stage-microsites.sonypictures.com

- Sony Pictures Entertainment -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 05:ca:47:0f:e7:91:38:39:6f:85:b8:76:f5:86:05:89 was issued on by DigiCert Inc.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sony Pictures Entertainment

Organization: Sony Pictures Entertainment
Organization unit: Internet Systems Technology
State / Province: California
Locality: Culver City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:ca:47:0f:e7:91:38:39:6f:85:b8:76:f5:86:05:89
Serial Number (int): 7696425255519508552645676656415344009
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 0e:51:be:96:18:8a:7c:b7:12:d8:3d:62:eb:3e:15:a6:05:17:b7:7d
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 9b:31:a5:93:f2:3e:61:0a:65:85:fd:3d:53:ae:f6:4b:98:76:04:2c
Fingerprint (sha256): 03:c9:3a:bc:43:75:d1:d4:87:3e:e4:6b:62:c7:3c:a1:e2:41:77:e9:33:22:9e:7f:30:19:31:92:a2:25:07:e8

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate stage-microsites.sonypictures.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stage-microsites.sonypictures.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stage-meme.overcomermovie.com
stage.abeautifulday.movie
stage.adogswayhome.movie
stage.adogswayhomeparents.com
stage.alexrider.tv
stage.angrybird2-movie.jp
stage.artofhoteltransylvania3.com
stage.babydriver-movie.com
stage.badboys-movie.jp
stage.badboysforlife.movie
stage.badboysmovie.co.uk
stage.badboysridetogether.net
stage.bella-no-wonderfulhome.jp
stage.blackandblue.movie
stage.brightburn.movie
stage.brightburn.net
stage.brightburnmovie.co.uk
stage.charlies-angels.jp
stage.charliesangels.movie
stage.charliesangelsmovie.co.uk
stage.equalizer.movie
stage.equalizer2movie.ca
stage.explorejumanji.com
stage.fantasyisland.movie
stage.findmargot.com
stage.goosebumps.movie
stage.goosebumps2movie.ca
stage.goosebumpsthemovie.co.uk
stage.holmes4theholidays.com
stage.holmies4life.com
stage.hotelt3movie.ca
stage.house-of-cards.jp
stage.inhollywood.co.uk
stage.jumanji-film.de
stage.jumanji.com.br
stage.jumanji.com.mx
stage.jumanji.jp
stage.jumanji360.com
stage.jumanjimovie.com
stage.jumanjimovie.net
stage.littlewomen.movie
stage.meninblack.com
stage.meninblack.jp
stage.meninblackinternational.co.uk
stage.minitheater.jp
stage.minosescaperooms.com
stage.miraclesfromheavenresources.com
stage.missbala.movie
stage.mydogswayhome.com
stage.onceinhollywood.jp
stage.onceuponatimein1969.com
stage.onceuponatimeinhollywood.movie
stage.onceuponatimemag.com
stage.overcomermovie.ca
stage.overcomermovie.com
stage.padman.jp
stage.paul-love.jp
stage.paulmovie.com
stage.peterrabbit-movie.com
stage.peterrabbit-movie.jp
stage.peterrabbitlapelicula.com
stage.peterrabbitmovie.ca
stage.proudmary-movie.com
stage.revengegirl-movie.jp
stage.search-movie.jp
stage.searching.movie
stage.searchingmovie.net
stage.sicario2movie.ca
stage.slendermanfilm.de
stage.soldado.movie
stage.spider-verse.jp
stage.spiderman-movie.jp
stage.spiderman-tickets.co.uk
stage.spidermanhomecoming.com
stage.spidermanimaxorbust.com
stage.spidermannewuniverse.de
stage.spiderversemovie.ca
stage.surfsup.com
stage.thedailybugle.net
stage.theemoji-movie.com
stage.thegoosebumpsmovie.net
stage.thegrudge.movie
stage.thestarmovie.com
stage.thestarmoviemusic.com
stage.venom.movie
stage.venommovie.ca
stage-microsites.sonypictures.com

Other certificates including the domain name sonypictures.com

(limited to 100 certificates)
conectados.sonypictures.com
*.sonypictures.com
redeem.sonypictures.com
origin-flash.sonypictures.com
edge-micros1.sonypictures.com
secure.sonypictures.com
origin-flash.sonypictures.com
edge-micros2.sonypictures.com
brand.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
