*.authenticity.ppf.sony.net

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0a:67:48:34:4d:4b:5a:03:71:0d:a9:24:3d:78:91:eb was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.authenticity.ppf.sony.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:67:48:34:4d:4b:5a:03:71:0d:a9:24:3d:78:91:eb
Serial Number (int): 13828551011555599905977502034298442219
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 08:d5:f0:c1:46:4e:6d:db:0d:92:20:7b:c9:84:55:79:0e:ab:d2:1a
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 31:6a:2f:8b:10:81:04:0e:88:c8:cb:7a:c4:a9:8a:f6:17:66:4a:46
Fingerprint (sha256): 01:b3:3d:99:63:83:b1:b9:69:b8:97:67:d3:27:f2:8b:fd:df:f6:95:4a:7d:23:ee:d7:9d:10:c5:5d:9d:ae:dd

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.authenticity.ppf.sony.net

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.authenticity.ppf.sony.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.authenticity.ppf.sony.net
authenticity.ppf.sony.net
dev.authenticity.ppf.sony.net

Other certificates including the domain name sony.net

(limited to 100 certificates)
kxqh0m6485.smp-auth-api.sony.net
dns-vetting1b.map.fastly.net
preview-production-pdp.sony.co.uk
*.dev.iot.imagingedge.sony.net
www.sony.at
mycare.dxservice.sony.net
poc.imagingedge.sony.net
dev-online.techub.sony.net
www.sony.net
preview-production-pdp.sony.co.uk
*.nucleus-live.sony.net
bizftp.dev.imagingedge.sony.net
www.sony.at
b-trainerblog.smartsports.sony.net
secure.sony.net
www.sony.net
f2.shared.global.fastly.net
*.authenticity.ppf.sony.net
f2.shared.global.fastly.net
b-trainerblog.smartsports.sony.net
qa.concierge.support.sony.net
*.stg.mdm.ppf.sony.net
b-trainerblog.smartsports.sony.net
production-api-gateway-public.videoprism.sony.net
tennisblog.smartsports.sony.net
imperva.com
dns-vetting1b.map.fastly.net
f2.shared.global.fastly.net
f2.shared.global.fastly.net
*.dev.payment.ppf.sony.net
www.sony.net
tv.update.sony.net
www.sony.net
biz-bravia.sony.net
s.sony.net
f2.shared.global.fastly.net
preview-production-pdp.sony.co.uk
www.sony.net
v-online-info.techub.sony.net
preview-production-pdp.sony.co.uk
dev.biz-bravia.sony.net
s.sony.net
preview-production-pdp.sony.co.uk
opt.imagingedge.sony.net
test.sony.com
d.newssuite.sony.net
calc.sony.net
stg-online-manage.techub.sony.net
dev.pro-bravia.sony.net
hav.update.sony.net
dev.search.pro-bravia.sony.net
f2.shared.global.fastly.net
stg-online.techub.sony.net
clock.imagingedge.sony.net
personalspace.sony.net
prd2022-visitor-tracker.techub.sony.net
cdn.rms.biz-bravia.sony.net
tennisblog.smartsports.sony.net
preview-production-pdp.sony.co.uk
f2.shared.global.fastly.net
socialife.sony.net
developer.pjfield.sony.net
*.taxi-safety.mobility-ai.sony.net
www.sony.net
f2.shared.global.fastly.net
b-trainerblog.smartsports.sony.net
*.cmtpqa.pre.payment.ppf.sony.net
www.sony.net
nh-data.sony.co.jp
techub.sony.net
*.csn.sony.net
dns-vetting1b.map.fastly.net
v-online-info.techub.sony.net
stg.biz-bravia.sony.net
stg.biz-bravia.sony.net
intra.techub.sony.net
www.global-careers-student.sony.net
th76vk7xjq.studio.locatone.sony.net
tv.update.sony.net
f2.shared.global.fastly.net
preview-production-pdp.sony.co.uk
ulms.sony.net
dx.sony.net
*.personalspace.sony.net
*.tr.imagingedge.sony.net
workstyle.sony.net
szf8pabtof.studio.locatone.sony.net
pro-id.sony.net
f2.shared.global.fastly.net
socialife.sony.net
studio.locatone.sony.net
imperva.com
preview-production-pdp.sony.co.uk
lic.dev1.sandbox.dev.ppf.sony.net
*.personalspace.sony.net
preview-production-pdp.sony.co.uk
www.grouplogo-gl.sony.net
www.sony.net
f2.shared.global.fastly.net
*.mobility-ai.sony.net

Certificate

The complete raw certificate details for *.authenticity.ppf.sony.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUvHL2ITo7JZVg1Byag3
De3nW8DQqF7Q191QhhDFwf1FHSdh3l+vcsn4CmfJZTmybwUqHgv5+O2yQhjQ++7f
1K07rWTh45Bq8MTqVzY6nhDjkYFTNIn/7uxNoSwQnFMK80RUTKqxmkUi6TiZnn0W
gNilVV9nriwH3GbMxr2w2jFUZ11wBEG9dcJ/FLRXRrOG0o9WPXNHM376mJkUZDup
Gtm2hCrCUqgmM4tdMKdtZC5S1w3sj4fgWkZxkR/AxD8cYSc4I8cVT3jWz6iYQyNn
KnufXZ4zy0mS+LS+btLUDDo0ZdVELGyT35q1VDv9Xv9UjpuCnAlTJlRTjyigsSGb
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13828551011555599905977502034298442219
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.authenticity.ppf.sony.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24401360415876072333640279157622875270148053680709430530413417818165450576582281466432240302087501963109692095035796255273946773217632655720939375171341455569097141332673954271521810035616085033611492442718444246138200623385358084364491528119404919603594720147272117719345537259723035633938948377409010524357553200334560575679827254980078922879011237057968053011740323739102833164996933696012976168735286617540508636028559984003303417932294070462074737408527425775993087739451161426766865949172317649307004867344826177639885229802007003171589982046376922328044191253149909891856131314552545176871199982639221972245251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							08d5f0c1464e6ddb0d92207bc98455790eabd21a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.authenticity.ppf.sony.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authenticity.ppf.sony.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.authenticity.ppf.sony.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001519609c22cd2cb5adfa5c0e0c058d91feb19127f1369db7b0e6fd0bc1435eb37b2cf15ea41756e4cc7ad1aa79bdab7e8bee73a007743a504be9e022e3e7774cf192266492f856fad44caadd33ff083cb69f5a91835660294216c0f4d038227de0aee547ba308696d630a1d8ba09421a479ae512421fededcddab004ab1f35a0a0046188cfdbd296b5263bd51354052cb26d630be48c314fc574baba940c4e27eb515063aadc7ba7cd4a2a854af8ff7c61cd58e27e62ad2604c4cc7ab0241a9a6431142e0f823ae5ee1db5b3257a749d2057aa904b5384aada7d66f641c76d2d4583c53f6183e0cc25eb8e25607780eaac112ae853c40a5375e0d318b3787e01