edge-micros2.sonypictures.com

- Sony Pictures Entertainment, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 09:a0:71:8f:ed:a5:e4:f3:e9:b9:f8:96:48:08:a4:10 was issued on by DigiCert Inc.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Sony Pictures Entertainment, Inc.

Organization: Sony Pictures Entertainment, Inc.
State / Province: California
Locality: Culver City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:a0:71:8f:ed:a5:e4:f3:e9:b9:f8:96:48:08:a4:10
Serial Number (int): 12796122774890768742111189769373918224
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ba:c9:fc:77:42:ac:62:9f:48:9c:61:c3:06:30:ad:24:c9:6a:69:70
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): d4:cd:72:b3:2e:e8:4d:bb:66:23:8d:41:b7:c5:c6:c3:e4:b1:99:05
Fingerprint (sha256): 10:90:35:6f:91:cb:23:6a:4d:29:d8:75:ff:a4:69:8b:db:58:fc:02:a6:ca:65:9d:35:3f:09:58:73:8a:c2:db

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate edge-micros2.sonypictures.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for edge-micros2.sonypictures.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

edge-micros2.sonypictures.com
ca-ar.venom.movie
de-ar.venom.movie
ghostbusters.com
jp-ar.venom.movie
watch.sonypictures.ca
www.biomovie.jp
www.ghostbusters.com
www.ourladiesmovie.co.uk
www.paulmovie.com
www.peterrabbit-movie.jp
www.peterrabbitmovie.ca
www.spiderman-movie.jp
www.spidermanfarfromhome.movie
www.spidermannewuniverse.de
www.spidermannowayhome.movie
www.spiderversemovie.ca
www.starshiptroopers.com
www.surfsup.com
www.thestarmovie.com
www.uncharted-movie.jp
www.unchartedmovie.com
www.venom-movie.jp
www.worldofjumanji.com
www.zombie-land.jp
www.truffle-movie.jp
tickets.parallelmothers.com
www.helldogs.jp
www.catchuponspidey.com
www.ajournalforjordan-tix.ca
www.spider-verse.jp
app.spidermannowayhome.movie
testing.spehosting.com
tickets.itaintovermovie.com
www.insidious.movie
www.spidermanacrossthespiderversemovie.com.au
www.johnfarnhamfindingthevoicemovie.com.au
www.nohardfeelingsmovie.com.au
www.equalizer.movie
www.vatican-exorcist.jp
www.spider-verse-tix.ca
www.gt-movie.jp
www.spider-verse-billets.ca
beauisafraid.sonypictures.co.uk
www.granturismo.movie
tickets.acrossthespiderverse.movie
www.the-machine-tix.ca
www.haroldandthepurplecrayon.movie
www.haroldspurplecrayon.com
amormandoumensagem.sonypictures.com.br
www.kravenmovie.com
sisu.sonypictures.co.uk
nohardfeelings.sonypictures.co.uk
www.sans-rancune-billets.ca
www.no-hard-feelings-tix.ca
www.kraven-movie.jp
www.insidious-the-red-door-tix.ca
tickets.miracleclubmovie.com
www.insidieux-la-porte-rouge-billets.ca
www.theequalizer3movie.com.au
www.granturismomovie.com.au
www.kraventhehuntermovie.com.au
www.dumbmoney.movie
tickets.shortcomingsmovie.com
insidious.sonypictures.co.uk
intothefurther.insidious.movie
www.gran-turismo-tix.ca
www.napoleon.movie
www.gran-turismo-billets.ca
www.thanksgiving.movie
www.napoleon-movie.jp
licensetorace.granturismo.movie
granturismo.sonypictures.co.uk
www.columbiapictures100.com
www.diymovienightathome.com
www.journeytobethlehemmovie.com
www.the-equalizer-tix.ca
www.justicier-billets.ca
tickets.carlosfilm.com
buy.equalizer.movie
www.equalizer.jp
www.journeytobethlehemmovie.com.au
www.intlgeoloctest.com
www.n-importe-qui-sauf-toi-billets.ca
www.anyone-but-you-tix.ca
www.anyonebutyoumovie.com.au
anyonebutyou.sonypictures.co.uk
www.anyonebutyoumovie.co.nz
www.garfield-movie.jp

