$ curl -vI https://www.nowtv.com.tr/canli-yayin
* Host www.nowtv.com.tr:443 was resolved.
* IPv6: (none)
* IPv4: 176.235.92.171
*   Trying 176.235.92.171:443...
* ALPN: curl offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
*  CAfile: /etc/ssl/certs/ca-certificates.crt
*  CApath: none
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-AES128-GCM-SHA256 / secp256r1 / rsaEncryption
* ALPN: server accepted http/1.1
* Server certificate:
*  subject: CN=www.nowtv.com.tr
*  start date: Jan  9 00:00:00 2025 GMT
*  expire date: Jan 11 23:59:59 2026 GMT
*  subjectAltName: host "www.nowtv.com.tr" matched cert's "www.nowtv.com.tr"
*  issuer: C=US; O=DigiCert Inc; OU=www.digicert.com; CN=GeoTrust TLS RSA CA G1
*  SSL certificate verify ok.
*   Certificate level 0: Public key type RSA (2048/112 Bits/secBits), signed using sha256WithRSAEncryption
*   Certificate level 1: Public key type RSA (2048/112 Bits/secBits), signed using sha256WithRSAEncryption
*   Certificate level 2: Public key type RSA (2048/112 Bits/secBits), signed using sha256WithRSAEncryption
* Connected to www.nowtv.com.tr (176.235.92.171) port 443
* using HTTP/1.x
> HEAD /canli-yayin HTTP/1.1
> Host: www.nowtv.com.tr
> User-Agent: curl/8.14.1
> Accept: */*
>
* Request completely sent off
< HTTP/1.1 200 OK
HTTP/1.1 200 OK
< Content-Type: text/html; charset=UTF-8
Content-Type: text/html; charset=UTF-8
< Vary: Accept-Encoding
Vary: Accept-Encoding
< Date: Sun, 15 Jun 2025 17:34:08 GMT
Date: Sun, 15 Jun 2025 17:34:08 GMT
< X-Server: WEB01
X-Server: WEB01
< Cache-Control: max-age=300
Cache-Control: max-age=300
< Age: 50
Age: 50
< X-Cache: HIT
X-Cache: HIT
< X-XSS-Protection: 1; mode=block
X-XSS-Protection: 1; mode=block
< X-Content-Type-Options: nosniff
X-Content-Type-Options: nosniff
< Accept-Ranges: bytes
Accept-Ranges: bytes
< Content-Length: 228219
Content-Length: 228219
< Connection: keep-alive
Connection: keep-alive
<
* Connection #0 to host www.nowtv.com.tr left intact

$ echo | openssl s_client -showcerts -connect www.nowtv.com.tr:443
Connecting to 176.235.92.171
CONNECTED(00000003)
depth=2 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
verify return:1
depth=1 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=GeoTrust TLS RSA CA G1
verify return:1
depth=0 CN=www.nowtv.com.tr
verify return:1
---
Certificate chain
 0 s:CN=www.nowtv.com.tr
   i:C=US, O=DigiCert Inc, OU=www.digicert.com, CN=GeoTrust TLS RSA CA G1
   a:PKEY: RSA, 2048 (bit); sigalg: sha256WithRSAEncryption
   v:NotBefore: Jan  9 00:00:00 2025 GMT; NotAfter: Jan 11 23:59:59 2026 GMT
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIQDWBZuyzjdZ7ZzPHyj6fWyTANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx
MB4XDTI1MDEwOTAwMDAwMFoXDTI2MDExMTIzNTk1OVowGzEZMBcGA1UEAxMQd3d3
Lm5vd3R2LmNvbS50cjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANN3
nvdVh06TlEJEZnB8Kc+1LwuDxAsbSxxs2gGBDQOLUolCgAawy9/7m65RzuJ+3pOI
S7mQIKV2XQbLq8IIN2aZReQF7Akq5z/VO5dyS+85c/jD3mg5SAECUouAxXO/3lZB
0GZ/LzjgDHZdT/WGB7eN65BcT5SIPaNgICXN7OaFW0Ck5M+l+nU/Lx2GAtRHW00Y
O2dmirjc1lUSqzUzt8+DMOBSbE+GmmuJC+0HkJDDgm0x931Eelk/5DLHplVdau2m
FlLTOc/jaGOG0RThOY3+KP0PC1YBHNRwILvXsZmTfSGqMVtBDN1BIQOxgrgBtMG2
