edge-micros1.sonypictures.com

- Sony Pictures Entertainment -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0a:b9:94:d1:b2:75:2b:0c:0c:d1:c7:c9:4d:4a:c1:f1 was issued on by DigiCert Inc.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sony Pictures Entertainment

Organization: Sony Pictures Entertainment
State / Province: California
Locality: Culver City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:b9:94:d1:b2:75:2b:0c:0c:d1:c7:c9:4d:4a:c1:f1
Serial Number (int): 14255873287215387121923278859282334193
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: bd:ef:40:94:3c:66:ba:87:84:a4:50:39:df:9a:1c:c6:54:98:10:ad
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): a3:38:b6:e3:6e:21:fb:d3:e0:44:e0:c1:da:2d:7d:b3:a9:04:e8:0c
Fingerprint (sha256): 10:d2:af:af:f2:d7:28:7d:16:47:3f:6d:50:1d:ad:e9:78:d1:19:ec:d4:34:a2:2f:7a:4a:1c:b3:5b:95:a4:8a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl

Check the revocation status for certificate edge-micros1.sonypictures.com

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for edge-micros1.sonypictures.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

edge-micros1.sonypictures.com
app.ghostbusters.com
itunes.meninblack.com
resources.abeautifulday.movie
tickets.greed-film.com
www.abeautifulday.movie
www.alexrider.tv
www.allsaintsmovie.com
www.angrybird2-movie.jp
www.artofhoteltransylvania3.com
www.artoftheemojimovie.com
www.babydriver-movie.com
www.badboys-movie.jp
www.black-and-blue.jp
www.bloodshot.jp
www.brokenheartsgallery.movie
www.charlies-angels.jp
www.divoc-12.jp
www.equalizer.movie
www.escaperoomfilm.de
www.explorejumanji.com
www.gaensehaut-film.de
www.ghostbusters.jp
www.ghostbustersfanposter.com
www.greedmovie.co.uk
www.groundhogdayvr.com
www.house-of-cards.jp
www.intothespiderverse-ar.com
www.intothespiderverse.movie
www.jumanji-film.de
www.jumanji.com.br
www.jumanji.com.mx
www.jumanji.jp
www.jumanji2.de
www.jumanji360.com
www.jumanjimovie.co.uk
www.jumanjimovie.com
www.jumanjimovie.net
www.jumanjinextlevelar.com
www.kendrickbrotherscatalogue.com
www.meninblack.jp
www.minitheater.jp
www.minosescaperooms.com
www.miraclesfromheavenresources.com
www.miraclesfromheaventhemovie.com
www.morbius-movie.jp
www.morbius.movie
www.narzissundgoldmundfilm.de
www.onceinhollywood.jp
www.openseason.com
www.showusyourgroundhogday.com
www.storyofmylife.jp
www.filmandfoodmovieseries.com
www.happybirthdayspidey.com
www.misterrogers.jp
www.digital-campaign.jp
newreleasesale.sonypictures.com
misterrogers.jp
www.grudge.jp
holidays.sonypictures.com
stayathome.sonypictures.com
tickets.theunholy.movie
ecto1game.ghostbusters.com
ar.venom.movie
us-ar.venom.movie
www.hoteltmovie.com
tickets.heretoday.movie
www.escaperoom.movie
tickets.12mightyorphansmovie.com
showmethefathermovie.com
tickets.ninedaysfilm.com
www.escaperoomfilm.co.uk
hotelttransformonstrao.sonypictures.com.br
ar.hoteltransylvania.com
www.dontbreathemovie.com
www.spideyfanweek.com
www.bignightinmovies.com
tickets.escaperoom.movie
www.jeudevasion-billets.ca
www.escaperoom-tix.ca
www.donburi-movie.jp
escaperoom2.sonypictures.com.br
venomtempodecarnificina.sonypictures.com.br
homemnastrevas2.sonypictures.com.br
www.dontbreathemovie-intothedark.net
www.dontbreathemovie-intothedark.com
dontbreathe2.sonypictures.co.uk
feedthebeast.venom.movie
tickets.courageousthemovie.com
tickets.showmethefathermovie.com
pedrocoelho2.sonypictures.com.br

