sites.sonypictures.com

- Sony Pictures Entertainment -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 06:ce:fc:68:cb:5a:31:2b:a7:e1:8c:75:b8:6b:87:ea was issued on by DigiCert Inc.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sony Pictures Entertainment

Organization: Sony Pictures Entertainment
Organization unit: Internet Systems Technology
State / Province: California
Locality: Culver City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:ce:fc:68:cb:5a:31:2b:a7:e1:8c:75:b8:6b:87:ea
Serial Number (int): 9050100597451183952101194911703599082
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ee:e6:65:af:67:5d:30:8b:6a:e2:62:31:9b:bb:31:61:b2:33:cd:0e
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): c0:43:de:69:6d:31:23:06:d9:d2:68:34:12:41:4b:af:e6:b3:94:2d
Fingerprint (sha256): 03:5c:1e:0a:5f:a6:9e:a9:ec:63:b8:6a:1b:b5:69:da:55:fd:fa:33:b5:06:dd:a6:e1:76:b7:b4:a7:4b:46:99

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate sites.sonypictures.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sites.sonypictures.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sites.sonypictures.com
www.sf-shinsedai.jp
www.peterrabbitlapelicula.com
www.hotelt3.com
www.wearevenom.com
www.wearevenom.movie
www.equalizer.movie
www.sonypicturesstudiostours.com
www.goosebumps.movie
www.goosebumpstickets.movie
goosebumpstickets.movie
www.adogswayhome.movie
www.missbala.movie
missbala.movie
www.escaperoom.movie
escaperoom.movie
www.adogswayhomeparents.com
adogswayhomeparents.com
intothespiderverse-ar.com
www.intothespiderverse-ar.com
theintrudermovie.com
www.theintrudermovie.com
meninblack.com
www.meninblack.com
brightburn.movie
www.brightburn.movie
possessionofhannahgrace.movie
www.possessionofhannahgrace.movie
spidermanfarfromhome.movie
www.spidermanfarfromhome.movie
mydogswayhome.com
www.mydogswayhome.com
grudge.movie
www.grudge.movie
overcomermovie.com
www.overcomermovie.com
charliesangels.movie
www.charliesangels.movie
onceuponatimeinhollywood.movie
www.onceuponatimeinhollywood.movie
brightburnmovie.co.uk
www.brightburnmovie.co.uk
spidermantickets.co.uk
www.spidermantickets.co.uk
meninblackinternational.co.uk
mibinternational-lefilm.be
mibinternational-movie.be
www.meninblackinternational.co.uk
www.mibinternational-lefilm.be
www.mibinternational-movie.be
inhollywood.co.uk
www.inhollywood.co.uk
brightburn-movie.be
www.brightburn-movie.be
enfantdumal-lefilm.be
www.enfantdumal-lefilm.be
angrybirdsmovie.co.uk
www.angrybirdsmovie.co.uk
spidermanfarfromhome-lefilm.be
www.spidermanfarfromhome-lefilm.be
spidermanfarfromhome-movie.be
www.spidermanfarfromhome-movie.be
blackandblue.movie
www.blackandblue.movie
jumanjimovie.com
www.jumanjimovie.com
mibhqchaos.com
www.mibhqchaos.com
onceuponatimemag.com
www.onceuponatimemag.com
www.littlewomen.movie
www.abeautifulday.movie
www.onceuponatimein1969.com
www.zombieland.com
tickets.angrybirds2.movie
www.overcomermovie.ca
www.onceuponatimeinhollywood-movie.be
www.onceuponatimeinhollywood-lefilm.be
tickets.overcomermovie.com
www.badboysforlife.movie
www.zombielandtickets.co.uk
www.zombie-land.jp
tickets.zombieland.com
www.badboys-movie.jp
meme.abeautifulday.movie
resources.abeautifulday.movie
www.bloodshotfilm.de
www.angrybirds2.de
www.thedailybugle.net
www.charliesangelsmovie.co.uk
www.bloodshot.movie
www.angrybird2-movie.jp