extaz-qa.spe.sony.com
edge-micros2.sonypictures.com
edge-micros2.sonypictures.com
sites.sonypictures.com
sites.sonypictures.com
secure.sonypictures.com
globalassethub.sonypictures.com
www.stage6films.com
api.stg-stage-productionservices.sonypictures.com
pub.email.sonypictures.com
connect.sonypictures.com
sites.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
stage-microsites.sonypictures.com
portals.sonypictures.com
microsites.sonypictures.com
image.20210419.200345.s6.et.yellsatcloud.com
globalassethub.sonypictures.com
portals.sonypictures.com
portals.sonypictures.com
conectados.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
sites.sonypictures.com
edge-portals.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
edge-micros2.sonypictures.com
flash.sonypictures.com
pub.email.sonypictures.com
griffin.sonypictures.com
view.email.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
sites.sonypictures.com
audiolibrary.sonypictures.com
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
akamai-san77.exacttarget.com
stage-microsites.sonypictures.com
www.sonypictures.co.uk
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
viewer.sonypictures.com
secure.sonypictures.com
edge-portals.sonypictures.com
sites2.sonypictures.com
edge-micros2.sonypictures.com
test.rewards.sonypictures.com
www.stage6films.com
test.rewards.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
gam.sonypictures.com
microsites.sonypictures.com
flash.sonypictures.com
view.email.games.sonypictures.com
rewards.sonypictures.com
test.redeem.sonypictures.com
edge-micros1.sonypictures.com
brand.sonypictures.com
gam.sonypictures.com
stage-microsites.sonypictures.com
perc.sonypictures.com
sony-prod.actioniq.mr-in.com
click.email.sonypictures.com
stage-edge-portals.sonypictures.com
stage-microsites.sonypictures.com
tweets.sonypictures.com
flash.sonypictures.com
rewards.sonypictures.com
pages.email.games.sonypictures.com
view.email.sonypictures.com
rewards.sonypictures.com
redeem.sonypictures.com
microsites.sonypictures.com
redeem.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
origin-flash.sonypictures.com

Certificate

The complete raw certificate details for stage-microsites.sonypictures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOTDCCDTSgAwIBAgIQBcpHD+eRODlvhbh29YYFiTANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE
aWdpQ2VydCBHbG9iYWwgQ0EgRzIwHhcNMjAwMTI5MDAwMDAwWhcNMjEwMTI5MTIw
MDAwWjCBsDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExFDASBgNV
BAcTC0N1bHZlciBDaXR5MSQwIgYDVQQKExtTb255IFBpY3R1cmVzIEVudGVydGFp
bm1lbnQxJDAiBgNVBAsTG0ludGVybmV0IFN5c3RlbXMgVGVjaG5vbG9neTEqMCgG
A1UEAxMhc3RhZ2UtbWljcm9zaXRlcy5zb255cGljdHVyZXMuY29tMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TsuC7p6UCkuO6JYONhjp1zPYtySswUO
KyJ/aykAJR9QD1uFxdQdcLyJFOoX7Zbdj94QnbKizkduR76bHC1771keyMVLLbdp
v8B2lDJbAkVxSMhx1uIF9yuM5euozEjrM4tnJiKqTvxaM1OYe5GaW7vomW/K6ADf
1NXFu3fNKvsjl4z7CAWkfOVs9o27UBfwLvV7FtAx1BFE724pTEFBlmGt7QoyWimX
gBst89BM6bh4nGhWnsHQxkZhABO2WX4fUZuBrwZ/Rt6GTDXYZ8GWn+317MK5Ai8I
tseAqcIV6qTjD8r3eUKA9ESDn+ggssCZ/JMmgYbjgUI/iMXQThIvXwIDAQABo4IK
yzCCCscwHwYDVR0jBBgwFoAUJG4rLdBqklFRJWkBqppHponnQCAwHQYDVR0OBBYE
FA5RvpYYiny3Etg9Yus+FaYFF7d9MIII9wYDVR0RBIII7jCCCOqCHXN0YWdlLW1l
bWUub3ZlcmNvbWVybW92aWUuY29tghlzdGFnZS5hYmVhdXRpZnVsZGF5Lm1vdmll
ghhzdGFnZS5hZG9nc3dheWhvbWUubW92aWWCHXN0YWdlLmFkb2dzd2F5aG9tZXBh
cmVudHMuY29tghJzdGFnZS5hbGV4cmlkZXIudHaCGXN0YWdlLmFuZ3J5YmlyZDIt
bW92aWUuanCCIXN0YWdlLmFydG9maG90ZWx0cmFuc3lsdmFuaWEzLmNvbYIac3Rh
Z2UuYmFieWRyaXZlci1tb3ZpZS5jb22CFnN0YWdlLmJhZGJveXMtbW92aWUuanCC
GnN0YWdlLmJhZGJveXNmb3JsaWZlLm1vdmllghhzdGFnZS5iYWRib3lzbW92aWUu
Y28udWuCHXN0YWdlLmJhZGJveXNyaWRldG9nZXRoZXIubmV0gh9zdGFnZS5iZWxs
