www.nowtv.com

- Sky Plc. -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 1a:de:af:53:ef:b5:e8:f9:3b:4d:4a:c3:3d:ce:d0:ae was issued on by GeoTrust Inc..

With 55 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Sky Plc.

Organization: Sky Plc.
State / Province: Middlesex
Locality: Isleworth
Country: GB

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1a:de:af:53:ef:b5:e8:f9:3b:4d:4a:c3:3d:ce:d0:ae
Serial Number (int): 35716173864807505262485138026571681966
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): ef:55:22:35:93:62:a8:8b:92:ab:74:0a:c6:95:64:7b:b1:90:ac:77
Fingerprint (sha256): b5:43:6b:1e:5c:d8:96:5e:5a:fa:7f:0d:a0:71:51:ae:64:d1:cf:bf:10:80:d3:4b:02:bf:e6:c8:73:1c:68:66

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate www.nowtv.com

55

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nowtv.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mgo.sky.com
tv.int-trial.nowtv.com
web-static.skystore.com
preview.nowtv.com
optimisation.atom.nowtv.com
ie.api.atom.nowtv.com
video.news.sky.com
xbox.sky.com
smpr.sky.com
nowtv.com
images.metadata.sky.com
content.ott.sky.com
my.nowtv.com
signup.nowtv.com
smxb.sky.com
smps.sky.com
sman.sky.com
preview.help.sky.com
search.nowtv.com
monitor.waflogs.nowtv.com
aks-xbox.sky.com
analytics.global.sky.com
catalogue.nowtv.com
services.nowtv.com
smio.sky.com
feeds.skynews.com
help.nowtv.com
help.sky.com
gops.sky.com
ssl.epgsky.com
smlg.sky.com
media.skynews.com
shop.nowtv.com
web.int-trial.nowtv.com
www.sky.com
client.nowtv.com
editorial.nowtv.com
secure-epgservices.sky.com
web-toolkit.global.sky.com
atlantis.epgsky.com
watch.nowtv.com
web.static.nowtv.com
smrk.sky.com
goxb.sky.com
myaccount.sky.com
playout.nowtv.com
signup.preview.nowtv.com
assets.sky.com
images.store.sky.com
roi.epgsky.com
smpc.sky.com
global.sky.com
my.sky.com
account.nowtv.com
www.nowtv.com

Other certificates including the domain name nowtv.com

(limited to 100 certificates)
secure03.stage.lithium.com
skyidapp.sky.com
www.nowtv.com
crosstv.nowtv.com
secure03.stage.lithium.com
secure03.stage.lithium.com
search.nowtv.com
chromecast.nowtv.com
www.stage.nowtv.com
www.nowtv.com
uiapi.id.int.nowtv.it
services.stage.nowtv.com
secure03.stage.lithium.com
ie.api.atom.nowtv.com
crmg-local.nowtv.com
geekzone.nowtv.com
www.stage.nowtv.com

help.nowtv.com
roku.int.nowtv.com
staging.ott.sky.com
stg1.skyidapp.sky.com
secure03.stage.lithium.com
api.nowtv.com
secure03.stage.lithium.com
uc18.janrainengage.com
ie.api.stage2.atom.nowtv.com
secure03.stage.lithium.com
slo.skyidappintl.sky.com
*.api.stage.nowtv.com
id.nowtv.com
secure03.stage.lithium.com
skyidapp.sky.com
slo.skyidappintl.sky.com
www.stage.nowtv.com
www.stage.nowtv.com
ie.api.atom.nowtv.com
click.messaging.nowtv.com
www.stage.nowtv.com
services.nowtv.com
secure03.stage.lithium.com
ott.sky.com
*.api.nowtv.com
uiapi.id.int.nowtv.it
secure03.stage.lithium.com
uc18.janrainengage.com
slo.skyidappintl.sky.com
secure03.stage.lithium.com
ie.api.stage1.atom.nowtv.com
secure03.stage.lithium.com

www.stage.nowtv.com
www.nowtv.com
my.nowtv.com
uiapi.id.int.nowtv.it
staging.ott.sky.com
crmg.nowtv.com
secure03.stage.lithium.com
www.nowtv.com
onebrief.nowtv.com
stage-mcs-gatekeeper.sky.com
services.stage.nowtv.com
secure03.stage.lithium.com

secure03.stage.lithium.com
community.nowtv.com
interest.sky.com
staging.ott.sky.com
secure03.stage.lithium.com
secure03.stage.lithium.com
nowtv.com
nowtv.com
cms.stage1.atom.nowtv.com
device.nowtv.com
api.atom.nowtv.com
slo.skyidappintl.sky.com
www.stage.nowtv.com
signup.nowtv.com
*.api.nowtv.com
skyidapp.sky.com
www.stage.nowtv.com
secure03.stage.lithium.com
ott.sky.com
cks-thirdparty.ovp.stable-int.nowtv.com
www.nowtv.com
webstatic.stage.nowtv.com
watch.stage.nowtv.com
*.stage.nowtv.com
www.stage.nowtv.com
secure03.stage.lithium.com
api.stage1.atom.nowtv.com

www.nowtv.com
uc18.janrainengage.com
www.nowtv.com
www.stage.nowtv.com
uiapi.id.int.nowtv.it
secure03.stage.lithium.com
services.nowtv.com
ott.sky.com

