cdn.rms.biz-bravia.sony.net

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0a:6d:5d:2a:c1:24:10:59:79:98:8f:3d:65:9e:cd:6b was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cdn.rms.biz-bravia.sony.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:6d:5d:2a:c1:24:10:59:79:98:8f:3d:65:9e:cd:6b
Serial Number (int): 13860129966879625578411084683459612011
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 32:b4:51:de:b5:05:fc:26:69:01:c3:d9:27:9f:94:8b:29:a8:55:13
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 4f:86:98:ee:6d:ee:28:64:16:8f:4b:e1:d2:76:f2:03:8f:2a:5f:ca
Fingerprint (sha256): 06:9d:7c:50:0d:95:80:cd:df:7d:04:db:28:6b:dc:f4:c0:83:4c:dd:97:94:1d:67:09:53:a7:74:cf:30:15:78

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate cdn.rms.biz-bravia.sony.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdn.rms.biz-bravia.sony.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn.rms.biz-bravia.sony.net

Other certificates including the domain name sony.net

(limited to 100 certificates)
kxqh0m6485.smp-auth-api.sony.net
dns-vetting1b.map.fastly.net
preview-production-pdp.sony.co.uk
*.dev.iot.imagingedge.sony.net
www.sony.at
mycare.dxservice.sony.net
poc.imagingedge.sony.net
dev-online.techub.sony.net
www.sony.net
preview-production-pdp.sony.co.uk
*.nucleus-live.sony.net
bizftp.dev.imagingedge.sony.net
www.sony.at
b-trainerblog.smartsports.sony.net
secure.sony.net
www.sony.net
f2.shared.global.fastly.net
*.authenticity.ppf.sony.net
f2.shared.global.fastly.net
b-trainerblog.smartsports.sony.net
qa.concierge.support.sony.net
*.stg.mdm.ppf.sony.net
b-trainerblog.smartsports.sony.net
production-api-gateway-public.videoprism.sony.net
tennisblog.smartsports.sony.net
imperva.com
dns-vetting1b.map.fastly.net
f2.shared.global.fastly.net
f2.shared.global.fastly.net
*.dev.payment.ppf.sony.net
www.sony.net
tv.update.sony.net
www.sony.net
biz-bravia.sony.net
s.sony.net
f2.shared.global.fastly.net
preview-production-pdp.sony.co.uk
www.sony.net
v-online-info.techub.sony.net
preview-production-pdp.sony.co.uk
dev.biz-bravia.sony.net
s.sony.net
preview-production-pdp.sony.co.uk
opt.imagingedge.sony.net
test.sony.com
d.newssuite.sony.net
calc.sony.net
stg-online-manage.techub.sony.net
dev.pro-bravia.sony.net
hav.update.sony.net
dev.search.pro-bravia.sony.net
f2.shared.global.fastly.net
stg-online.techub.sony.net
clock.imagingedge.sony.net
personalspace.sony.net
prd2022-visitor-tracker.techub.sony.net
cdn.rms.biz-bravia.sony.net
tennisblog.smartsports.sony.net
preview-production-pdp.sony.co.uk
f2.shared.global.fastly.net
socialife.sony.net
developer.pjfield.sony.net
*.taxi-safety.mobility-ai.sony.net
www.sony.net
f2.shared.global.fastly.net
b-trainerblog.smartsports.sony.net
*.cmtpqa.pre.payment.ppf.sony.net
www.sony.net
nh-data.sony.co.jp
techub.sony.net
*.csn.sony.net
dns-vetting1b.map.fastly.net
v-online-info.techub.sony.net
stg.biz-bravia.sony.net
stg.biz-bravia.sony.net
intra.techub.sony.net
www.global-careers-student.sony.net
th76vk7xjq.studio.locatone.sony.net
tv.update.sony.net
f2.shared.global.fastly.net
preview-production-pdp.sony.co.uk
ulms.sony.net
dx.sony.net
*.personalspace.sony.net
*.tr.imagingedge.sony.net
workstyle.sony.net
szf8pabtof.studio.locatone.sony.net
pro-id.sony.net
f2.shared.global.fastly.net
socialife.sony.net
studio.locatone.sony.net
imperva.com
preview-production-pdp.sony.co.uk
lic.dev1.sandbox.dev.ppf.sony.net
*.personalspace.sony.net
preview-production-pdp.sony.co.uk
www.grouplogo-gl.sony.net
www.sony.net
f2.shared.global.fastly.net
*.mobility-ai.sony.net

Certificate

The complete raw certificate details for cdn.rms.biz-bravia.sony.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyS35uJEPK32hLaL4int
w3t6WHZ8Y3ieeAbl3A0N+s8WZiKfvV+8kVKJW5uZAVI3htqXOybbzP+cwTK1jsyt
UDaj1+VWd+H4UGCperCDH6BW1bus9cARCLs2oaJD6Xcaa0uluRpJPlq3Bj6OCUOP
sBSawewSBbxoNHIyXZFXT4k2chhc3EW2u+O/WUZvbhKojCdNwMNZmcxA0dkIUIst
KvPxnnufDBlOrLyVTYtvYSseiEhDU/LWMIlIWcqbYmJH4x4a1UR1nZhHrivNp3gd
K2PBV83+T+2gz+fYjC5iWrdQwOP6DebNclTKZXxRqac45TYsNT/pXfutWYBO+DL3
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13860129966879625578411084683459612011
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn.rms.biz-bravia.sony.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20089996991090253522330613751003513656721824229551447247434145362088231105492010032090943741395065273143929501315254316585981953153197185417725646590115849645691602829781635950235264824918503002581029177201101134741277603435070014714798754811787081544145622788188318690146108974802540231679890307136231345805601481732202478655502849275994560113075385937962884943931825720821604125977771808380284952739733972457828583266845391802211158360092802822574126923738162233103303059394089062650488067171113885640285311674432879703575815591021772227840854884679363249613964224258624584260734105087806685613826418714535477311411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							32b451deb505fc266901c3d9279f948b29a85513
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.rms.biz-bravia.sony.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018a3a7a3604000004030046304402203590eb1337521d4084a6ef3f047ef5e872b131332bb6166486f71ccd5c78c2b402200d1d735cd241ba64bff01b7638a031b4396316a03d1299ac4d5d4c3975db50e300760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018a3a7a34620000040300473045022100912fc6bac8864e95189b6f6de6be439d4e6cea4e9852d26af8c399fcd9095db902204dab45d4c238e5c6120a6ee1afedaecfbc31e10e6d5f77e7ec8eaea4df5196e7007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018a3a7a343800000403004730450221009a16151a0ca1058fca91f6822a97b1126d3ee5eba0a6ec45c748d4d762f4730a0220503e3028c5b129a326b22f3df93df239cae127ea52fc96fd6ad97a31a32d4507
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ae1822a7725425159f1911309aca99f83072eeddb72a1c8db2f4bb36907f87defe18e8f4b25a58aa7e360430089b2afdd30293a660567ff5dd2f71b3f79ab42dbc1bf84abf71a3b6957a510a93e126d77996d216bf60bc3e56f42f0b7b19fb4ace56124bb6ca01bed3262743db7e5414c6b9a52e70caf424c5e81d61d2b9ce556bd04438ec4de76ac335fada11eb7ea2623e230ecafd1f6d3b32e94b010c633b95de71f1c4ce617bea6dffb2c40741e82785297e38ad39501ba59793c6dc33cc5d5ad6b5598d90c63f71b4c238c79cde8667eb30664fa32a099223bd71456d713a5de868eb9fb7182d376d018f68f2a5215ca9243f782a6d6bcaddd742f1d418