YS1uby13b25kZXJmdWxob21lLmpwghhzdGFnZS5ibGFja2FuZGJsdWUubW92aWWC
FnN0YWdlLmJyaWdodGJ1cm4ubW92aWWCFHN0YWdlLmJyaWdodGJ1cm4ubmV0ghtz
dGFnZS5icmlnaHRidXJubW92aWUuY28udWuCGHN0YWdlLmNoYXJsaWVzLWFuZ2Vs
cy5qcIIac3RhZ2UuY2hhcmxpZXNhbmdlbHMubW92aWWCH3N0YWdlLmNoYXJsaWVz
YW5nZWxzbW92aWUuY28udWuCFXN0YWdlLmVxdWFsaXplci5tb3ZpZYIYc3RhZ2Uu
ZXF1YWxpemVyMm1vdmllLmNhghhzdGFnZS5leHBsb3JlanVtYW5qaS5jb22CGXN0
YWdlLmZhbnRhc3lpc2xhbmQubW92aWWCFHN0YWdlLmZpbmRtYXJnb3QuY29tghZz
dGFnZS5nb29zZWJ1bXBzLm1vdmllghlzdGFnZS5nb29zZWJ1bXBzMm1vdmllLmNh
gh5zdGFnZS5nb29zZWJ1bXBzdGhlbW92aWUuY28udWuCHHN0YWdlLmhvbG1lczR0
aGVob2xpZGF5cy5jb22CFnN0YWdlLmhvbG1pZXM0bGlmZS5jb22CFXN0YWdlLmhv
dGVsdDNtb3ZpZS5jYYIXc3RhZ2UuaG91c2Utb2YtY2FyZHMuanCCF3N0YWdlLmlu
aG9sbHl3b29kLmNvLnVrghVzdGFnZS5qdW1hbmppLWZpbG0uZGWCFHN0YWdlLmp1
bWFuamkuY29tLmJyghRzdGFnZS5qdW1hbmppLmNvbS5teIIQc3RhZ2UuanVtYW5q
aS5qcIIUc3RhZ2UuanVtYW5qaTM2MC5jb22CFnN0YWdlLmp1bWFuamltb3ZpZS5j
b22CFnN0YWdlLmp1bWFuamltb3ZpZS5uZXSCF3N0YWdlLmxpdHRsZXdvbWVuLm1v
dmllghRzdGFnZS5tZW5pbmJsYWNrLmNvbYITc3RhZ2UubWVuaW5ibGFjay5qcIIj
c3RhZ2UubWVuaW5ibGFja2ludGVybmF0aW9uYWwuY28udWuCFHN0YWdlLm1pbml0
aGVhdGVyLmpwghpzdGFnZS5taW5vc2VzY2FwZXJvb21zLmNvbYIlc3RhZ2UubWly
YWNsZXNmcm9taGVhdmVucmVzb3VyY2VzLmNvbYIUc3RhZ2UubWlzc2JhbGEubW92
aWWCF3N0YWdlLm15ZG9nc3dheWhvbWUuY29tghhzdGFnZS5vbmNlaW5ob2xseXdv
b2QuanCCHXN0YWdlLm9uY2V1cG9uYXRpbWVpbjE5NjkuY29tgiRzdGFnZS5vbmNl
dXBvbmF0aW1laW5ob2xseXdvb2QubW92aWWCGnN0YWdlLm9uY2V1cG9uYXRpbWVt
YWcuY29tghdzdGFnZS5vdmVyY29tZXJtb3ZpZS5jYYIYc3RhZ2Uub3ZlcmNvbWVy
bW92aWUuY29tgg9zdGFnZS5wYWRtYW4uanCCEnN0YWdlLnBhdWwtbG92ZS5qcIIT
c3RhZ2UucGF1bG1vdmllLmNvbYIbc3RhZ2UucGV0ZXJyYWJiaXQtbW92aWUuY29t
ghpzdGFnZS5wZXRlcnJhYmJpdC1tb3ZpZS5qcIIfc3RhZ2UucGV0ZXJyYWJiaXRs
YXBlbGljdWxhLmNvbYIZc3RhZ2UucGV0ZXJyYWJiaXRtb3ZpZS5jYYIZc3RhZ2Uu
cHJvdWRtYXJ5LW1vdmllLmNvbYIac3RhZ2UucmV2ZW5nZWdpcmwtbW92aWUuanCC
FXN0YWdlLnNlYXJjaC1tb3ZpZS5qcIIVc3RhZ2Uuc2VhcmNoaW5nLm1vdmllghhz
dGFnZS5zZWFyY2hpbmdtb3ZpZS5uZXSCFnN0YWdlLnNpY2FyaW8ybW92aWUuY2GC
F3N0YWdlLnNsZW5kZXJtYW5maWxtLmRlghNzdGFnZS5zb2xkYWRvLm1vdmllghVz
dGFnZS5zcGlkZXItdmVyc2UuanCCGHN0YWdlLnNwaWRlcm1hbi1tb3ZpZS5qcIId
c3RhZ2Uuc3BpZGVybWFuLXRpY2tldHMuY28udWuCHXN0YWdlLnNwaWRlcm1hbmhv
bWVjb21pbmcuY29tgh1zdGFnZS5zcGlkZXJtYW5pbWF4b3JidXN0LmNvbYIdc3Rh
Z2Uuc3BpZGVybWFubmV3dW5pdmVyc2UuZGWCGXN0YWdlLnNwaWRlcnZlcnNlbW92
aWUuY2GCEXN0YWdlLnN1cmZzdXAuY29tghdzdGFnZS50aGVkYWlseWJ1Z2xlLm5l
dIIYc3RhZ2UudGhlZW1vamktbW92aWUuY29tghxzdGFnZS50aGVnb29zZWJ1bXBz
bW92aWUubmV0ghVzdGFnZS50aGVncnVkZ2UubW92aWWCFnN0YWdlLnRoZXN0YXJt
b3ZpZS5jb22CG3N0YWdlLnRoZXN0YXJtb3ZpZW11c2ljLmNvbYIRc3RhZ2UudmVu
b20ubW92aWWCE3N0YWdlLnZlbm9tbW92aWUuY2GCIXN0YWdlLW1pY3Jvc2l0ZXMu
c29ueXBpY3R1cmVzLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMHcGA1UdHwRwMG4wNaAzoDGGL2h0dHA6Ly9jcmwzLmRp
Z2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbENBRzIuY3JsMDWgM6Axhi9odHRwOi8v
Y3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxDQUcyLmNybDBMBgNVHSAE
RTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdp
Y2VydC5jb20vQ1BTMAgGBmeBDAECAjB0BggrBgEFBQcBAQRoMGYwJAYIKwYBBQUH
MAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTA+BggrBgEFBQcwAoYyaHR0cDov
L2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsQ0FHMi5jcnQwCQYD
VR0TBAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
nOHUapJsa41lCgnG1hm8C5vBi3M2wAn3gCAZorc5fMajGwc5GdanxVszut/2l9yg
aQX7J1Vc8HPb5otTPrBz+nKOOECOb4b6hBAFnuXLtEU69ZNbxIoBqBGBBBd21qFw
qCI/Rgf39HZ7MBsz5M/hSdzUPgtPf5B8m030NUyNn3TXgbw7yiSzOr2FzDXTdpg3
WON7FUk2ara8q1QpNZE74G0GrhkQwvlypoL/uy0g4SDa8EAZy1Rat0jApddDBB7M
rnvmxGr5rAEoMT5834/IIDbdZjjzqkprJYVtnWs2oG8hFl9k9v7gs7sNxfijauEB
jQ5Mll5A7O2RaEW8iUN1wQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TsuC7p6UCkuO6JYONhj
p1zPYtySswUOKyJ/aykAJR9QD1uFxdQdcLyJFOoX7Zbdj94QnbKizkduR76bHC17