pBP2tfrabVVP445WD6UCAwEAAaOCAykwggMlMB8GA1UdIwQYMBaAFJRP1F2L5KTi
poD+/dj5AO+jvgJXMB0GA1UdDgQWBBRFSFJMhqS2cShS7r6DWS9qQ/eJCTApBgNV
HREEIjAgghB3d3cubm93dHYuY29tLnRyggxub3d0di5jb20udHIwPgYDVR0gBDcw
NTAzBgZngQwBAgEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5j
b20vQ1BTMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwPwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL2NkcC5nZW90cnVzdC5jb20v
R2VvVHJ1c3RUTFNSU0FDQUcxLmNybDB2BggrBgEFBQcBAQRqMGgwJgYIKwYBBQUH
MAGGGmh0dHA6Ly9zdGF0dXMuZ2VvdHJ1c3QuY29tMD4GCCsGAQUFBzAChjJodHRw
Oi8vY2FjZXJ0cy5nZW90cnVzdC5jb20vR2VvVHJ1c3RUTFNSU0FDQUcxLmNydDAM
BgNVHRMBAf8EAjAAMIIBgAYKKwYBBAHWeQIEAgSCAXAEggFsAWoAdwCWl2S/VViX
rfdDh2g3CEJ36fA61fak8zZuRqQ/D8qpxgAAAZRKj1LoAAAEAwBIMEYCIQDbjaF8
8VYyuR0VAT4lRvXtzCHWXZWqueAUdzc6jx3eiwIhAPLFA/Uy5iXsn/NduBKMahC5
wHHZBllNK4umTRQa2N6/AHYAZBHEbKQS7KeJHKICLgC8q08oB9QeNSer6v7VA8l9
zfAAAAGUSo9SvAAABAMARzBFAiEAwMj+JihkfVxP+oagorujxEeTnGSsXtdH3qQp
BzFn2EcCIDoUKrpkb+smOtJizk4LEtlICKlVY+NzGY7U1ZbzYnpfAHcASZybad4d
fOz8Nt7Nh2SmuFuvCoeAGdFVUvvp6ynd+MMAAAGUSo9SzgAABAMASDBGAiEA4j+d
OvWTIXBJoKnlBqABraXM/uKLyCOl7Dh6IgxhXVYCIQCAian43lEK7Sh3KYIhnZzu
tMKy5WxUeC4pcPMZIDR5NDANBgkqhkiG9w0BAQsFAAOCAQEAcH4zWcfTlqJag28o
ScjpgCmajSHmEPsqJVj3TVQTAVBCJYrk0/uCnuWQPNubCDPNgZhW251V8Hsr+XA+
0+uAzXZcYTEL2f8qAXaNiJP12MOrDZSnd0J+d30MZ3AH9ckDUYbV4XP2knT6GgIz
/LiZslucyg/SrR/VcyIiCBq+tW/kOl6JeiStAvOCYKPBYJ7xFwTk4vWi1jYiZvFp
ojFOw144zfkxnzCAr1QJP2O0PWBCKX/A1Zuiufsu4bzMDlouzDOYVHLLqpmL3ntk
05Jwc0WBtO3ZIy+HKAwMNrQJ98mdZqCGBNhbMtPEwbDrjHweskFmfU4RXSl+WYi0
Od5NgA==
-----END CERTIFICATE-----
 1 s:C=US, O=DigiCert Inc, OU=www.digicert.com, CN=GeoTrust TLS RSA CA G1
   i:C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
   a:PKEY: RSA, 2048 (bit); sigalg: sha256WithRSAEncryption
   v:NotBefore: Nov  2 12:23:37 2017 GMT; NotAfter: Nov  2 12:23:37 2027 GMT
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=CN=www.nowtv.com.tr
issuer=C=US, O=DigiCert Inc, OU=www.digicert.com, CN=GeoTrust TLS RSA CA G1
---
No client certificate CA names sent
Peer signing digest: SHA512
Peer signature type: rsa_pkcs1_sha512
Peer Temp Key: ECDH, prime256v1, 256 bits
---
SSL handshake has read 3259 bytes and written 1675 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES128-GCM-SHA256
Protocol: TLSv1.2
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES128-GCM-SHA256
    Session-ID: 5B1E6E23F438CDE9955B89D7FFAF731E6B53093F50E094EE7E05315A855DF8CE
    Session-ID-ctx:
    Master-Key: 8147FA5A2831E7D9DEB459AC053E4F63F0E09039D92B3E4C6678C1C02B8D769B4ADFE90FD06A90342212B5E3CA5C20FA
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1750008877
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: no
---
DONE

$ ./script/test-plugin-urls.py nowtvtr
:: https://www.nowtv.com.tr/Gaddar/bolumler
!! Error while fetching streams
:: https://www.nowtv.com.tr/Memet-Ozer-ile-Mutfakta/bolumler
::  360p, 480p, 720p, 1080p, worst, best
:: https://www.nowtv.com.tr/canli-yayin
::  360p, 480p, 720p, worst, best
:: https://www.nowtv.com.tr/now-haber
::  360p, 480p, 720p, 1080p, worst, best
:: https://www.nowtv.com.tr/yayin-akisi
::  360p, 480p, 720p, 1080p, worst, best