Other certificates including the domain name sonypictures.com

(limited to 100 certificates)
conectados.sonypictures.com
*.sonypictures.com
redeem.sonypictures.com
origin-flash.sonypictures.com
edge-micros1.sonypictures.com
secure.sonypictures.com
origin-flash.sonypictures.com
edge-micros2.sonypictures.com
brand.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
extaz-qa.spe.sony.com
edge-micros2.sonypictures.com
edge-micros2.sonypictures.com
sites.sonypictures.com
sites.sonypictures.com
secure.sonypictures.com
globalassethub.sonypictures.com
www.stage6films.com
api.stg-stage-productionservices.sonypictures.com
pub.email.sonypictures.com
connect.sonypictures.com
sites.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
stage-microsites.sonypictures.com
portals.sonypictures.com
microsites.sonypictures.com
image.20210419.200345.s6.et.yellsatcloud.com
globalassethub.sonypictures.com
portals.sonypictures.com
portals.sonypictures.com
conectados.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
sites.sonypictures.com
edge-portals.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
edge-micros2.sonypictures.com
flash.sonypictures.com
pub.email.sonypictures.com
griffin.sonypictures.com
view.email.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
sites.sonypictures.com
audiolibrary.sonypictures.com
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
akamai-san77.exacttarget.com
stage-microsites.sonypictures.com
www.sonypictures.co.uk
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
viewer.sonypictures.com
secure.sonypictures.com
edge-portals.sonypictures.com
sites2.sonypictures.com
edge-micros2.sonypictures.com
test.rewards.sonypictures.com
www.stage6films.com
test.rewards.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
gam.sonypictures.com
microsites.sonypictures.com
flash.sonypictures.com
view.email.games.sonypictures.com
rewards.sonypictures.com
test.redeem.sonypictures.com
edge-micros1.sonypictures.com
brand.sonypictures.com
gam.sonypictures.com
stage-microsites.sonypictures.com
perc.sonypictures.com
sony-prod.actioniq.mr-in.com
click.email.sonypictures.com
stage-edge-portals.sonypictures.com
stage-microsites.sonypictures.com
tweets.sonypictures.com
flash.sonypictures.com
rewards.sonypictures.com
pages.email.games.sonypictures.com
view.email.sonypictures.com
rewards.sonypictures.com
redeem.sonypictures.com
microsites.sonypictures.com
redeem.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
origin-flash.sonypictures.com

Certificate

The complete raw certificate details for edge-micros2.sonypictures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMKfakgD3ZtT9M3DZaV/
SBD6z1nOmXtHaShZnGYAJ5PqXXODv8ushEnFWpg48kbI8v1qjh/tO01/YIQTSB2F
QhZ6NxyoPVW6f4e7leF1m3TLnYKinxCiE0X4pLNKFgr3C65lqAVoNrl1RvwFJEkN
DKejwqTnOE3YqsfO+hIoxWpIdOWwjkm/pfZkr8Y8hMPPPRTq9QP4MAk5AV0jIQR6
S6/3zapAELzg3YeOSlQR8BuxYp99+KW2qgRclnpkvxxy+GbcK01cn8OM5fByhj32
emyGs1yvtCPhXhdAJWkByYj2O6TisR/ApPxW6YqCjSUeDdpXd2hB2Ssl5Vod3HWX
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12796122774890768742111189769373918224
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Culver City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sony Pictures Entertainment, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'edge-micros2.sonypictures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22313913711953422002912983167651747225459910645625568516953234423427005010497305146199552130669100158405264801678816914865789195665053127823617734487072796763220757820183538687188124071678522238733958079817611488119297394964516656149120719406731252744694485922293022064011700892332363078682264577738316869283173814385377273413969497657405923266464415157804081686810789769595432916453306558512556139705716544967945486407150021865990457047677655763896181681823047484892414534041142025250327991009691641365340806101350091238814005630499033843969080036012148776164233354479376894987424729911459490065288799800864764434383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bac9fc7742ac629f489c61c30630ad24c96a6970
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2400 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge-micros2.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca-ar.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de-ar.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghostbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp-ar.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.sonypictures.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biomovie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladiesmovie.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paulmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterrabbit-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterrabbitmovie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiderman-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermanfarfromhome.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermannewuniverse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermannowayhome.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiderversemovie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starshiptroopers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surfsup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thestarmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uncharted-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unchartedmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venom-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldofjumanji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zombie-land.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.truffle-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.parallelmothers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helldogs.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catchuponspidey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ajournalforjordan-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spider-verse.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.spidermannowayhome.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.spehosting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.itaintovermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insidious.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermanacrossthespiderversemovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnfarnhamfindingthevoicemovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nohardfeelingsmovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equalizer.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vatican-exorcist.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spider-verse-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gt-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spider-verse-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beauisafraid.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.granturismo.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.acrossthespiderverse.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.the-machine-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haroldandthepurplecrayon.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haroldspurplecrayon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amormandoumensagem.sonypictures.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kravenmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sisu.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nohardfeelings.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sans-rancune-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.no-hard-feelings-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kraven-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insidious-the-red-door-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.miracleclubmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insidieux-la-porte-rouge-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theequalizer3movie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.granturismomovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kraventhehuntermovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dumbmoney.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.shortcomingsmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insidious.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intothefurther.insidious.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gran-turismo-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napoleon.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gran-turismo-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thanksgiving.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napoleon-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'licensetorace.granturismo.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granturismo.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiapictures100.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diymovienightathome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journeytobethlehemmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.the-equalizer-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.justicier-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.carlosfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.equalizer.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equalizer.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journeytobethlehemmovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intlgeoloctest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.n-importe-qui-sauf-toi-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anyone-but-you-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anyonebutyoumovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anyonebutyou.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anyonebutyoumovie.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garfield-movie.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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