71keyMVLLbdpv8B2lDJbAkVxSMhx1uIF9yuM5euozEjrM4tnJiKqTvxaM1OYe5Ga
W7vomW/K6ADf1NXFu3fNKvsjl4z7CAWkfOVs9o27UBfwLvV7FtAx1BFE724pTEFB
lmGt7QoyWimXgBst89BM6bh4nGhWnsHQxkZhABO2WX4fUZuBrwZ/Rt6GTDXYZ8GW
n+317MK5Ai8ItseAqcIV6qTjD8r3eUKA9ESDn+ggssCZ/JMmgYbjgUI/iMXQThIv
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7696425255519508552645676656415344009
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Culver City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sony Pictures Entertainment'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet Systems Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stage-microsites.sonypictures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28432801297168787061064859769281770793333905056767714628429488086623377149661584430345719779973695693880162772296712454646778315933350138305911570998002203499527469575277032125124394957945492573939434216956480596405445797245813033430532074376713510275630952494274484747376608620835291414483998307613119911283374674035805450805075518356462399240271742030571044977019397923994881971579251074885453668107545164611407190677244610472400469181888667752926465032616871917532039675503343271149501391815796078869893517187908037062017839696868365003404236326299470855435605492940929652696644088220074199407121329437868783972191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0e51be96188a7cb712d83d62eb3e15a60517b77d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2286 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-meme.overcomermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.abeautifulday.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.adogswayhome.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.adogswayhomeparents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.alexrider.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.angrybird2-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.artofhoteltransylvania3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.babydriver-movie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.badboys-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.badboysforlife.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.badboysmovie.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.badboysridetogether.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.bella-no-wonderfulhome.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.blackandblue.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.brightburn.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.brightburn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.brightburnmovie.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.charlies-angels.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.charliesangels.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.charliesangelsmovie.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.equalizer.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.equalizer2movie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.explorejumanji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.fantasyisland.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.findmargot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.goosebumps.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.goosebumps2movie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.goosebumpsthemovie.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.holmes4theholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.holmies4life.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.hotelt3movie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.house-of-cards.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.inhollywood.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.jumanji-film.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.jumanji.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.jumanji.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.jumanji.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.jumanji360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.jumanjimovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.jumanjimovie.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.littlewomen.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.meninblack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.meninblack.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.meninblackinternational.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.minitheater.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.minosescaperooms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.miraclesfromheavenresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.missbala.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.mydogswayhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.onceinhollywood.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.onceuponatimein1969.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.onceuponatimeinhollywood.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.onceuponatimemag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.overcomermovie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.overcomermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.padman.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.paul-love.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.paulmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.peterrabbit-movie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.peterrabbit-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.peterrabbitlapelicula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.peterrabbitmovie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.proudmary-movie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.revengegirl-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.search-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.searching.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.searchingmovie.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.sicario2movie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.slendermanfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.soldado.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.spider-verse.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.spiderman-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.spiderman-tickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.spidermanhomecoming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.spidermanimaxorbust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.spidermannewuniverse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.spiderversemovie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.surfsup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.thedailybugle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.theemoji-movie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.thegoosebumpsmovie.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.thegrudge.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.thestarmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.thestarmoviemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.venommovie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-microsites.sonypictures.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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