sites.sonypictures.com

- Sony Pictures Entertainment -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 08:53:3a:29:b1:03:ec:a6:51:13:b2:78:3a:80:34:de was issued on by DigiCert Inc.

With 101 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sony Pictures Entertainment

Organization: Sony Pictures Entertainment
Organization unit: Internet Systems Technology
State / Province: California
Locality: Culver City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:53:3a:29:b1:03:ec:a6:51:13:b2:78:3a:80:34:de
Serial Number (int): 11065964288432983620449521848387908830
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ee:e6:65:af:67:5d:30:8b:6a:e2:62:31:9b:bb:31:61:b2:33:cd:0e
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 68:86:74:95:b6:6c:f6:db:21:1a:6e:6f:99:11:fa:94:54:8a:0c:c3
Fingerprint (sha256): 04:b2:15:a1:1c:d3:93:0c:c3:c0:bf:b4:35:f4:e4:40:8d:8b:bd:d3:11:e3:42:c9:42:0e:ee:f1:f9:18:a5:a0

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate sites.sonypictures.com

101

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sites.sonypictures.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sites.sonypictures.com
www.sf-shinsedai.jp
www.peterrabbitlapelicula.com
www.whatisfly.com
www.hotelt3.com
www.wearevenom.com
stage.wearevenom.com
www.wearevenom.movie
stage.wearevenom.movie
stage.searchingmovie.net
www.searchingmovie.net
stage.equalizer.movie
www.equalizer.movie
www.sicarioyourself.com
sicarioyourself.com
www.findmargot.com
findmargot.com
www.sonypicturesstudiostours.com
www.whiteboyrick.movie
www.thefrontrunner.movie
www.goosebumps.movie
www.goosebumpstickets.movie
goosebumpstickets.movie
www.adogswayhome.movie
www.missbala.movie
missbala.movie
www.escaperoom.movie
escaperoom.movie
www.adogswayhomeparents.com
adogswayhomeparents.com
holmesandwatson.movie
www.holmesandwatson.movie
holmies4life.com
www.holmies4life.com
intothespiderverse-ar.com
www.intothespiderverse-ar.com
holmes4theholidays.com
www.holmes4theholidays.com
theintrudermovie.com
www.theintrudermovie.com
meninblack.com
www.meninblack.com
brightburn.movie
www.brightburn.movie
possessionofhannahgrace.movie
www.possessionofhannahgrace.movie
spidermanfarfromhome.movie
www.spidermanfarfromhome.movie
mydogswayhome.com
www.mydogswayhome.com
cruelintentions.com
www.cruelintentions.com
grudge.movie
www.grudge.movie
overcomermovie.com
www.overcomermovie.com
charliesangels.movie
www.charliesangels.movie
onceuponatimeinhollywood.movie
www.onceuponatimeinhollywood.movie
brightburnmovie.co.uk
www.brightburnmovie.co.uk
spidermantickets.co.uk
www.spidermantickets.co.uk
meninblackinternational.co.uk
mibinternational-lefilm.be
mibinternational-movie.be
www.meninblackinternational.co.uk
www.mibinternational-lefilm.be
www.mibinternational-movie.be
inhollywood.co.uk
www.inhollywood.co.uk
brightburn-movie.be
www.brightburn-movie.be
enfantdumal-lefilm.be
www.enfantdumal-lefilm.be
angrybirdsmovie.co.uk
www.angrybirdsmovie.co.uk
spidermanfarfromhome-lefilm.be
www.spidermanfarfromhome-lefilm.be
spidermanfarfromhome-movie.be
www.spidermanfarfromhome-movie.be
blackandblue.movie
www.blackandblue.movie
jumanjimovie.com
www.jumanjimovie.com
mibhqchaos.com
www.mibhqchaos.com
onceuponatimemag.com
www.onceuponatimemag.com
www.littlewomen.movie
www.abeautifulday.movie
www.onceuponatimein1969.com
stage.onceuponatimein1969.com
www.zombieland.com
tickets.angrybirds2.movie
www.overcomermovie.ca
www.onceuponatimeinhollywood-movie.be
stage.onceuponatimeinhollywood-movie.be
www.onceuponatimeinhollywood-lefilm.be
stage.onceuponatimeinhollywood-lefilm.be

Other certificates including the domain name sonypictures.com

(limited to 100 certificates)
conectados.sonypictures.com
*.sonypictures.com
redeem.sonypictures.com
origin-flash.sonypictures.com
edge-micros1.sonypictures.com
secure.sonypictures.com
origin-flash.sonypictures.com
edge-micros2.sonypictures.com
brand.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
extaz-qa.spe.sony.com
edge-micros2.sonypictures.com
edge-micros2.sonypictures.com
sites.sonypictures.com
sites.sonypictures.com
secure.sonypictures.com
globalassethub.sonypictures.com
www.stage6films.com
api.stg-stage-productionservices.sonypictures.com
pub.email.sonypictures.com
connect.sonypictures.com
sites.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
stage-microsites.sonypictures.com
portals.sonypictures.com
microsites.sonypictures.com
image.20210419.200345.s6.et.yellsatcloud.com
globalassethub.sonypictures.com
portals.sonypictures.com
portals.sonypictures.com
conectados.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
sites.sonypictures.com
edge-portals.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
edge-micros2.sonypictures.com
flash.sonypictures.com
pub.email.sonypictures.com
griffin.sonypictures.com
view.email.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
sites.sonypictures.com
audiolibrary.sonypictures.com
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
akamai-san77.exacttarget.com
stage-microsites.sonypictures.com
www.sonypictures.co.uk
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
viewer.sonypictures.com
secure.sonypictures.com
edge-portals.sonypictures.com
sites2.sonypictures.com
edge-micros2.sonypictures.com
test.rewards.sonypictures.com
www.stage6films.com
test.rewards.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
gam.sonypictures.com
microsites.sonypictures.com
flash.sonypictures.com
view.email.games.sonypictures.com
rewards.sonypictures.com
test.redeem.sonypictures.com
edge-micros1.sonypictures.com
brand.sonypictures.com
gam.sonypictures.com
stage-microsites.sonypictures.com
perc.sonypictures.com
sony-prod.actioniq.mr-in.com
click.email.sonypictures.com
stage-edge-portals.sonypictures.com
stage-microsites.sonypictures.com
tweets.sonypictures.com
flash.sonypictures.com
rewards.sonypictures.com
pages.email.games.sonypictures.com
view.email.sonypictures.com
rewards.sonypictures.com
redeem.sonypictures.com
microsites.sonypictures.com
redeem.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
origin-flash.sonypictures.com

