mycare.dxservice.sony.net

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:a5:72:7d:a2:10:1c:ff:eb:01:b6:80:26:6c:85:85 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mycare.dxservice.sony.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:a5:72:7d:a2:10:1c:ff:eb:01:b6:80:26:6c:85:85
Serial Number (int): 19468243071018250704118370999504504197
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 02:b0:62:9d:63:85:c0:17:29:8f:cc:2a:d8:2f:3b:83:2b:59:02:92
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 34:31:d3:67:9d:c7:a8:d3:f7:af:5c:a6:a5:ad:8e:ce:8e:f9:7c:43
Fingerprint (sha256): 00:dc:4d:2a:70:74:49:02:d9:d8:84:34:04:a7:aa:b9:7f:07:a7:05:79:4d:49:49:c3:b5:6d:9b:16:ab:59:d5

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate mycare.dxservice.sony.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mycare.dxservice.sony.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mycare.dxservice.sony.net
*.mycare.dxservice.sony.net

Other certificates including the domain name sony.net

(limited to 100 certificates)
kxqh0m6485.smp-auth-api.sony.net
dns-vetting1b.map.fastly.net
preview-production-pdp.sony.co.uk
*.dev.iot.imagingedge.sony.net
www.sony.at
mycare.dxservice.sony.net
poc.imagingedge.sony.net
dev-online.techub.sony.net
www.sony.net
preview-production-pdp.sony.co.uk
*.nucleus-live.sony.net
bizftp.dev.imagingedge.sony.net
www.sony.at
b-trainerblog.smartsports.sony.net
secure.sony.net
www.sony.net
f2.shared.global.fastly.net
*.authenticity.ppf.sony.net
f2.shared.global.fastly.net
b-trainerblog.smartsports.sony.net
qa.concierge.support.sony.net
*.stg.mdm.ppf.sony.net
b-trainerblog.smartsports.sony.net
production-api-gateway-public.videoprism.sony.net
tennisblog.smartsports.sony.net
imperva.com
dns-vetting1b.map.fastly.net
f2.shared.global.fastly.net
f2.shared.global.fastly.net
*.dev.payment.ppf.sony.net
www.sony.net
tv.update.sony.net
www.sony.net
biz-bravia.sony.net
s.sony.net
f2.shared.global.fastly.net
preview-production-pdp.sony.co.uk
www.sony.net
v-online-info.techub.sony.net
preview-production-pdp.sony.co.uk
dev.biz-bravia.sony.net
s.sony.net
preview-production-pdp.sony.co.uk
opt.imagingedge.sony.net
test.sony.com
d.newssuite.sony.net
calc.sony.net
stg-online-manage.techub.sony.net
dev.pro-bravia.sony.net
hav.update.sony.net
dev.search.pro-bravia.sony.net
f2.shared.global.fastly.net
stg-online.techub.sony.net
clock.imagingedge.sony.net
prd2022-visitor-tracker.techub.sony.net
cdn.rms.biz-bravia.sony.net
tennisblog.smartsports.sony.net
preview-production-pdp.sony.co.uk
f2.shared.global.fastly.net
socialife.sony.net
developer.pjfield.sony.net
*.taxi-safety.mobility-ai.sony.net
www.sony.net
f2.shared.global.fastly.net
b-trainerblog.smartsports.sony.net
*.cmtpqa.pre.payment.ppf.sony.net
www.sony.net
nh-data.sony.co.jp
techub.sony.net
*.csn.sony.net
dns-vetting1b.map.fastly.net
v-online-info.techub.sony.net
stg.biz-bravia.sony.net
stg.biz-bravia.sony.net
intra.techub.sony.net
www.global-careers-student.sony.net
th76vk7xjq.studio.locatone.sony.net
tv.update.sony.net
f2.shared.global.fastly.net
preview-production-pdp.sony.co.uk
ulms.sony.net
dx.sony.net
*.personalspace.sony.net
*.tr.imagingedge.sony.net
workstyle.sony.net
szf8pabtof.studio.locatone.sony.net
pro-id.sony.net
f2.shared.global.fastly.net
socialife.sony.net
studio.locatone.sony.net
imperva.com
preview-production-pdp.sony.co.uk
lic.dev1.sandbox.dev.ppf.sony.net
*.personalspace.sony.net
preview-production-pdp.sony.co.uk
www.grouplogo-gl.sony.net
www.sony.net
f2.shared.global.fastly.net
*.mobility-ai.sony.net
preview-production-pdp.sony.co.uk

Certificate

The complete raw certificate details for mycare.dxservice.sony.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3HP+dOGhr8Wh/7758XV
FMyZBAHSN/TA1Tv1BN+jhlRBuixF9vwKWjD39WSrDivuIo1Ywu4cwKBeKa00W5Gh
SjxeFdmFLbCrVK1cqxZHdDhIMcsy9eIQTVAVVU+FJegPZJeA3SAsNOrN7O3oKTmU
ke/WUp9KzrV/vOy6ToyDIiXo5fAyJey6Xw9uyM5kMI8bEt3ob6EHVf5fEMTNqzdF
qEtsk7rkOTME3ZASolag3UQBsNi54U6bhXd4hhPgEpKGu42YLNIA9ry35XB6jlgi
pU9xSMuicbWNKIbCAF6xEx/nwiicAwmaTs467Eax0n2JzHfkJNPfVDKh2sCZEqqh
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19468243071018250704118370999504504197
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mycare.dxservice.sony.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24167639237547837646328547097515896674489333243545643053249709019583669949833172672492165810668598439145852460741082361477483390791882073613377142834207896750613853758852587557762932861206665341174248484379340894874465235962242011284061791143835673606367061014688391731288800290409769359901354180637220664708396942658448334879536763595949523933925439864862759613468590104383241525267131614540889139013832867088126772804790534663409275955018258328659641045561093431393492101703647902930274573428419701582463500924165675529175440265086699667540261966495493576676378816132073465533569325853589869046421291232636632211833
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							02b0629d6385c017298fcc2ad82f3b832b590292
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycare.dxservice.sony.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycare.dxservice.sony.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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