'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Feltham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Perform Media Services Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hanover House'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san17.performgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23639455540467759224680262224257989084778598932236219005394193120770868562256336613203636548907663959293973148304984703728580469331554898709786774173646834994922895700633988693159959897912294468866186620285547666194100724712943915562104197033790351555717513434594652490784246013911066778991154104727871971443977018575219188905705687531992686592231492528476673426692939630968009755107743410553183258735158512450062446638349994812830130050602922404296521171101688111680417117098556357020135502998260892938756642768703104309049492447363643896683864255925313158034207849261162501588942092373555250983321713190326264717607
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2013eb9661ca787f2ce05fab48d0addee4ae9ae9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san17.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.daznservices.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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