edge-micros2.sonypictures.com

- Sony Pictures Entertainment, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 02:ce:6c:c1:1c:94:bf:1b:df:76:a8:57:80:3d:be:38 was issued on by DigiCert Inc.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Sony Pictures Entertainment, Inc.

Organization: Sony Pictures Entertainment, Inc.
State / Province: California
Locality: Culver City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:ce:6c:c1:1c:94:bf:1b:df:76:a8:57:80:3d:be:38
Serial Number (int): 3730274944545969653171025967522364984
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 03:9a:24:28:71:86:32:0f:3e:ae:50:eb:40:a5:20:07:b7:37:91:40
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 51:c7:96:d7:94:e5:7e:bf:5e:0f:f9:43:af:cf:86:3f:5b:28:dd:b4
Fingerprint (sha256): 02:cc:e4:7f:8d:f6:53:a6:ef:7f:b6:1d:27:3e:0a:1e:76:b4:31:c0:96:c9:15:aa:6b:b3:90:0a:38:44:77:b1

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate edge-micros2.sonypictures.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for edge-micros2.sonypictures.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

edge-micros2.sonypictures.com
ca-ar.venom.movie
de-ar.venom.movie
ghostbusters.com
jp-ar.venom.movie
watch.sonypictures.ca
www.biomovie.jp
www.ghostbusters.com
www.ourladiesmovie.co.uk
www.paulmovie.com
www.peterrabbit-movie.jp
www.peterrabbitmovie.ca
www.spiderman-movie.jp
www.spidermanfarfromhome.movie
www.spidermannewuniverse.de
www.spidermannowayhome.movie
www.spiderversemovie.ca
www.starshiptroopers.com
www.surfsup.com
www.thestarmovie.com
www.uncharted-movie.jp
www.unchartedmovie.com
www.venom-movie.jp
www.worldofjumanji.com
www.zombie-land.jp
www.truffle-movie.jp
tickets.parallelmothers.com
www.helldogs.jp
www.catchuponspidey.com
www.ajournalforjordan-tix.ca
www.spider-verse.jp
app.spidermannowayhome.movie
testing.spehosting.com
www.spidermanacrossthespiderversemovie.com.au
www.johnfarnhamfindingthevoicemovie.com.au
www.vatican-exorcist.jp
www.spider-verse-tix.ca
www.gt-movie.jp
www.spider-verse-billets.ca
beauisafraid.sonypictures.co.uk
www.granturismo.movie
tickets.acrossthespiderverse.movie
www.the-machine-tix.ca
www.haroldandthepurplecrayon.movie
www.haroldspurplecrayon.com
amormandoumensagem.sonypictures.com.br
www.kravenmovie.com
sisu.sonypictures.co.uk
nohardfeelings.sonypictures.co.uk
www.sans-rancune-billets.ca
www.no-hard-feelings-tix.ca
www.kraven-movie.jp
www.insidious-the-red-door-tix.ca
tickets.miracleclubmovie.com
www.insidieux-la-porte-rouge-billets.ca
www.theequalizer3movie.com.au
www.kraventhehuntermovie.com.au
tickets.shortcomingsmovie.com
insidious.sonypictures.co.uk
intothefurther.insidious.movie
www.gran-turismo-tix.ca
www.napoleon.movie
www.gran-turismo-billets.ca
www.thanksgiving.movie
www.napoleon-movie.jp
licensetorace.granturismo.movie
granturismo.sonypictures.co.uk
www.columbiapictures100.com
www.diymovienightathome.com
www.journeytobethlehemmovie.com
www.the-equalizer-tix.ca
www.justicier-billets.ca
tickets.carlosfilm.com
buy.equalizer.movie
www.equalizer.jp
www.journeytobethlehemmovie.com.au
www.intlgeoloctest.com
www.n-importe-qui-sauf-toi-billets.ca
www.anyone-but-you-tix.ca
www.anyonebutyoumovie.com.au
anyonebutyou.sonypictures.co.uk
www.anyonebutyoumovie.co.nz
www.garfield-movie.jp
www.the-book-of-clarence-tix.ca
www.ghostbustersar.com
www.cultkillermovie.com
www.madamewebmovie.com.au
www.madamewebmovie.co.nz
madameweb.sonypictures.com.sg
madameweb.sonypictures.com.tw
madameweb.sonypictures.co.uk
www.100for100sale.com
tickets.peasantsmovie.com
tickets.ameliemovie.com

