presscentre.sony.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:60:1e:c9:8e:bf:94:f7:6c:25:5c:af:20:5e:41:b2:4e:ea was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=presscentre.sony.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:60:1e:c9:8e:bf:94:f7:6c:25:5c:af:20:5e:41:b2:4e:ea
Serial Number (int): 381157174338274037711117490002615529000682
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7e:72:6b:c0:9d:f6:ac:63:77:17:8b:27:f9:d1:56:4e:d2:95:75:94
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c3:91:42:c3:ac:4a:70:4b:ae:97:6d:0b:d3:f1:28:ff:9c:1a:bc:2e
Fingerprint (sha256): 02:25:ea:65:31:a0:fd:00:eb:f8:9b:7e:9d:b2:97:36:c8:76:37:fd:ee:aa:a7:05:bf:34:0c:b7:c4:10:09:8b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate presscentre.sony.eu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for presscentre.sony.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

presscentre.sony.eu

Other certificates including the domain name sony.eu

(limited to 100 certificates)
service6.octopus3.sony.eu
dev.service2.octopus3.sony.eu
preview-production-pdp.sony.co.uk
service12.octopus3.sony.eu
beta.sony.com
producttestersnl.sony.eu
service9.octopus3.sony.eu
tqa.service6.octopus3.sony.eu
www.sony.at
preview-production-pdp.sony.co.uk
dev.service9.octopus3.sony.eu
stg2.crmservice.sony.eu
sra-eu.sony.eu
www.sony.at
beta.sony.com
presscentre.sony.eu
service4.octopus3.sony.eu
preview.sony.com
tqa.service6.octopus3.sony.eu
training.sony.eu
www.sony.pt
preview-production-pdp.sony.co.uk
www.sony.com.sg
esp-marketingtool.sony.eu
producttestersfr.sony.eu
preview-production-pdp.sony.co.uk
preview-production-pdp.sony.co.uk
test.sony.com
dev.crmservice.sony.eu
assets.pro.sony.eu
dev.crmservice.sony.eu
dev.service5.octopus3.sony.eu
preview-production-pdp.sony.co.uk
training.sony.eu
test.sony.com
assist.sony.eu
students.sony.eu
presscentre.sony.eu
crmservice.sony.eu
events.sony.eu
service5.octopus3.sony.eu
dev.service8.octopus3.sony.eu
preview-production-pdp.sony.co.uk
admin.octopus3.sony.eu
www.sony.at
premium-services.staging.sony.eu
dev.service12.octopus3.sony.eu
www.sony.at
dev.service5.octopus3.sony.eu
tqa.service4.octopus3.sony.eu
production-pdp.sony.co.uk
tqa.crmservice.sony.eu
end-user.promotions.sony.eu
preview-production-pdp.sony.co.uk
preview-production-pdp.sony.co.uk
webservices2.sony.eu
uat-pdp.sony.co.uk
www.pro.sony.eu
tqa.admin.octopus3.sony.eu
beta.sony.com
preview-production-pdp.sony.co.uk
tqa.service9.octopus3.sony.eu
preview-test.sony.com
serviceportal.staging.sony.eu
sonar.staging.sony.eu
preview-production-pdp.sony.co.uk
tqa.service9.octopus3.sony.eu
www.sony.at
test.sony.com
stgeagle.sony.eu
preview.sony.com
preview-test.sony.com
www.sony.at
service9.octopus3.sony.eu
tqa.service10.octopus3.sony.eu
products.pro.sony.eu
preview-test.sony.com
premium-services.staging.sony.eu
production-pdp.sony.co.uk
www.pro.sony.eu
production-pdp.sony.co.uk
www.pro.sony.eu
www.relay.sony.eu
tqa.service1.octopus3.sony.eu
www.sony.at
tqa.service7.octopus3.sony.eu
preview-production-pdp.sony.co.uk
premium-services.staging.sony.eu
intranet.ibiss.sony.eu
preview.sony.com
preview.sony.com
preview.sony.com
www.pro.sony.eu
preview.sony.com
beta.sony.com
production-pdp.sony.co.uk
tqa.service9.octopus3.sony.eu
production-pdp.sony.co.uk
beta.sony.com
service2.octopus3.sony.eu

Certificate

The complete raw certificate details for presscentre.sony.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381157174338274037711117490002615529000682
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-25 19:01:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-25 19:01:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'presscentre.sony.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 640300487464909558329512497114387689209119632602729706421931700251615674362992996301124490294997107266512643677986180335324547585710690087712758406428072263166976458489243988717885769317718375123740021602108571279025986061705072038666491475351556939879315370503266780461582940353569549425256706480363027478195908345869907418440584247031820255437250862263808814627600448224675383583852440874630533096284398807914953743640758284149807446370386282955938232398890141132145339962674246087482334369838864211040696933204772024144930676863297573391323025808395332771499760719615884864768330658574962969400588464274089581399671731455323114445571274877655216740953191891529703564238433272773146679729293929501753829640680110989908446659993376602628083287756061373027266956671641626677546308407471849028629957812430266894790265442984062712879728190606876939810621838452538285281053709484208214640849555533587765127121145942776550208381995103121913931509570041569028323833111407708599684230424929181107582533775935416439336436313656796354989735544598222488234910208458796936218404615010459496015394875007465615010779511877461624569894245464187612134773414527252821232936799042530806326425744245831434097929662952160391122082311329532627999262771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e726bc09df6ac6377178b27f9d1564ed2957594
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presscentre.sony.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001707df046c9000004030047304502204a4f3a0432c7a9f94b7e21bb0c8f9b422d1fd8f88d58796bf803ec82585acedc0221008d98a98005416d8b8a0d0ad0b0c8269aeb73d7ec3ac7152b6a3ab07870d51d9800750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001707df046d00000040300463044022034fed0b8261a31a445f4afac5b03a43e544418086af1dc697257f99772881e370220769060d29574a39a0ccbaf9840b88f6d64c0a6bbc036c92b18fcafc77a09f046
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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