www.global-careers-student.sony.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2b:cd:da:10:9f:eb:bc:ac:13:c3:d6:16:de:a2:7b:63:b3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.global-careers-student.sony.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2b:cd:da:10:9f:eb:bc:ac:13:c3:d6:16:de:a2:7b:63:b3
Serial Number (int): 276242623569920950781333601507293271909299
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 01:32:92:e0:85:ae:56:6b:46:72:cb:05:5a:31:bd:e5:af:94:d7:e3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 20:5e:e8:df:7c:4b:0c:d4:24:79:7c:79:7b:b7:6b:07:40:f9:b0:68
Fingerprint (sha256): 08:21:c6:d8:14:74:d9:ca:d7:cb:48:46:f0:ef:d6:c1:98:3a:bb:a7:a3:94:86:3a:14:00:b3:58:44:fa:45:6f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.global-careers-student.sony.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.global-careers-student.sony.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.global-careers-student.sony.net

Other certificates including the domain name sony.net

(limited to 100 certificates)
kxqh0m6485.smp-auth-api.sony.net
dns-vetting1b.map.fastly.net
preview-production-pdp.sony.co.uk
*.dev.iot.imagingedge.sony.net
www.sony.at
mycare.dxservice.sony.net
poc.imagingedge.sony.net
dev-online.techub.sony.net
www.sony.net
preview-production-pdp.sony.co.uk
*.nucleus-live.sony.net
bizftp.dev.imagingedge.sony.net
www.sony.at
b-trainerblog.smartsports.sony.net
secure.sony.net
www.sony.net
f2.shared.global.fastly.net
*.authenticity.ppf.sony.net
f2.shared.global.fastly.net
b-trainerblog.smartsports.sony.net
qa.concierge.support.sony.net
*.stg.mdm.ppf.sony.net
b-trainerblog.smartsports.sony.net
production-api-gateway-public.videoprism.sony.net
tennisblog.smartsports.sony.net
imperva.com
dns-vetting1b.map.fastly.net
f2.shared.global.fastly.net
f2.shared.global.fastly.net
*.dev.payment.ppf.sony.net
www.sony.net
tv.update.sony.net
www.sony.net
biz-bravia.sony.net
s.sony.net
f2.shared.global.fastly.net
preview-production-pdp.sony.co.uk
www.sony.net
v-online-info.techub.sony.net
preview-production-pdp.sony.co.uk
dev.biz-bravia.sony.net
s.sony.net
preview-production-pdp.sony.co.uk
opt.imagingedge.sony.net
test.sony.com
d.newssuite.sony.net
calc.sony.net
stg-online-manage.techub.sony.net
dev.pro-bravia.sony.net
hav.update.sony.net
dev.search.pro-bravia.sony.net
f2.shared.global.fastly.net
stg-online.techub.sony.net
clock.imagingedge.sony.net
personalspace.sony.net
prd2022-visitor-tracker.techub.sony.net
cdn.rms.biz-bravia.sony.net
tennisblog.smartsports.sony.net
preview-production-pdp.sony.co.uk
f2.shared.global.fastly.net
socialife.sony.net
developer.pjfield.sony.net
*.taxi-safety.mobility-ai.sony.net
www.sony.net
f2.shared.global.fastly.net
b-trainerblog.smartsports.sony.net
*.cmtpqa.pre.payment.ppf.sony.net
www.sony.net
nh-data.sony.co.jp
techub.sony.net
*.csn.sony.net
dns-vetting1b.map.fastly.net
v-online-info.techub.sony.net
stg.biz-bravia.sony.net
stg.biz-bravia.sony.net
intra.techub.sony.net
www.global-careers-student.sony.net
th76vk7xjq.studio.locatone.sony.net
tv.update.sony.net
f2.shared.global.fastly.net
preview-production-pdp.sony.co.uk
ulms.sony.net
dx.sony.net
*.personalspace.sony.net
*.tr.imagingedge.sony.net
workstyle.sony.net
szf8pabtof.studio.locatone.sony.net
pro-id.sony.net
f2.shared.global.fastly.net
socialife.sony.net
studio.locatone.sony.net
imperva.com
preview-production-pdp.sony.co.uk
lic.dev1.sandbox.dev.ppf.sony.net
*.personalspace.sony.net
preview-production-pdp.sony.co.uk
www.grouplogo-gl.sony.net
www.sony.net
f2.shared.global.fastly.net
*.mobility-ai.sony.net

Certificate

The complete raw certificate details for www.global-careers-student.sony.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276242623569920950781333601507293271909299
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-11 01:54:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-09 01:54:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.global-careers-student.sony.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 811926892910379317164645075752171490347585329202230778469096831823108814665845218505351604880773280557702228327676321211471118647985057119589251760966056401331735473169352561016774446179842077278707942068836432936490062248773526013145110815144727392424612819057362373145175001805997443399351639684922974871898113384439534806974455428835923564826428965359530610056899413440697923213371141350924112960811247229818111616403849893267531518778810153944480083060870204646355196366593825065276800232946104366700929343787163027399090777946491955580649804982414524231779067996240598348861971791069355186101265959115307218143132975588819601557768079559060151994601315665058406259739220863550738187658838796128684351812637483895176254306744302235382481933336473416325063804420573696361714530091788951726118282381797092027992300768760005087219150980220691460256186462952834217782897429126391078713120295342356323257142805342676128413192976697026964210925912374359614418957938792657691424638298076080761587105113864054859677309914734669996691699688404794721779682121593786528175863818137215508490886269302149657266364813752570390245986554476517335630112785781504331600677111594143788574902706031242050178586441377930120146359363269128379998244337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							013292e085ae566b4672cb055a31bde5af94d7e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.global-careers-student.sony.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b4475110000000403004630440220411b2d75f1a6207600eab50a5d43ce2f2ea657753690efc4dd2df741d2090acd022026d8561d3602fdf54663d6e7f5b29d220f53ffaa51fd77c656c4c41ecc29eb7b007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b447510ed000004030047304502201771e911c7d2c12b5eff60a10f4e6e95645cefed60d8bf4987e3e166384a82740221009f49792e3d529684bdc08a5489452c894a257876e69c038c9482cd224c9688dd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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