test.sony.com

Issued by R3

About this certificate

This digital certificate with serial number 03:f9:6b:78:95:64:5b:5a:a9:d3:e0:93:c6:e0:b2:38:31:2b was issued on by Let's Encrypt.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=test.sony.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f9:6b:78:95:64:5b:5a:a9:d3:e0:93:c6:e0:b2:38:31:2b
Serial Number (int): 346210020659796547456699322519569483444523
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a4:a2:2a:07:6e:ae:15:92:c9:ff:4d:7f:3f:4b:f3:3b:c2:60:56:03
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 11:da:ba:d4:94:08:b2:17:44:86:0c:99:3e:b6:37:60:2a:3e:d8:47
Fingerprint (sha256): 0d:25:a5:09:8c:b6:cd:37:35:90:7b:9b:18:f5:c1:9a:12:4f:8a:6b:c6:2c:99:2b:6e:fe:af:c4:8f:2b:cf:45

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate test.sony.com

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test.sony.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stage-dam.sony.net
test.kz.sony.ru
test.sony-africa.com
test.sony-asia.com
test.sony-latin.com
test.sony-mea.com
test.sony.at
test.sony.ba
test.sony.be
test.sony.bg
test.sony.ca
test.sony.ch
test.sony.cl
test.sony.co.cr
test.sony.co.id
test.sony.co.il
test.sony.co.in
test.sony.co.kr
test.sony.co.nz
test.sony.co.th
test.sony.co.uk
test.sony.com
test.sony.com.ar
test.sony.com.au
test.sony.com.bo
test.sony.com.br
test.sony.com.co
test.sony.com.do
test.sony.com.ec
test.sony.com.gt
test.sony.com.hk
test.sony.com.hn
test.sony.com.mk
test.sony.com.mx
test.sony.com.my
test.sony.com.ni
test.sony.com.pa
test.sony.com.pe
test.sony.com.ph
test.sony.com.sg
test.sony.com.sv
test.sony.com.tr
test.sony.com.tw
test.sony.com.vn
test.sony.cz
test.sony.de
test.sony.dk
test.sony.ee
test.sony.es
test.sony.eu
test.sony.fi
test.sony.fr
test.sony.gr
test.sony.hr
test.sony.hu
test.sony.ie
test.sony.it
test.sony.kz
test.sony.lt
test.sony.lu
test.sony.nl
test.sony.no
test.sony.pl
test.sony.pt
test.sony.ro
test.sony.rs
test.sony.ru
test.sony.se
test.sony.si
test.sony.sk
test.sony.ua
test.sonylatvija.com

