edge-micros2.sonypictures.com

- Sony Pictures Entertainment, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 04:d8:7b:4e:9d:c9:12:ac:1c:96:36:1f:11:7a:a8:27 was issued on by DigiCert Inc.

With 82 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sony Pictures Entertainment, Inc.

Organization: Sony Pictures Entertainment, Inc.
State / Province: California
Locality: Culver City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d8:7b:4e:9d:c9:12:ac:1c:96:36:1f:11:7a:a8:27
Serial Number (int): 6440949069593340336648575228766234663
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: be:1c:53:28:c4:7d:14:ec:7b:90:d8:8c:12:17:9b:22:00:97:e2:2f
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): c8:36:ad:89:3f:9e:19:05:5b:53:75:6b:46:0d:eb:ab:d2:b2:05:cb
Fingerprint (sha256): 01:fc:3b:31:14:76:45:44:7a:26:e1:af:3b:69:5b:4c:d9:d1:24:24:6a:af:3a:fd:c0:af:22:b6:8b:98:a0:77

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate edge-micros2.sonypictures.com

82

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for edge-micros2.sonypictures.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

edge-micros2.sonypictures.com
ca-ar.venom.movie
courageousthemovie.com
de-ar.venom.movie
ghostbusters.com
jp-ar.venom.movie
watch.sonypictures.ca
www.biomovie.jp
www.courageousthemovie.com
www.ghostbusters.com
www.ourladiesmovie.co.uk
www.paulmovie.com
www.peterrabbit-movie.jp
www.peterrabbitmovie.ca
www.spiderman-movie.jp
www.spidermanfarfromhome.movie
www.spidermannewuniverse.de
www.spidermannowayhome.movie
www.spiderversemovie.ca
www.starshiptroopers.com
www.surfsup.com
www.thestarmovie.com
www.uncharted-movie.jp
www.unchartedmovie.com
www.venom-movie.jp
www.worldofjumanji.com
www.zombie-land.jp
www.truffle-movie.jp
tickets.parallelmothers.com
www.helldogs.jp
www.catchuponspidey.com
www.spidermannowayhometickets.com.au
www.ajournalforjordan-tix.ca
www.spider-verse.jp
app.spidermannowayhome.movie
testing.spehosting.com
www.lyle-lyle-crocodile-tix.ca
www.lyle-le-crocodile-billets.ca
www.big-george-foreman-tix.ca
www.love-again-tix.ca
www.aimer-a-nouveau-billets.ca
tickets.itaintovermovie.com
www.insidious.movie
biggeorgeforeman.sonypictures.co.uk
oscavaleirosdozodiaco.sonypictures.com.br
www.spidermanacrossthespiderversemovie.com.au
www.johnfarnhamfindingthevoicemovie.com.au
www.nohardfeelingsmovie.com.au
game.themachine.movie
www.equalizer.movie
www.vatican-exorcist.jp
www.journeytobethlehem.movie
www.spider-verse-tix.ca
www.gt-movie.jp
www.spider-verse-billets.ca
beauisafraid.sonypictures.co.uk
www.granturismo.movie
tickets.acrossthespiderverse.movie
www.the-machine-tix.ca
www.haroldandthepurplecrayon.movie
www.haroldspurplecrayon.com
aranhaverso.sonypictures.com.br
loveagain.sonypictures.co.uk
amormandoumensagem.sonypictures.com.br
spiderverse.sonypictures.co.uk
www.kravenmovie.com
spiderverso.sonypictures.com.mx
sisu.sonypictures.co.uk
nohardfeelings.sonypictures.co.uk
www.sans-rancune-billets.ca
www.no-hard-feelings-tix.ca
www.kraven-movie.jp
www.insidious-the-red-door-tix.ca
tickets.miracleclubmovie.com
www.insidieux-la-porte-rouge-billets.ca
game.nohardfeelingsmovie.com
www.theequalizer3movie.com.au
www.granturismomovie.com.au
www.kraventhehuntermovie.com.au
www.dumbmoney.movie
tickets.shortcomingsmovie.com
insidious.sonypictures.co.uk

