pa.rcam.sony.com.sg

- Sony Electronics (Singapore) Pte Ltd -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:1f:11:d6 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Sony Electronics (Singapore) Pte Ltd

Organization: Sony Electronics (Singapore) Pte Ltd
Locality: Singapore
Country: SG

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:1f:11:d6
Serial Number (int): 1277104598
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 9e:e2:3b:62:e6:90:35:7d:ce:bc:dd:46:d7:46:df:66:b1:1e:a7:0c
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): 51:7f:7e:a4:82:9a:50:8d:be:d7:71:d4:1d:97:1d:9a:a7:80:c6:2f
Fingerprint (sha256): 00:36:43:67:80:2a:32:c0:eb:c3:6e:fc:21:56:86:81:ac:a7:b7:bd:60:3f:a8:90:d0:a4:4b:e0:bb:fe:34:f0

Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate pa.rcam.sony.com.sg

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pa.rcam.sony.com.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pa.rcam.sony.com.sg

Other certificates including the domain name sony.com.sg

(limited to 100 certificates)
incapsula.com
pa.rcam.sony.com.sg
preview-production-pdp.sony.co.uk
beta.sony.com
preview-production-pdp.sony.co.uk
beta.sony.com
preview.sony.com
stg.sso.sony.com.sg
www.sedhkapex.sony.com.sg
cloud.engage.sony.com.sg
preview-production-pdp.sony.co.uk
www.sony.com.sg
www.sedsapex.sony.com.sg
preview-production-pdp.sony.co.uk
preview-production-pdp.sony.co.uk
test.sony.com
www.cs.sogul.sony.com.sg
incapsula.com
incapsula.com
preview-production-pdp.sony.co.uk
test.sony.com
incapsula.com
preview-test.sony.com
sony-asia.com
preview-production-pdp.sony.co.uk
incapsula.com
qa.ace.sony.com.sg
preview-production-pdp.sony.co.uk
preview-production-pdp.sony.co.uk
uat-pdp.sony.co.uk
beta.sony.com
preview-test.sony.com
sony-asia.com
preview-production-pdp.sony.co.uk
test.sony.com
preview.sony.com
preview-test.sony.com
ace.sony.com.sg
preview-test.sony.com
imperva.com
stg.store.sony.com.sg
mobilegw.sony.com.sg
production-pdp.sony.co.uk
support.sony.com.sg
incapsula.com
sony-asia.com
preview-production-pdp.sony.co.uk
pa.sso.sony.com.sg
pa.rcam.sony.com.sg
incapsula.com
preview.sony.com
apsegservice.sony.com.sg
preview.sony.com
incapsula.com
preview.sony.com
beta.sony.com
www.sedsapex.sony.com.sg
production-pdp.sony.co.uk
www.sedhkapex.sony.com.sg
production-pdp.sony.co.uk
incapsula.com
beta.sony.com
test.sony.com
www.sony.co.uk
production-pdp.sony.co.uk
myapps.aws.sisc.sony.com.sg
test.sony.com
geddpg01.sony.com.sg
incapsula.com
incapsula.com
www.sony.co.uk
ace.sony.com.sg
smetrics.sony.com.sg
www.cs.sogul.sony.com.sg
incapsula.com
incapsula.com
preview-test.sony.com
preview-production-pdp.sony.co.uk
preview.sony.com
incapsula.com
www.sony.com.sg
incapsula.com
preview.sony.com
www.sony.com.sg
incapsula.com
preview-test.sony.com
pa.sso.sony.com.sg
incapsula.com
incapsula.com
sony-asia.com
preview.sony.com
beta.sony.com
www.sony.co.uk
preview-production-pdp.sony.co.uk
inthubns.sony.com.sg
incapsula.com
incapsula.com
www.edmkapex.sony.com.sg
preview.sony.com
incapsula.com

Certificate

The complete raw certificate details for pa.rcam.sony.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoYs2wCDnTTVdXlVCUQ4
MXMDhUtXYxHTU6EyuOIRpZdAFhGTYWnfh/bmrtolusuV3r9HfVV4y+519I4LGrjt
/HnzrxKi3Vr+5P49exuVIKt+3wMib31xVR1w/35gQWU5VxtAg3jyK9C0jKPT+Sr9
GRo3WkqcUBXKTL/PwPXBnIo2oqvHvbuj0Tn0og73eRjPGA5J+3MXSGXvujp+VeWb
4UlRtj7Lsn7PW9RHg0Jp8W1V/ZkaSTbaK/trvbzjAJshTQqrPR4W3yQygywuVOkh
GBWYI7zw9G4yfUQ/fL99HJ2tbcXx3r8n5Pm9gPISE4MrDw7nA3Vvcle3MJXdQTe7
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277104598
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-02-22 07:57:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-31 08:39:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sony Electronics (Singapore) Pte Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pa.rcam.sony.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25566301868477237825922015661028254880322871726829286035538700696730066847310982914473937515417124003122463610920766301738207738263604308476466670369837795900221756930041665713115684212713562352151336396512375383528418409176173276213261262701094285694024169205447521399273734188122423223074662263655935872881444334445298952706595379142592439320651804383141151497388848733540175640084828873666175006103390018600709428223787070589515002456405658106048824810806684387100601976850649569434114260878605524471369660335555315858366772366214500930163975745845525623410618638369545554005106503811531633343336789560593573460869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pa.rcam.sony.com.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ee23b62e690357dcebcdd46d746df66b11ea70c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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