rebate.api.sony.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0c:ca:10:dc:e1:fd:0a:60:80:8b:45:9d:f4:1f:c9:dc was issued on by Amazon.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rebate.api.sony.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:ca:10:dc:e1:fd:0a:60:80:8b:45:9d:f4:1f:c9:dc
Serial Number (int): 16999921933532471666669873737727199708
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1f:fe:95:29:f9:70:6e:6b:64:21:4c:85:25:08:3c:57:ab:d9:cf:02
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): bd:c1:cc:c0:c1:a0:c8:43:36:f6:13:2f:b8:49:5c:77:a2:3b:cd:4e
Fingerprint (sha256): 01:dc:58:9c:eb:da:7c:c7:04:80:98:fd:4d:77:11:0d:c4:aa:9d:37:fb:c6:c5:1a:a8:d5:02:cd:aa:1c:45:54

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate rebate.api.sony.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rebate.api.sony.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rebate.api.sony.com
rebate.pro.channel.sony.com
rebate.pro.channel.sony.ca
rebate.consumer.channel.sony.ca
evehicle.electronics.sony.com
rebate.consumer.eur.sony.ca
rebate.api.sony.ca
rebate.pro.eur.sony.com
rebate.consumer.eur.sony.com
rebate.consumer.channel.sony.com
rebate.pro.eur.sony.ca

Other certificates including the domain name sony.com

(limited to 100 certificates)
incapsula.com
code-jira-staging.am.sony.com
intedcpam.spe.sony.com
git.gis.sony.com
pod.am.sony.com
preview-production-pdp.sony.co.uk
content.esupport.sony.com
beta.sony.com
usphxadc11v.spe.sony.com
sgsinxapp01.spe.sony.com
tview.spe.sony.com
tbos.spe.sony.com
crpap05.am.sony.com
*.unity.eu.sie.sony.com
git.gis.sony.com
wpfqc-qa.spe.sony.com
pix-vm-lmgmgr.am.sony.com
usdl432.spe.sony.com
adfs.sony.com
s4hanaqa.sie.sony.com
www.sony.at
www.servicesplus.sel.sony.com
cnhkaeshxd01.am.sony.com
gateway-ext.api.spe.sony.com
prodev.sony.com
uklonext-pag01.spe.sony.com
www.dealersalescentral.sony.com
cidealerlocator.electronics.sony.com
mobile.spe.sony.com
prwweb.am.sony.com
preview-production-pdp.sony.co.uk
work.playstation.sony.com
csbd.sdp.sel.sony.com
uspwh0536.spe.sony.com
docs.sony.com
alfresco08-dev.spe.sony.com
www.sony.at
secure.sony.net
nocinfosys.sony.com
Hybrid.sonyusa.com
snap.sel.sony.com
extedc.spe.sony.com
dbiz.sel.sony.com
qtest.sie.sony.com
nexus.mc.spe.sony.com
pam.spe.sony.com
beta.sony.com
locator.sony
rebate.api.sony.com
USQWH0050.spe.sony.com
mfl.slp.csx.sony.com
itoc.sie.sony.com
recycling.sel.sony.com
tst-ext.am.sony.com
api.nsu.vcs.electronics.sony.com
dmgmobile.spe.sony.com
distribute.me.sel.sony.com
incapsula.com
sscookie.www.sony.com
*.retail.me.sony.com
uspxh104da.spe.sony.com
uspwh0038.spe.sony.com
preview.sony.com
usculvordsm02.am.sony.com
uspxh103d2.spe.sony.com
uspxh010p2.spe.sony.com
incapsula.com
extjbsan.spe.sony.com
extaz-qa.spe.sony.com
secure04.lithium.com
cxvdi-sf-dev.spe.sony.com
mcm-ext.mc.spe.sony.com
www.sonyrewards.com
acm.account.sony.com
dev.developer.sony.com
apps.sie.sony.com
centerstage.sie.sony.com
extjbsan.spe.sony.com
mail.me.sony.com
taascognos-qa.spe.sony.com
b2b.sony.com
pages.email.sel.sony.com
www.stage6films.com
square.sony.com
ebm01.cheetahmail.com
connect.sonypictures.com
intjbsan.spe.sony.com
sptaws-alb-dev.spe.sony.com
ucsjcacuc01-ms.ps.am.sony.com
qa-bomgar.spe.sony.com
www.unity.scee.net
fdus-6.freshdesk.com
uspxh104p1.spe.sony.com
s4globalhapp.sie.sony.com
extjbsan2.spe.sony.com
ussdisokta02.am.sony.com
preview-production-pdp.sony.co.uk
relativity-dev.spe.sony.com
www.sony.com.sg
incapsula.com

Certificate

The complete raw certificate details for rebate.api.sony.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9y/PJ/FYBAdb1F/Nb+J
1IRqtkzmCTN8KL4UXr6u6ameGJOGJ9uzUTt2jGpRTmK9ZZEsW4fKf1WgI1ldMlNG
umiuGQHNcj3Z08V72TrKRr51Hi/efV3LjR3FjVT5/fxB2wQabCjhu/iszm4dGqtG
doptFyzWTl4DwK5x2D4eQ0yi39nOKf89U51v6XnfcW/TR/v77YlPt4p8R4kI9I6C
A/T/I5Hgq3d1cTCyhqO11fj2Gx0ZC5enypm7iwrzfLFMzCuMvDVKZO4FB+bkLTHN
VO3G3EP8GR6FghVVoqSbAD3mOpU2KWHqTRXpi0+JkmZRwdGE9xajzIG4zJEdKFZp
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16999921933532471666669873737727199708
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rebate.api.sony.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17655978802312140201892676685324171708898081756146566592005956039737879713171380810290473624200827295073084982074029130330833502505548371898148686661957319828263328097748036727928732889100085946245122776018622211156934655794681891926798857931168690304329714327438826985277612915793239590486500534955097291346336929546818971500260990992649637174654299589588869914699494462557772847948406616926417871905939877010476512841326645531846624210453339673739168386958968870303131217301268768896357921004674514713192014309530810990715921909104966910233011799673228762787798575651101590795809034777744439315430261679367090760173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1ffe9529f9706e6b64214c8525083c57abd9cf02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (308 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rebate.api.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rebate.pro.channel.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rebate.pro.channel.sony.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rebate.consumer.channel.sony.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evehicle.electronics.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rebate.consumer.eur.sony.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rebate.api.sony.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rebate.pro.eur.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rebate.consumer.eur.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rebate.consumer.channel.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rebate.pro.eur.sony.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00459de90b9ac8d0119ceb0e73346350862b621464395ac0712fbc99ba21b4d620c086f2d1c2b79170a351826ed92f2d2127890dd1e1f223b6456482697aa88e08de429350089654c8b6c377c2017ed2d0fe5a106a2bd4f5d807883bf5fffc2aeb1479195d979f061a3145d610433647fb621e9a44cb31f58798ba4394973b9acbb4ed5d063a1ddaa06fde2dd116c061bed0d922db5635f82cd21a27d110a186a2d8a3af4736413a339d9c87a9b43949ea99841570075c8987784b565921f1f4e6742faf4e55567970f2fee62266ef9d792f5becff7a6e6c076397dad20cdc1786525f337a7892c6e0f131cff91da95581f14d60c6c7bd3f16bf34606685914bd4