Certificate

The complete raw certificate details for www.nowtv.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJyzCCCLOgAwIBAgIQGt6vU++16Pk7TUrDPc7QrjANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTcwOTExMDAwMDAwWhcNMTgxMDExMjM1
OTU5WjBgMQswCQYDVQQGEwJHQjESMBAGA1UECAwJTWlkZGxlc2V4MRIwEAYDVQQH
DAlJc2xld29ydGgxETAPBgNVBAoMCFNreSBQbGMuMRYwFAYDVQQDDA13d3cubm93
dHYuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FAh7/bEN8rm
gLcKlAcTF+SjWnzvGHpZC3Z3gJFvgkV1/P3BxiuUtGR9wxJbxTI9mvwrR8FIIzFQ
ZVr2cx3kjWiJCT1YBZ2a3NdaZrIVeQ89M8QGvguFc4jO1SYBwDlRh4O0HbDLdXBy
8piQcGyNb9msd5BA64SHfLt1cWubNJL4SH1CiOUDAKqyuCgU455+Bc0ExhcMYzZW
FX5k9UdmlDv9AJkORHYNXp4anCBWCloWPL00UiNUklqPoAEgXxjsNPO9E1S5ds39
gWQE+pVVAYpMKM8LznUnK+h23Bq+zeKOAm4AcYvW6UfQdkuV6geoFKE8m7hHS6cL
ri11KazK5wIDAQABo4IGmzCCBpcwggQKBgNVHREEggQBMIID/YILbWdvLnNreS5j
b22CFnR2LmludC10cmlhbC5ub3d0di5jb22CF3dlYi1zdGF0aWMuc2t5c3RvcmUu
Y29tghFwcmV2aWV3Lm5vd3R2LmNvbYIbb3B0aW1pc2F0aW9uLmF0b20ubm93dHYu
Y29tghVpZS5hcGkuYXRvbS5ub3d0di5jb22CEnZpZGVvLm5ld3Muc2t5LmNvbYIM
eGJveC5za3kuY29tggxzbXByLnNreS5jb22CCW5vd3R2LmNvbYIXaW1hZ2VzLm1l
dGFkYXRhLnNreS5jb22CE2NvbnRlbnQub3R0LnNreS5jb22CDG15Lm5vd3R2LmNv
bYIQc2lnbnVwLm5vd3R2LmNvbYIMc214Yi5za3kuY29tggxzbXBzLnNreS5jb22C
DHNtYW4uc2t5LmNvbYIUcHJldmlldy5oZWxwLnNreS5jb22CEHNlYXJjaC5ub3d0
di5jb22CGW1vbml0b3Iud2FmbG9ncy5ub3d0di5jb22CEGFrcy14Ym94LnNreS5j
b22CGGFuYWx5dGljcy5nbG9iYWwuc2t5LmNvbYITY2F0YWxvZ3VlLm5vd3R2LmNv
bYISc2VydmljZXMubm93dHYuY29tggxzbWlvLnNreS5jb22CEWZlZWRzLnNreW5l
d3MuY29tgg5oZWxwLm5vd3R2LmNvbYIMaGVscC5za3kuY29tggxnb3BzLnNreS5j
b22CDnNzbC5lcGdza3kuY29tggxzbWxnLnNreS5jb22CEW1lZGlhLnNreW5ld3Mu
Y29tgg5zaG9wLm5vd3R2LmNvbYIXd2ViLmludC10cmlhbC5ub3d0di5jb22CC3d3
dy5za3kuY29tghBjbGllbnQubm93dHYuY29tghNlZGl0b3JpYWwubm93dHYuY29t
ghpzZWN1cmUtZXBnc2VydmljZXMuc2t5LmNvbYIad2ViLXRvb2xraXQuZ2xvYmFs
LnNreS5jb22CE2F0bGFudGlzLmVwZ3NreS5jb22CD3dhdGNoLm5vd3R2LmNvbYIU
d2ViLnN0YXRpYy5ub3d0di5jb22CDHNtcmsuc2t5LmNvbYIMZ294Yi5za3kuY29t
ghFteWFjY291bnQuc2t5LmNvbYIRcGxheW91dC5ub3d0di5jb22CGHNpZ251cC5w
cmV2aWV3Lm5vd3R2LmNvbYIOYXNzZXRzLnNreS5jb22CFGltYWdlcy5zdG9yZS5z
a3kuY29tgg5yb2kuZXBnc2t5LmNvbYIMc21wYy5za3kuY29tgg5nbG9iYWwuc2t5
LmNvbYIKbXkuc2t5LmNvbYIRYWNjb3VudC5ub3d0di5jb22CDXd3dy5ub3d0di5j
b20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAgoB6gHIYa
aHR0cDovL2duLnN5bWNiLmNvbS9nbi5jcmwwgZ0GA1UdIASBlTCBkjCBjwYGZ4EM
AQICMIGEMD8GCCsGAQUFBwIBFjNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVz
b3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwQQYIKwYBBQUHAgIwNQwzaHR0cHM6Ly93
d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBTSb/eW9IU/cjww
fSPahXibo3xafDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9n
bi5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9nbi5zeW1jYi5jb20vZ24u
Y3J0MIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYA3esdK3oNT6Ygi4GtgWhwfi6O
nQHVXIiNPRHEzbbsvswAAAFecWIJjAAABAMARzBFAiBwIfcS3/E76jtnifiwUabT
ZBww3i8mDkxnmQ2A1kYacQIhAIUnYU60gAHMOk8pxflMjCOJJoj+kKGZptbdAndn
3fb6AHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFecWIJzAAA
BAMARzBFAiEAi1aRjRe83jSf6sdHhYNFN/SP3yeK99MAersKg32gcj4CICA1eKDM
BwNP1vuopjyJt1y+mYeLnywog6aZADOAnvrCMA0GCSqGSIb3DQEBCwUAA4IBAQCE
+1rzKIcFmrTqHYHnHUYQngwkc2wXloATikoOPr7b2K5ghCFHT6yUWVL7lqUPujdW
YVqxowXlQvmrs45SwldBsFPcwbFuOXl63HieCP0T9rnOgHC0m3vyM0gEEQE3fcy6
86UqP/MQUO0VRBQRAP//0oUkPWq4/fmLVkbDl1kmQDd/zC0qQC6UNthgwvCWGzAY
slGT2FjEkNOypsI+Y7Ljf99K4rrG36LrTBavw2wv12lQHgvokTx+ZtL2gQIklq3q
QuCjyXsaL1FR2YFx/mzyf5SdG2sV8UcsD75DgStE6mwP+a1jcBkOoyQu5Irt6w+I
jlXdpHVnLHJcgZfLJa3j
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FAh7/bEN8rmgLcKlAcT
F+SjWnzvGHpZC3Z3gJFvgkV1/P3BxiuUtGR9wxJbxTI9mvwrR8FIIzFQZVr2cx3k
jWiJCT1YBZ2a3NdaZrIVeQ89M8QGvguFc4jO1SYBwDlRh4O0HbDLdXBy8piQcGyN
b9msd5BA64SHfLt1cWubNJL4SH1CiOUDAKqyuCgU455+Bc0ExhcMYzZWFX5k9Udm
lDv9AJkORHYNXp4anCBWCloWPL00UiNUklqPoAEgXxjsNPO9E1S5ds39gWQE+pVV
AYpMKM8LznUnK+h23Bq+zeKOAm4AcYvW6UfQdkuV6geoFKE8m7hHS6cLri11KazK
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 35716173864807505262485138026571681966
