edge-micros2.sonypictures.com

- Sony Pictures Entertainment, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0b:70:f6:87:0d:e8:45:aa:7c:03:4f:b4:76:66:2c:0e was issued on by DigiCert Inc.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Sony Pictures Entertainment, Inc.

Organization: Sony Pictures Entertainment, Inc.
State / Province: California
Locality: Culver City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:70:f6:87:0d:e8:45:aa:7c:03:4f:b4:76:66:2c:0e
Serial Number (int): 15208045374658517938945123524435913742
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2e:1c:c0:c8:e1:a0:11:ff:0f:6f:80:8e:80:9f:c0:a7:d2:d4:d1:3d
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): d6:bd:43:2f:1a:06:54:6e:db:81:09:d1:ed:07:3c:77:3d:db:05:57
Fingerprint (sha256): 02:ba:6e:ce:d3:a4:c7:80:0e:b5:29:a1:a2:ca:08:bd:e1:d0:78:c2:4b:41:a2:aa:35:5f:f0:c2:96:0a:9b:e8

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate edge-micros2.sonypictures.com

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for edge-micros2.sonypictures.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

edge-micros2.sonypictures.com
ca-ar.venom.movie
courageousthemovie.com
de-ar.venom.movie
ghostbusters.com
jp-ar.venom.movie
watch.sonypictures.ca
www.biomovie.jp
www.courageousthemovie.com
www.ghostbusters.com
www.ourladiesmovie.co.uk
www.paulmovie.com
www.peterrabbit-movie.jp
www.peterrabbitmovie.ca
www.spiderman-movie.jp
www.spidermanfarfromhome.movie
www.spidermannewuniverse.de
www.spidermannowayhome.movie
www.spiderversemovie.ca
www.starshiptroopers.com
www.surfsup.com
www.thestarmovie.com
www.uncharted-movie.jp
www.unchartedmovie.com
www.venom-movie.jp
www.worldofjumanji.com
www.zombie-land.jp
www.truffle-movie.jp
tickets.parallelmothers.com
www.helldogs.jp
www.catchuponspidey.com
www.ajournalforjordan-tix.ca
www.spider-verse.jp
app.spidermannowayhome.movie
testing.spehosting.com
tickets.itaintovermovie.com
www.insidious.movie
www.spidermanacrossthespiderversemovie.com.au
www.johnfarnhamfindingthevoicemovie.com.au
www.nohardfeelingsmovie.com.au
game.themachine.movie
www.equalizer.movie
www.vatican-exorcist.jp
www.spider-verse-tix.ca
www.gt-movie.jp
www.spider-verse-billets.ca
beauisafraid.sonypictures.co.uk
www.granturismo.movie
tickets.acrossthespiderverse.movie
www.the-machine-tix.ca
www.haroldandthepurplecrayon.movie
www.haroldspurplecrayon.com
amormandoumensagem.sonypictures.com.br
www.kravenmovie.com
spiderverso.sonypictures.com.mx
sisu.sonypictures.co.uk
nohardfeelings.sonypictures.co.uk
www.sans-rancune-billets.ca
www.no-hard-feelings-tix.ca
www.kraven-movie.jp
www.insidious-the-red-door-tix.ca
tickets.miracleclubmovie.com
www.insidieux-la-porte-rouge-billets.ca
game.nohardfeelingsmovie.com
www.theequalizer3movie.com.au
www.granturismomovie.com.au
www.kraventhehuntermovie.com.au
www.dumbmoney.movie
tickets.shortcomingsmovie.com
insidious.sonypictures.co.uk
intothefurther.insidious.movie
www.gran-turismo-tix.ca
www.napoleon.movie
www.gran-turismo-billets.ca
www.thanksgiving.movie
www.napoleon-movie.jp
licensetorace.granturismo.movie
granturismo.sonypictures.co.uk
www.columbiapictures100.com
www.diymovienightathome.com
www.journeytobethlehemmovie.com
www.the-equalizer-tix.ca
www.justicier-billets.ca
tickets.carlosfilm.com
buy.equalizer.movie
www.equalizer.jp

Other certificates including the domain name sonypictures.com

(limited to 100 certificates)
conectados.sonypictures.com
*.sonypictures.com
redeem.sonypictures.com
origin-flash.sonypictures.com
edge-micros1.sonypictures.com
secure.sonypictures.com
origin-flash.sonypictures.com
edge-micros2.sonypictures.com
brand.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
extaz-qa.spe.sony.com
edge-micros2.sonypictures.com
edge-micros2.sonypictures.com
sites.sonypictures.com
sites.sonypictures.com
secure.sonypictures.com
globalassethub.sonypictures.com
www.stage6films.com
api.stg-stage-productionservices.sonypictures.com
pub.email.sonypictures.com
connect.sonypictures.com
sites.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
stage-microsites.sonypictures.com
portals.sonypictures.com
microsites.sonypictures.com
image.20210419.200345.s6.et.yellsatcloud.com
globalassethub.sonypictures.com
portals.sonypictures.com
portals.sonypictures.com
conectados.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
sites.sonypictures.com
edge-portals.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
edge-micros2.sonypictures.com
flash.sonypictures.com
pub.email.sonypictures.com
griffin.sonypictures.com
view.email.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
sites.sonypictures.com
audiolibrary.sonypictures.com
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
akamai-san77.exacttarget.com
stage-microsites.sonypictures.com
www.sonypictures.co.uk
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
viewer.sonypictures.com
secure.sonypictures.com
edge-portals.sonypictures.com
sites2.sonypictures.com
edge-micros2.sonypictures.com
test.rewards.sonypictures.com
www.stage6films.com
test.rewards.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
gam.sonypictures.com
microsites.sonypictures.com
flash.sonypictures.com
view.email.games.sonypictures.com
rewards.sonypictures.com
test.redeem.sonypictures.com
edge-micros1.sonypictures.com
brand.sonypictures.com
gam.sonypictures.com
stage-microsites.sonypictures.com
perc.sonypictures.com
sony-prod.actioniq.mr-in.com
click.email.sonypictures.com
stage-edge-portals.sonypictures.com
stage-microsites.sonypictures.com
tweets.sonypictures.com
flash.sonypictures.com
rewards.sonypictures.com
pages.email.games.sonypictures.com
view.email.sonypictures.com
rewards.sonypictures.com
redeem.sonypictures.com
microsites.sonypictures.com
redeem.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
origin-flash.sonypictures.com