Certificate

The complete raw certificate details for sites.sonypictures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWtobbBYRrYzdSLUTYAt
WkAy/WkwPDE+i9EFJZHqgszFW5qECjDp/tEAp5SCCKaHiu2Cb+tyOXkXBM+ibT4Z
HY78RAkUk9kX2ze0Wd92QPiB75QLkyc3ITrV/EPBrrjZKj+CCoW0wCIGfp3Z9jgK
ezOttlFjPAO6mPUEOOgPEnEUBgu/OYsBGzU4tdnlIJUL1EXGteDALvEi2nmQtOT4
nx2k3q/xlfMzs1QeaZ9pecvAjZP53CBk8tgidH23v2gbQ8qNKbz5gvs6P00b+mYb
7RwU3WjWGX/mAhuuPa/WEKyiqn+4dkjMWIRwnpRb/0e93Mf9jfPXhsH3hp9PFcFI
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11065964288432983620449521848387908830
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Culver City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sony Pictures Entertainment'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet Systems Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sites.sonypictures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20882285140611421091101918515849830070699732011238211531242737070136655589659535696197520755445979512454891243425718286232624517709164554276045838691614643317032500089967755861527429183924219158066191175714706392562378521038226735997941118468900757923124108423075291009107188575282330401217979945980797721067668040275064319077583818510749145305115042383868208170118503960627429229084284654762567936826292155139585335018578018921518693566900441532094735922891911625110466039321233532944658728750635070928942065366464784448181939827152071802216156507152153614500758919219780996274365203452084892657259963063799327574243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eee665af675d308b6ae262319bbb3161b233cd0e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2540 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sites.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sf-shinsedai.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterrabbitlapelicula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whatisfly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelt3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wearevenom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.wearevenom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wearevenom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.wearevenom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.searchingmovie.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.searchingmovie.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.equalizer.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equalizer.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sicarioyourself.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sicarioyourself.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.findmargot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findmargot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypicturesstudiostours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whiteboyrick.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefrontrunner.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goosebumps.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goosebumpstickets.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goosebumpstickets.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adogswayhome.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missbala.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missbala.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.escaperoom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escaperoom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adogswayhomeparents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adogswayhomeparents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holmesandwatson.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holmesandwatson.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holmies4life.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holmies4life.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intothespiderverse-ar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intothespiderverse-ar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holmes4theholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holmes4theholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theintrudermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theintrudermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meninblack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meninblack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightburn.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brightburn.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'possessionofhannahgrace.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.possessionofhannahgrace.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spidermanfarfromhome.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermanfarfromhome.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydogswayhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mydogswayhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cruelintentions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cruelintentions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grudge.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grudge.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overcomermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overcomermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charliesangels.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charliesangels.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onceuponatimeinhollywood.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onceuponatimeinhollywood.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightburnmovie.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brightburnmovie.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spidermantickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermantickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meninblackinternational.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mibinternational-lefilm.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mibinternational-movie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meninblackinternational.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mibinternational-lefilm.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mibinternational-movie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inhollywood.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inhollywood.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightburn-movie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brightburn-movie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enfantdumal-lefilm.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enfantdumal-lefilm.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angrybirdsmovie.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angrybirdsmovie.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spidermanfarfromhome-lefilm.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermanfarfromhome-lefilm.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spidermanfarfromhome-movie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermanfarfromhome-movie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackandblue.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackandblue.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jumanjimovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jumanjimovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mibhqchaos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mibhqchaos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onceuponatimemag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onceuponatimemag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.littlewomen.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abeautifulday.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onceuponatimein1969.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.onceuponatimein1969.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zombieland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.angrybirds2.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overcomermovie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onceuponatimeinhollywood-movie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.onceuponatimeinhollywood-movie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onceuponatimeinhollywood-lefilm.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.onceuponatimeinhollywood-lefilm.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016bf8401b770000040300473045022048acfebc6c76dc3a569103d576815b0805f03ceb738401544914b0c7ddd9e207022100c733c2b5c4f1a1a0e4252ca81812c969672d4a2739b4dad49a8bb6b3f4f072580077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016bf8401bc80000040300483046022100ab031a4daa34b4ae585833f219b101bea5d2ab032b4dbbd36195e6744de9ad860221008ce0cb01aad299f788f43a1c97e08c23c1e69ab6072d7f1760b7c92273474a31
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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