Other certificates including the domain name sonypictures.com

(limited to 100 certificates)
conectados.sonypictures.com
*.sonypictures.com
redeem.sonypictures.com
origin-flash.sonypictures.com
edge-micros1.sonypictures.com
secure.sonypictures.com
origin-flash.sonypictures.com
edge-micros2.sonypictures.com
brand.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
extaz-qa.spe.sony.com
edge-micros2.sonypictures.com
edge-micros2.sonypictures.com
sites.sonypictures.com
sites.sonypictures.com
secure.sonypictures.com
globalassethub.sonypictures.com
www.stage6films.com
api.stg-stage-productionservices.sonypictures.com
pub.email.sonypictures.com
connect.sonypictures.com
sites.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
stage-microsites.sonypictures.com
portals.sonypictures.com
microsites.sonypictures.com
image.20210419.200345.s6.et.yellsatcloud.com
globalassethub.sonypictures.com
portals.sonypictures.com
portals.sonypictures.com
conectados.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
sites.sonypictures.com
edge-portals.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
edge-micros2.sonypictures.com
flash.sonypictures.com
pub.email.sonypictures.com
griffin.sonypictures.com
view.email.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
sites.sonypictures.com
audiolibrary.sonypictures.com
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
akamai-san77.exacttarget.com
stage-microsites.sonypictures.com
www.sonypictures.co.uk
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
viewer.sonypictures.com
secure.sonypictures.com
edge-portals.sonypictures.com
sites2.sonypictures.com
edge-micros2.sonypictures.com
test.rewards.sonypictures.com
www.stage6films.com
test.rewards.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
gam.sonypictures.com
microsites.sonypictures.com
flash.sonypictures.com
view.email.games.sonypictures.com
rewards.sonypictures.com
test.redeem.sonypictures.com
edge-micros1.sonypictures.com
brand.sonypictures.com
gam.sonypictures.com
stage-microsites.sonypictures.com
perc.sonypictures.com
sony-prod.actioniq.mr-in.com
click.email.sonypictures.com
stage-edge-portals.sonypictures.com
stage-microsites.sonypictures.com
tweets.sonypictures.com
flash.sonypictures.com
rewards.sonypictures.com
pages.email.games.sonypictures.com
view.email.sonypictures.com
rewards.sonypictures.com
redeem.sonypictures.com
microsites.sonypictures.com
redeem.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
origin-flash.sonypictures.com

Certificate

The complete raw certificate details for edge-micros2.sonypictures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywkLODdTQ1U8aM1cNGv8
dq+QZmDopoET+tE5i5ntGQW/yAsPYGpjrKDRES9QlozZTecvk8KC6LRmcBPoxc9z
N+7bdR3Pe4voUFNZaw8+WSPpSR9Y0K0LYkr16J7ywJfRL/l/GuZhEhvFjJYSCCc3
fPXthwKkou1CEE9MAg/K1lPghkbTtSN+igJQ/CdKVIAI+gxRbG//BaT8J2oDZEqz
10ZuQs0qBh8sIftsi3/5/S7ngkygzc84OcIY6gUqhiD97F0YkWlIP9ULQVQPiN9q
M5nZlZ8yVARKVEMPmQgDRUTT6BS7iR11Sb3rWHBnBBZdvlCvVLsIBFDrHPrK/RQk
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6440949069593340336648575228766234663
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Culver City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sony Pictures Entertainment, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'edge-micros2.sonypictures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25630835585191131126449441341690597702658564082279134573193317301623519005209951223112085518450525348317006329658077400036992426005276361290640521914445135277586588619476585816522912066382096507739576130400402451462198057845143978796185465582196431831095040100408763140263451270359950502486287957480092289081815298845612789890780403642422212416094056402750096418051327671172739960245736935702157697127275466059905961284927098446996980483329001287572624243026382929634003612271877432053252133464958890748885644566092573181592839419551728542014604487563660789019176024008007165518298098585219313017495615267886240900157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be1c5328c47d14ec7b90d88c12179b220097e22f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2268 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge-micros2.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca-ar.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courageousthemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de-ar.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghostbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp-ar.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.sonypictures.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biomovie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courageousthemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladiesmovie.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paulmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterrabbit-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterrabbitmovie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiderman-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermanfarfromhome.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermannewuniverse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermannowayhome.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiderversemovie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starshiptroopers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surfsup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thestarmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uncharted-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unchartedmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venom-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldofjumanji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zombie-land.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.truffle-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.parallelmothers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helldogs.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catchuponspidey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermannowayhometickets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ajournalforjordan-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spider-verse.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.spidermannowayhome.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.spehosting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lyle-lyle-crocodile-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lyle-le-crocodile-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.big-george-foreman-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.love-again-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aimer-a-nouveau-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.itaintovermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insidious.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biggeorgeforeman.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oscavaleirosdozodiaco.sonypictures.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermanacrossthespiderversemovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnfarnhamfindingthevoicemovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nohardfeelingsmovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'game.themachine.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equalizer.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vatican-exorcist.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journeytobethlehem.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spider-verse-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gt-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spider-verse-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beauisafraid.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.granturismo.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.acrossthespiderverse.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.the-machine-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haroldandthepurplecrayon.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haroldspurplecrayon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aranhaverso.sonypictures.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loveagain.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amormandoumensagem.sonypictures.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiderverse.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kravenmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiderverso.sonypictures.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sisu.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nohardfeelings.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sans-rancune-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.no-hard-feelings-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kraven-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insidious-the-red-door-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.miracleclubmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insidieux-la-porte-rouge-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'game.nohardfeelingsmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theequalizer3movie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.granturismomovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kraventhehuntermovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dumbmoney.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.shortcomingsmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insidious.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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