Other certificates including the domain name sonypictures.com

(limited to 100 certificates)
conectados.sonypictures.com
*.sonypictures.com
redeem.sonypictures.com
origin-flash.sonypictures.com
edge-micros1.sonypictures.com
secure.sonypictures.com
origin-flash.sonypictures.com
edge-micros2.sonypictures.com
brand.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
extaz-qa.spe.sony.com
edge-micros2.sonypictures.com
edge-micros2.sonypictures.com
sites.sonypictures.com
sites.sonypictures.com
secure.sonypictures.com
globalassethub.sonypictures.com
www.stage6films.com
api.stg-stage-productionservices.sonypictures.com
pub.email.sonypictures.com
connect.sonypictures.com
sites.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
stage-microsites.sonypictures.com
portals.sonypictures.com
microsites.sonypictures.com
image.20210419.200345.s6.et.yellsatcloud.com
globalassethub.sonypictures.com
portals.sonypictures.com
portals.sonypictures.com
conectados.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
sites.sonypictures.com
edge-portals.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
edge-micros2.sonypictures.com
flash.sonypictures.com
pub.email.sonypictures.com
griffin.sonypictures.com
view.email.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
sites.sonypictures.com
audiolibrary.sonypictures.com
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
akamai-san77.exacttarget.com
stage-microsites.sonypictures.com
www.sonypictures.co.uk
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
viewer.sonypictures.com
secure.sonypictures.com
edge-portals.sonypictures.com
sites2.sonypictures.com
edge-micros2.sonypictures.com
test.rewards.sonypictures.com
www.stage6films.com
test.rewards.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
gam.sonypictures.com
microsites.sonypictures.com
flash.sonypictures.com
view.email.games.sonypictures.com
rewards.sonypictures.com
test.redeem.sonypictures.com
edge-micros1.sonypictures.com
brand.sonypictures.com
gam.sonypictures.com
stage-microsites.sonypictures.com
perc.sonypictures.com
sony-prod.actioniq.mr-in.com
click.email.sonypictures.com
stage-edge-portals.sonypictures.com
stage-microsites.sonypictures.com
tweets.sonypictures.com
flash.sonypictures.com
rewards.sonypictures.com
pages.email.games.sonypictures.com
view.email.sonypictures.com
rewards.sonypictures.com
redeem.sonypictures.com
microsites.sonypictures.com
redeem.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
origin-flash.sonypictures.com

Certificate

The complete raw certificate details for edge-micros2.sonypictures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv+bxE41V83lSX5sMkwB
vVtVkPC+zbJ3mK+IFJ8sXKDLLiqRLLzyq5aOFlrjF/DXuxT1lTKAZMnqnuHF+OfS
XK7hve/hj+zOrS7JYt++xzLv9+lwUz9xe0KQx2AUA5VxIWbk1Cp9hvgv2tFJQSPs
KuUdxeLeUzjwxVSa04+mPmsjhimwNv6cUYd4/O7elqgIj38T1Ys7zCi7xX7e3rA1
WOrJZrZrYsVFK7tmDqUfu/RC+BtF4uA3amcpxMBGgSpFxdTesfSOrfypSLG517eu
YFUe5V9KeUcTQKZY3qmdrAzzQbwxUku9vNk4ZTIVKwptEc/NDBAT6VqsmZ3dr4VD
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3730274944545969653171025967522364984
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Culver City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sony Pictures Entertainment, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'edge-micros2.sonypictures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25626182834578544228276570164606702136848679933400647910084857956852473694052618035128374897511039575942834482006620280128861507643498697412870195337438051584273754746581901589532047749389147834034687042962928228822296944383968010197096925110106882495201408958452955549089620892083414463393291814502850448601602894503215734652099105462057285767800196366144367079476110962651728340549647264285572049517537356134576698614288660376342928644832917737796587098121198427421192220550574500103717145259082363976677939779091214597383940646018676135436364489895724883699931690721455465048835204132387626463232060239050648666997
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							039a24287186320f3eae50eb40a52007b7379140
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2549 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge-micros2.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca-ar.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de-ar.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghostbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp-ar.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.sonypictures.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biomovie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladiesmovie.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paulmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterrabbit-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterrabbitmovie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiderman-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermanfarfromhome.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermannewuniverse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermannowayhome.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiderversemovie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starshiptroopers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surfsup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thestarmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uncharted-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unchartedmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venom-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldofjumanji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zombie-land.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.truffle-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.parallelmothers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helldogs.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catchuponspidey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ajournalforjordan-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spider-verse.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.spidermannowayhome.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.spehosting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermanacrossthespiderversemovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnfarnhamfindingthevoicemovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vatican-exorcist.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spider-verse-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gt-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spider-verse-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beauisafraid.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.granturismo.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.acrossthespiderverse.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.the-machine-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haroldandthepurplecrayon.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haroldspurplecrayon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amormandoumensagem.sonypictures.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kravenmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sisu.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nohardfeelings.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sans-rancune-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.no-hard-feelings-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kraven-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insidious-the-red-door-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.miracleclubmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insidieux-la-porte-rouge-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theequalizer3movie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kraventhehuntermovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.shortcomingsmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insidious.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intothefurther.insidious.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gran-turismo-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napoleon.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gran-turismo-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thanksgiving.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napoleon-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'licensetorace.granturismo.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granturismo.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiapictures100.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diymovienightathome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journeytobethlehemmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.the-equalizer-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.justicier-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.carlosfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.equalizer.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equalizer.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journeytobethlehemmovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intlgeoloctest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.n-importe-qui-sauf-toi-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anyone-but-you-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anyonebutyoumovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anyonebutyou.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anyonebutyoumovie.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garfield-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.the-book-of-clarence-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbustersar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cultkillermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madamewebmovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madamewebmovie.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madameweb.sonypictures.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madameweb.sonypictures.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madameweb.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.100for100sale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.peasantsmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.ameliemovie.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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