Certificate

The complete raw certificate details for edge-micros2.sonypictures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjYGUx1+a9am5XwR6rAI
yYtt7PbJvvUXGLVSmZt62FeFPiHRQvbROaJbESBYySypFHRv2y4HX0VPcEMnhHC6
JbhpAsPAZ8d1D1VLBV5PZiAj3xQ+uwgbMv6rqT2wOP+46zQMxrKCjF2FIiSqnngC
QrdrfwsRmbnbsW1NV8LFdYJNm4NJWoQuuv8Rq/FqmmRy08jXjtXHZ9bDJLkO4l8M
PqSyIeulEvvZlHNl6v1uRlXjNpR9O1OJXFNo7BwlmjTZv1efyRl3Dt7ucW5Qv+gi
5JPQizxCOdlKanDOX7C17mr2bpg3XhFUY21+M9T6PcXwReu197mWtuQvZBugIQtS
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15208045374658517938945123524435913742
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Culver City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sony Pictures Entertainment, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'edge-micros2.sonypictures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23002012079129650728149335070416197001424285956842129402503198840521934758904133254840386087314111483273388061163174565619007279878038475897149480624008936133796750714157350904121087023555046927361529961799875754690309024434073433200377470292013395262667662508738564742351801525433680180239456660928248222511513383494517973937926469604299285577590556377061197603730282224023990484958366758192151327469315862684384371260800183234797410773721056864497584858787076078823764723894308484414595957024959780097732681263828660599582970833259318532047015353634990837417867789562844232734478615556867564805823341137116982366943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e1cc0c8e1a011ff0f6f808e809fc0a7d2d4d13d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2297 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge-micros2.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca-ar.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courageousthemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de-ar.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghostbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp-ar.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.sonypictures.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biomovie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courageousthemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladiesmovie.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paulmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterrabbit-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterrabbitmovie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiderman-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermanfarfromhome.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermannewuniverse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermannowayhome.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiderversemovie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starshiptroopers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surfsup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thestarmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uncharted-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unchartedmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venom-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldofjumanji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zombie-land.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.truffle-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.parallelmothers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helldogs.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catchuponspidey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ajournalforjordan-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spider-verse.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.spidermannowayhome.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.spehosting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.itaintovermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insidious.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermanacrossthespiderversemovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnfarnhamfindingthevoicemovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nohardfeelingsmovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'game.themachine.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equalizer.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vatican-exorcist.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spider-verse-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gt-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spider-verse-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beauisafraid.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.granturismo.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.acrossthespiderverse.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.the-machine-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haroldandthepurplecrayon.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haroldspurplecrayon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amormandoumensagem.sonypictures.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kravenmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiderverso.sonypictures.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sisu.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nohardfeelings.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sans-rancune-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.no-hard-feelings-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kraven-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insidious-the-red-door-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.miracleclubmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insidieux-la-porte-rouge-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'game.nohardfeelingsmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theequalizer3movie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.granturismomovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kraventhehuntermovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dumbmoney.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.shortcomingsmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insidious.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intothefurther.insidious.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gran-turismo-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napoleon.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gran-turismo-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thanksgiving.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napoleon-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'licensetorace.granturismo.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granturismo.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiapictures100.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diymovienightathome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journeytobethlehemmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.the-equalizer-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.justicier-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.carlosfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.equalizer.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equalizer.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ace393e4f00000403004730450220500e96eacd56717d7e705862e5868db40ec3a4c8ee828827186c80a7d2ad8472022100e875ee8068d544cdbe8453ea5aaf618ff78c64fa67bd6ac23b65267170350f1c00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ace393e110000040300473045022100a1ce6bfd50f7957b76b72538a0e454db17ffe0bd757011e65e24ca89db0dd61f0220520c716e9a4b3d3a765120e3c62fe8dc031ea9d64b8944a82e09d8fdc1d4fd50007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018ace393dfb0000040300473045022029ed4fbbf91ac040835aaa08a2e7997a78d9cd88b5ec9fb075eda9ba7e2f72be022100b70144ee28a5a4cdc2d668efc1fd16a844cf2dfcaf22eb43e83d705ba092aab4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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