Other certificates including the domain name sonypictures.com

(limited to 100 certificates)
conectados.sonypictures.com
*.sonypictures.com
redeem.sonypictures.com
origin-flash.sonypictures.com
edge-micros1.sonypictures.com
secure.sonypictures.com
origin-flash.sonypictures.com
edge-micros2.sonypictures.com
brand.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
extaz-qa.spe.sony.com
edge-micros2.sonypictures.com
edge-micros2.sonypictures.com
sites.sonypictures.com
sites.sonypictures.com
secure.sonypictures.com
globalassethub.sonypictures.com
www.stage6films.com
api.stg-stage-productionservices.sonypictures.com
pub.email.sonypictures.com
connect.sonypictures.com
sites.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
stage-microsites.sonypictures.com
portals.sonypictures.com
microsites.sonypictures.com
image.20210419.200345.s6.et.yellsatcloud.com
globalassethub.sonypictures.com
portals.sonypictures.com
portals.sonypictures.com
conectados.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
sites.sonypictures.com
edge-portals.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
edge-micros2.sonypictures.com
flash.sonypictures.com
pub.email.sonypictures.com
griffin.sonypictures.com
view.email.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
sites.sonypictures.com
audiolibrary.sonypictures.com
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
akamai-san77.exacttarget.com
stage-microsites.sonypictures.com
www.sonypictures.co.uk
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
viewer.sonypictures.com
secure.sonypictures.com
edge-portals.sonypictures.com
sites2.sonypictures.com
edge-micros2.sonypictures.com
test.rewards.sonypictures.com
www.stage6films.com
test.rewards.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
gam.sonypictures.com
microsites.sonypictures.com
flash.sonypictures.com
view.email.games.sonypictures.com
rewards.sonypictures.com
test.redeem.sonypictures.com
edge-micros1.sonypictures.com
brand.sonypictures.com
gam.sonypictures.com
stage-microsites.sonypictures.com
perc.sonypictures.com
sony-prod.actioniq.mr-in.com
click.email.sonypictures.com
stage-edge-portals.sonypictures.com
stage-microsites.sonypictures.com
tweets.sonypictures.com
flash.sonypictures.com
rewards.sonypictures.com
pages.email.games.sonypictures.com
view.email.sonypictures.com
rewards.sonypictures.com
redeem.sonypictures.com
microsites.sonypictures.com
redeem.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
origin-flash.sonypictures.com