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Middlesex'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Isleworth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sky Plc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.nowtv.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26297082274865145362051671742185400897706786403223590284309586799848299904440893567611977715068374426036939892123450437185375018481286458544760569133376679708428693629711720835066057468876703133428445189130976866319524869045733275542729372719785672587699896354960861492809893352819825669096443865610042537950922823386705490422020851879744173385708869816375296003822991288683512484073681267094829403596248389673580981028365448408315479546311868688629028112468750862177476528878357703269575923837201630898270975098918203863535624162052060962421682891416875591003546861593940065470920838962727859117094217013068320000743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1025 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgo.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.int-trial.nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-static.skystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optimisation.atom.nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie.api.atom.nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.news.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbox.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smpr.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.metadata.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.ott.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signup.nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smxb.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smps.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sman.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.help.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor.waflogs.nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aks-xbox.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.global.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogue.nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smio.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.skynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gops.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.epgsky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smlg.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.skynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.int-trial.nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editorial.nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-epgservices.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-toolkit.global.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantis.epgsky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.static.nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smrk.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goxb.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playout.nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signup.preview.nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.store.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roi.epgsky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smpc.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nowtv.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015e7162098c000004030047304502207021f712dff13bea3b6789f8b051a6d3641c30de2f260e4c67990d80d6461a710221008527614eb48001cc3a4f29c5f94c8c23892688fe90a199a6d6dd027767ddf6fa007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015e716209cc00000403004730450221008b56918d17bcde349feac74785834537f48fdf278af7d3007abb0a837da0723e0220203578a0cc07034fd6fba8a63c89b75cbe99878b9f2c2883a6990033809efac2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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