Other certificates including the domain name sonypictures.com

(limited to 100 certificates)
conectados.sonypictures.com
*.sonypictures.com
redeem.sonypictures.com
origin-flash.sonypictures.com
edge-micros1.sonypictures.com
secure.sonypictures.com
origin-flash.sonypictures.com
edge-micros2.sonypictures.com
brand.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
extaz-qa.spe.sony.com
edge-micros2.sonypictures.com
edge-micros2.sonypictures.com
sites.sonypictures.com
sites.sonypictures.com
secure.sonypictures.com
globalassethub.sonypictures.com
www.stage6films.com
api.stg-stage-productionservices.sonypictures.com
pub.email.sonypictures.com
connect.sonypictures.com
sites.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
stage-microsites.sonypictures.com
portals.sonypictures.com
microsites.sonypictures.com
image.20210419.200345.s6.et.yellsatcloud.com
globalassethub.sonypictures.com
portals.sonypictures.com
portals.sonypictures.com
conectados.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
sites.sonypictures.com
edge-portals.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
edge-micros2.sonypictures.com
flash.sonypictures.com
pub.email.sonypictures.com
griffin.sonypictures.com
view.email.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
sites.sonypictures.com
audiolibrary.sonypictures.com
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
akamai-san77.exacttarget.com
stage-microsites.sonypictures.com
www.sonypictures.co.uk
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
viewer.sonypictures.com
secure.sonypictures.com
edge-portals.sonypictures.com
sites2.sonypictures.com
edge-micros2.sonypictures.com
test.rewards.sonypictures.com
www.stage6films.com
test.rewards.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
gam.sonypictures.com
microsites.sonypictures.com
flash.sonypictures.com
view.email.games.sonypictures.com
rewards.sonypictures.com
test.redeem.sonypictures.com
edge-micros1.sonypictures.com
brand.sonypictures.com
gam.sonypictures.com
stage-microsites.sonypictures.com
perc.sonypictures.com
sony-prod.actioniq.mr-in.com
click.email.sonypictures.com
stage-edge-portals.sonypictures.com
stage-microsites.sonypictures.com
tweets.sonypictures.com
flash.sonypictures.com
rewards.sonypictures.com
pages.email.games.sonypictures.com
view.email.sonypictures.com
rewards.sonypictures.com
redeem.sonypictures.com
microsites.sonypictures.com
redeem.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
origin-flash.sonypictures.com

Certificate

The complete raw certificate details for sites.sonypictures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWtobbBYRrYzdSLUTYAt
WkAy/WkwPDE+i9EFJZHqgszFW5qECjDp/tEAp5SCCKaHiu2Cb+tyOXkXBM+ibT4Z
HY78RAkUk9kX2ze0Wd92QPiB75QLkyc3ITrV/EPBrrjZKj+CCoW0wCIGfp3Z9jgK
ezOttlFjPAO6mPUEOOgPEnEUBgu/OYsBGzU4tdnlIJUL1EXGteDALvEi2nmQtOT4
nx2k3q/xlfMzs1QeaZ9pecvAjZP53CBk8tgidH23v2gbQ8qNKbz5gvs6P00b+mYb
7RwU3WjWGX/mAhuuPa/WEKyiqn+4dkjMWIRwnpRb/0e93Mf9jfPXhsH3hp9PFcFI
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9050100597451183952101194911703599082
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Culver City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sony Pictures Entertainment'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet Systems Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sites.sonypictures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20882285140611421091101918515849830070699732011238211531242737070136655589659535696197520755445979512454891243425718286232624517709164554276045838691614643317032500089967755861527429183924219158066191175714706392562378521038226735997941118468900757923124108423075291009107188575282330401217979945980797721067668040275064319077583818510749145305115042383868208170118503960627429229084284654762567936826292155139585335018578018921518693566900441532094735922891911625110466039321233532944658728750635070928942065366464784448181939827152071802216156507152153614500758919219780996274365203452084892657259963063799327574243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eee665af675d308b6ae262319bbb3161b233cd0e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2316 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sites.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sf-shinsedai.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterrabbitlapelicula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelt3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wearevenom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wearevenom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equalizer.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypicturesstudiostours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goosebumps.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goosebumpstickets.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goosebumpstickets.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adogswayhome.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missbala.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missbala.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.escaperoom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escaperoom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adogswayhomeparents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adogswayhomeparents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intothespiderverse-ar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intothespiderverse-ar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theintrudermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theintrudermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meninblack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meninblack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightburn.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brightburn.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'possessionofhannahgrace.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.possessionofhannahgrace.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spidermanfarfromhome.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermanfarfromhome.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydogswayhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mydogswayhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grudge.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grudge.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overcomermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overcomermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charliesangels.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charliesangels.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onceuponatimeinhollywood.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onceuponatimeinhollywood.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightburnmovie.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brightburnmovie.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spidermantickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermantickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meninblackinternational.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mibinternational-lefilm.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mibinternational-movie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meninblackinternational.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mibinternational-lefilm.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mibinternational-movie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inhollywood.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inhollywood.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightburn-movie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brightburn-movie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enfantdumal-lefilm.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enfantdumal-lefilm.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angrybirdsmovie.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angrybirdsmovie.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spidermanfarfromhome-lefilm.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermanfarfromhome-lefilm.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spidermanfarfromhome-movie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermanfarfromhome-movie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackandblue.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackandblue.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jumanjimovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jumanjimovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mibhqchaos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mibhqchaos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onceuponatimemag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onceuponatimemag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.littlewomen.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abeautifulday.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onceuponatimein1969.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zombieland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.angrybirds2.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overcomermovie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onceuponatimeinhollywood-movie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onceuponatimeinhollywood-lefilm.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.overcomermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badboysforlife.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zombielandtickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zombie-land.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.zombieland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badboys-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meme.abeautifulday.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.abeautifulday.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bloodshotfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angrybirds2.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thedailybugle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charliesangelsmovie.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bloodshot.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angrybird2-movie.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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