Certificate

The complete raw certificate details for edge-micros1.sonypictures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOlDCCDXygAwIBAgIQCrmU0bJ1KwwM0cfJTUrB8TANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMTA4MTgwMDAwMDBa
Fw0yMjAzMTIyMzU5NTlaMIGGMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZv
cm5pYTEUMBIGA1UEBxMLQ3VsdmVyIENpdHkxJDAiBgNVBAoTG1NvbnkgUGljdHVy
ZXMgRW50ZXJ0YWlubWVudDEmMCQGA1UEAxMdZWRnZS1taWNyb3MxLnNvbnlwaWN0
dXJlcy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE6hyeXBXN
TqLkNaKbzLsWFxFTQTfEU3zRsRaqK5EXaoTJxEUurUiVVUXbrk92BF6BgG9k3vBl
oRSybzNg9DvSLZRG7t0q9X3IBOHqiFt7nPH1x6NVN5+E6bnWYvzwENIbrKNzhzP3
/IfTK2KE7KkIHPpyveXvqUbKtrXRIFlXMj3xNdtSLForil9+Av5Njlu0KRaS0N7J
hTOiJGvPmZxkX8ChNM9guGdiFwavy/aK5fQp+kOie5RKMdkpRzhXP7vCEBJcmHdR
xzk5jOUsXi7ltQBbf8OQLgfkHvSRx/0wgSxEWBOU12aHR16kXI1U1rkL4oKmeVW+
friqf12Qadb7AgMBAAGjggsyMIILLjAfBgNVHSMEGDAWgBS3a6LqqKqEjHnqtNoP
mLLFlXa59DAdBgNVHQ4EFgQUve9AlDxmuoeEpFA535ocxlSYEK0wgglHBgNVHREE
ggk+MIIJOoIdZWRnZS1taWNyb3MxLnNvbnlwaWN0dXJlcy5jb22CFGFwcC5naG9z
dGJ1c3RlcnMuY29tghVpdHVuZXMubWVuaW5ibGFjay5jb22CHXJlc291cmNlcy5h
YmVhdXRpZnVsZGF5Lm1vdmllghZ0aWNrZXRzLmdyZWVkLWZpbG0uY29tghd3d3cu
YWJlYXV0aWZ1bGRheS5tb3ZpZYIQd3d3LmFsZXhyaWRlci50doIWd3d3LmFsbHNh
aW50c21vdmllLmNvbYIXd3d3LmFuZ3J5YmlyZDItbW92aWUuanCCH3d3dy5hcnRv
ZmhvdGVsdHJhbnN5bHZhbmlhMy5jb22CGnd3dy5hcnRvZnRoZWVtb2ppbW92aWUu
Y29tghh3d3cuYmFieWRyaXZlci1tb3ZpZS5jb22CFHd3dy5iYWRib3lzLW1vdmll
LmpwghV3d3cuYmxhY2stYW5kLWJsdWUuanCCEHd3dy5ibG9vZHNob3QuanCCHXd3
dy5icm9rZW5oZWFydHNnYWxsZXJ5Lm1vdmllghZ3d3cuY2hhcmxpZXMtYW5nZWxz
Lmpwgg93d3cuZGl2b2MtMTIuanCCE3d3dy5lcXVhbGl6ZXIubW92aWWCFXd3dy5l
c2NhcGVyb29tZmlsbS5kZYIWd3d3LmV4cGxvcmVqdW1hbmppLmNvbYIWd3d3Lmdh
ZW5zZWhhdXQtZmlsbS5kZYITd3d3Lmdob3N0YnVzdGVycy5qcIIdd3d3Lmdob3N0
YnVzdGVyc2ZhbnBvc3Rlci5jb22CFHd3dy5ncmVlZG1vdmllLmNvLnVrghZ3d3cu
Z3JvdW5kaG9nZGF5dnIuY29tghV3d3cuaG91c2Utb2YtY2FyZHMuanCCHXd3dy5p
bnRvdGhlc3BpZGVydmVyc2UtYXIuY29tghx3d3cuaW50b3RoZXNwaWRlcnZlcnNl
Lm1vdmllghN3d3cuanVtYW5qaS1maWxtLmRlghJ3d3cuanVtYW5qaS5jb20uYnKC
End3dy5qdW1hbmppLmNvbS5teIIOd3d3Lmp1bWFuamkuanCCD3d3dy5qdW1hbmpp
Mi5kZYISd3d3Lmp1bWFuamkzNjAuY29tghZ3d3cuanVtYW5qaW1vdmllLmNvLnVr
ghR3d3cuanVtYW5qaW1vdmllLmNvbYIUd3d3Lmp1bWFuamltb3ZpZS5uZXSCGnd3
dy5qdW1hbmppbmV4dGxldmVsYXIuY29tgiF3d3cua2VuZHJpY2ticm90aGVyc2Nh
dGFsb2d1ZS5jb22CEXd3dy5tZW5pbmJsYWNrLmpwghJ3d3cubWluaXRoZWF0ZXIu
anCCGHd3dy5taW5vc2VzY2FwZXJvb21zLmNvbYIjd3d3Lm1pcmFjbGVzZnJvbWhl
YXZlbnJlc291cmNlcy5jb22CInd3dy5taXJhY2xlc2Zyb21oZWF2ZW50aGVtb3Zp
ZS5jb22CFHd3dy5tb3JiaXVzLW1vdmllLmpwghF3d3cubW9yYml1cy5tb3ZpZYId
d3d3Lm5hcnppc3N1bmRnb2xkbXVuZGZpbG0uZGWCFnd3dy5vbmNlaW5ob2xseXdv
b2QuanCCEnd3dy5vcGVuc2Vhc29uLmNvbYIed3d3LnNob3d1c3lvdXJncm91bmRo
b2dkYXkuY29tghR3d3cuc3RvcnlvZm15bGlmZS5qcIIed3d3LmZpbG1hbmRmb29k