Other certificates including the domain name sony.com

(limited to 100 certificates)
incapsula.com
code-jira-staging.am.sony.com
intedcpam.spe.sony.com
git.gis.sony.com
pod.am.sony.com
preview-production-pdp.sony.co.uk
content.esupport.sony.com
beta.sony.com
usphxadc11v.spe.sony.com
sgsinxapp01.spe.sony.com
tview.spe.sony.com
tbos.spe.sony.com
crpap05.am.sony.com
*.unity.eu.sie.sony.com
git.gis.sony.com
wpfqc-qa.spe.sony.com
pix-vm-lmgmgr.am.sony.com
usdl432.spe.sony.com
adfs.sony.com
s4hanaqa.sie.sony.com
www.sony.at
www.servicesplus.sel.sony.com
cnhkaeshxd01.am.sony.com
gateway-ext.api.spe.sony.com
prodev.sony.com
uklonext-pag01.spe.sony.com
www.dealersalescentral.sony.com
cidealerlocator.electronics.sony.com
mobile.spe.sony.com
prwweb.am.sony.com
preview-production-pdp.sony.co.uk
work.playstation.sony.com
csbd.sdp.sel.sony.com
uspwh0536.spe.sony.com
docs.sony.com
alfresco08-dev.spe.sony.com
www.sony.at
secure.sony.net
nocinfosys.sony.com
Hybrid.sonyusa.com
snap.sel.sony.com
extedc.spe.sony.com
dbiz.sel.sony.com
qtest.sie.sony.com
nexus.mc.spe.sony.com
pam.spe.sony.com
beta.sony.com
locator.sony
rebate.api.sony.com
USQWH0050.spe.sony.com
mfl.slp.csx.sony.com
itoc.sie.sony.com
recycling.sel.sony.com
tst-ext.am.sony.com
api.nsu.vcs.electronics.sony.com
dmgmobile.spe.sony.com
distribute.me.sel.sony.com
incapsula.com
sscookie.www.sony.com
*.retail.me.sony.com
uspxh104da.spe.sony.com
uspwh0038.spe.sony.com
preview.sony.com
usculvordsm02.am.sony.com
uspxh103d2.spe.sony.com
uspxh010p2.spe.sony.com
incapsula.com
extjbsan.spe.sony.com
extaz-qa.spe.sony.com
secure04.lithium.com
cxvdi-sf-dev.spe.sony.com
mcm-ext.mc.spe.sony.com
www.sonyrewards.com
acm.account.sony.com
dev.developer.sony.com
apps.sie.sony.com
centerstage.sie.sony.com
extjbsan.spe.sony.com
mail.me.sony.com
taascognos-qa.spe.sony.com
b2b.sony.com
pages.email.sel.sony.com
www.stage6films.com
square.sony.com
ebm01.cheetahmail.com
connect.sonypictures.com
intjbsan.spe.sony.com
sptaws-alb-dev.spe.sony.com
ucsjcacuc01-ms.ps.am.sony.com
qa-bomgar.spe.sony.com
www.unity.scee.net
fdus-6.freshdesk.com
uspxh104p1.spe.sony.com
s4globalhapp.sie.sony.com
extjbsan2.spe.sony.com
ussdisokta02.am.sony.com
preview-production-pdp.sony.co.uk
relativity-dev.spe.sony.com
www.sony.com.sg
incapsula.com

Certificate

The complete raw certificate details for test.sony.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5leHewFSTGuJ7d8SA8z
eVTutmP7bxLPSur2P4TmsQF1eIxlZABraKKl1/BPOIfH9rch4kLrYhWqHa8N6cwm
GGUALBbx/H62thZeGkdVauys5747TK9gWJgXcff5m1TJIhz+LT5TJ/JTwEGiYnAc
bASSoFzhZn9auhtu0iO6ViFG7pQLpt1+L8KlJ4vpnkqZauIkBXOGXjBv0XAxp0vX
XaUrljZ6kbOM5i2F2CQPRZLxgGtegoJVcp4xwPxIn4ZzmU1EELl/Fkcv93Sat7FY
HJSZSekS2SAWzQ6HukQTGVBV4AIZTVkYumx0XPdGvxn9Zi7r9eef49ysNO5VlT2I
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346210020659796547456699322519569483444523
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-24 03:56:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 03:56:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test.sony.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24692097872382951984019537725831326349777234342238599901232125034010312377775498578624773844325942974945539986405695584194234237612865148924410801544771354944328481371666003224268163114860139610317760976177077466755839798087781825366514741466342920310349629933706097765397121387553617245528002639234787621498058710841778504606085384338735554350339089021776521777491733035867265926931663950713175284777261058713482233692104783207547427467777712132484044285710599174851285181256890809758148051880612353150936597422543436410007222066145431097387649108347330462927900147724104812670581645664075750561802056511361489143919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a4a22a076eae1592c9ff4d7f3f4bf33bc2605603
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1168 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-dam.sony.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.kz.sony.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony-africa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony-latin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony-mea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.hn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.sv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sonylatvija.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bffb02bf20000040300483046022100fef1671d3b7bb84871532aab9b9ef58fcd099b1430c93ad1a17451e6721f8e32022100e28caa41581932bd6582290c52c391e07773d58d9c5c927cb6ae2ca3fbdbec7c00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bffb02c28000004030047304502207bd5c1feeba4c8065cb23cc55bd0fbb275519d2dfb11c47a85519f2449d390d30221008a114a35bf737256b9f94aa805001e9ccd50a2d0b2ca9584aaefbe7b81f2210e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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