www.sony.net

- Visionarts, Inc. -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 55:e5:d5:33:52:a4:d5:4b:b2:ca:b0:9f:72:bf:b1:4c was issued on by GeoTrust Inc..

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Visionarts, Inc.

Organization: Visionarts, Inc.
State / Province: Tokyo
Locality: Minato-ku
Country: JP

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 55:e5:d5:33:52:a4:d5:4b:b2:ca:b0:9f:72:bf:b1:4c
Serial Number (int): 114177739841781232657255657284135006540
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 1f:7a:41:0a:4e:27:1a:38:32:73:30:87:df:5e:90:01:09:e1:2e:23
Fingerprint (sha256): 03:2f:0c:04:4b:d2:e6:d8:5b:78:d6:b4:5c:0a:6b:09:af:92:89:c3:7f:5d:c7:b3:0b:03:6d:aa:45:0d:f9:53

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate www.sony.net

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sony.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shqstg.sony.co.jp
www.sony.co.jp
www.visionarts.co.jp
www.sony-semicon.co.jp
sony.net
shqstg.sony.net
www.sony.net

Other certificates including the domain name sony.net

(limited to 100 certificates)
kxqh0m6485.smp-auth-api.sony.net
dns-vetting1b.map.fastly.net
preview-production-pdp.sony.co.uk
*.dev.iot.imagingedge.sony.net
www.sony.at
mycare.dxservice.sony.net
poc.imagingedge.sony.net
dev-online.techub.sony.net
www.sony.net
preview-production-pdp.sony.co.uk
*.nucleus-live.sony.net
bizftp.dev.imagingedge.sony.net
www.sony.at
b-trainerblog.smartsports.sony.net
secure.sony.net
www.sony.net
f2.shared.global.fastly.net
*.authenticity.ppf.sony.net
f2.shared.global.fastly.net
b-trainerblog.smartsports.sony.net
qa.concierge.support.sony.net
*.stg.mdm.ppf.sony.net
b-trainerblog.smartsports.sony.net
production-api-gateway-public.videoprism.sony.net
tennisblog.smartsports.sony.net
imperva.com
dns-vetting1b.map.fastly.net
f2.shared.global.fastly.net
f2.shared.global.fastly.net
*.dev.payment.ppf.sony.net
www.sony.net
tv.update.sony.net
www.sony.net
biz-bravia.sony.net
s.sony.net
f2.shared.global.fastly.net
preview-production-pdp.sony.co.uk
www.sony.net
v-online-info.techub.sony.net
preview-production-pdp.sony.co.uk
dev.biz-bravia.sony.net
s.sony.net
preview-production-pdp.sony.co.uk
opt.imagingedge.sony.net
test.sony.com
d.newssuite.sony.net
calc.sony.net
stg-online-manage.techub.sony.net
dev.pro-bravia.sony.net
hav.update.sony.net
dev.search.pro-bravia.sony.net
f2.shared.global.fastly.net
stg-online.techub.sony.net
clock.imagingedge.sony.net
personalspace.sony.net
prd2022-visitor-tracker.techub.sony.net
cdn.rms.biz-bravia.sony.net
tennisblog.smartsports.sony.net
preview-production-pdp.sony.co.uk
f2.shared.global.fastly.net
socialife.sony.net
developer.pjfield.sony.net
*.taxi-safety.mobility-ai.sony.net
www.sony.net
f2.shared.global.fastly.net
b-trainerblog.smartsports.sony.net
*.cmtpqa.pre.payment.ppf.sony.net
www.sony.net
nh-data.sony.co.jp
techub.sony.net
*.csn.sony.net
dns-vetting1b.map.fastly.net
v-online-info.techub.sony.net
stg.biz-bravia.sony.net
stg.biz-bravia.sony.net
intra.techub.sony.net
www.global-careers-student.sony.net
th76vk7xjq.studio.locatone.sony.net
tv.update.sony.net
f2.shared.global.fastly.net
preview-production-pdp.sony.co.uk
ulms.sony.net
dx.sony.net
*.personalspace.sony.net
*.tr.imagingedge.sony.net
workstyle.sony.net
szf8pabtof.studio.locatone.sony.net
pro-id.sony.net
f2.shared.global.fastly.net
socialife.sony.net
studio.locatone.sony.net
imperva.com
preview-production-pdp.sony.co.uk
lic.dev1.sandbox.dev.ppf.sony.net
*.personalspace.sony.net
preview-production-pdp.sony.co.uk
www.grouplogo-gl.sony.net
www.sony.net
f2.shared.global.fastly.net
*.mobility-ai.sony.net

Certificate

The complete raw certificate details for www.sony.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFMd56NbzcoPw/zktpDE
+yD9sS4672/zbXaszdIHnjSxbmVwNwOKLcCLdLGaKv2f0aiBuQrxqZfuVQtB2avH
XUjKVcTi1X8ppF/6zl4ZJVqK5vypRscs/OBVGyklch61qRcgLVVeNs1h1szBa/ou
rHwFGnXKMjoho/hvr8w52PSt6Ai8nsss+WKSL27ncJpcMn2a7Aw4TqqHlEMRs5YB
gEOrAw/cmW+EjchyHT7y+96HvwaBd+K0Ulev6a2TSMtfz8cRUvFO4BVihm6a1Dhp
0UbwN2SQgDEuRPItH4uxIvXkcIk7juGpqOBuGnUy1NTA2j9TKLxy1QWL1nwsOz7Y
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 114177739841781232657255657284135006540
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Minato-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Visionarts, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.sony.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24783694202787443757570857052221093763524815533276880465833874569107525585316694855156380350798816135555764189372882368430429921936250737953195312704183208513981101117749702848366605111730420444460065524337387106057034639242894736779193934683838464646250989845362556134018447761755445562221618253290910889859374602983827017523166257352942771234362511901462383054740032787430597517058577170728537584818514701155590062210936795468519597611133918044495809447407046473290245872304530516015171204836944254080035920699053019867067910107986465810539237614487940961762336661552266917830143623869295877753100590745924638005311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shqstg.sony.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sony.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visionarts.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sony-semicon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sony.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shqstg.sony.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sony.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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