bW92aWVzZXJpZXMuY29tght3d3cuaGFwcHliaXJ0aGRheXNwaWRleS5jb22CE3d3
dy5taXN0ZXJyb2dlcnMuanCCF3d3dy5kaWdpdGFsLWNhbXBhaWduLmpwgh9uZXdy
ZWxlYXNlc2FsZS5zb255cGljdHVyZXMuY29tgg9taXN0ZXJyb2dlcnMuanCCDXd3
dy5ncnVkZ2UuanCCGWhvbGlkYXlzLnNvbnlwaWN0dXJlcy5jb22CG3N0YXlhdGhv
bWUuc29ueXBpY3R1cmVzLmNvbYIXdGlja2V0cy50aGV1bmhvbHkubW92aWWCGmVj
dG8xZ2FtZS5naG9zdGJ1c3RlcnMuY29tgg5hci52ZW5vbS5tb3ZpZYIRdXMtYXIu
dmVub20ubW92aWWCE3d3dy5ob3RlbHRtb3ZpZS5jb22CF3RpY2tldHMuaGVyZXRv
ZGF5Lm1vdmllghR3d3cuZXNjYXBlcm9vbS5tb3ZpZYIgdGlja2V0cy4xMm1pZ2h0
eW9ycGhhbnNtb3ZpZS5jb22CGHNob3dtZXRoZWZhdGhlcm1vdmllLmNvbYIYdGlj
a2V0cy5uaW5lZGF5c2ZpbG0uY29tghh3d3cuZXNjYXBlcm9vbWZpbG0uY28udWuC
KmhvdGVsdHRyYW5zZm9ybW9uc3RyYW8uc29ueXBpY3R1cmVzLmNvbS5icoIYYXIu
aG90ZWx0cmFuc3lsdmFuaWEuY29tghh3d3cuZG9udGJyZWF0aGVtb3ZpZS5jb22C
FXd3dy5zcGlkZXlmYW53ZWVrLmNvbYIYd3d3LmJpZ25pZ2h0aW5tb3ZpZXMuY29t
ghh0aWNrZXRzLmVzY2FwZXJvb20ubW92aWWCGnd3dy5qZXVkZXZhc2lvbi1iaWxs
ZXRzLmNhghV3d3cuZXNjYXBlcm9vbS10aXguY2GCFHd3dy5kb25idXJpLW1vdmll
Lmpwgh9lc2NhcGVyb29tMi5zb255cGljdHVyZXMuY29tLmJygit2ZW5vbXRlbXBv
ZGVjYXJuaWZpY2luYS5zb255cGljdHVyZXMuY29tLmJygiNob21lbW5hc3RyZXZh
czIuc29ueXBpY3R1cmVzLmNvbS5icoIkd3d3LmRvbnRicmVhdGhlbW92aWUtaW50
b3RoZWRhcmsubmV0giR3d3cuZG9udGJyZWF0aGVtb3ZpZS1pbnRvdGhlZGFyay5j
b22CH2RvbnRicmVhdGhlMi5zb255cGljdHVyZXMuY28udWuCGGZlZWR0aGViZWFz
dC52ZW5vbS5tb3ZpZYIedGlja2V0cy5jb3VyYWdlb3VzdGhlbW92aWUuY29tgiB0
aWNrZXRzLnNob3dtZXRoZWZhdGhlcm1vdmllLmNvbYIgcGVkcm9jb2VsaG8yLnNv
bnlwaWN0dXJlcy5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjCBjwYDVR0fBIGHMIGEMECgPqA8hjpodHRwOi8vY3Js
My5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTIuY3Js
MECgPqA8hjpodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FT
SEEyNTYyMDIwQ0ExLTIuY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYB
BQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB9BggrBgEFBQcBAQRx
MG8wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBHBggrBgEF
BQcwAoY7aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNB
U0hBMjU2MjAyMENBMS5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/
BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUn4ev/1ASlx/FHASJT4ckHsbQ7HlTIW
6v8UbgSTduen7LYQ+QkiHng8Ro51xC4E+SBLK7gj2/KzzZtkO1kKEXdV0kY8oFI3
08ZEAguikUKboDPSfD9AyCMQ0PW4BKDLCyZH5Sd2Sptn2X7zyXV/CFnCpTBN8MBl
L38RCYzQ3ILT4fMmc6lSGeVv2Hr4ks0Uvge+9gKne6+1aQ/7u2+fAbxHt7S5TR3p
Ho9LG1IMe9HfSUEfs/VzRdkLzZTBJ/+opnzhB7AjtxikcThT/40edJCdW/G0zsBu
moy7+or+gANV/mc5mlnbup6gcl7CTHsJPe1O+gB50Fe0qfPuwSzCPA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOocnlwVzU6i5DWim8y7
FhcRU0E3xFN80bEWqiuRF2qEycRFLq1IlVVF265PdgRegYBvZN7wZaEUsm8zYPQ7
0i2URu7dKvV9yATh6ohbe5zx9cejVTefhOm51mL88BDSG6yjc4cz9/yH0ytihOyp
CBz6cr3l76lGyra10SBZVzI98TXbUixaK4pffgL+TY5btCkWktDeyYUzoiRrz5mc
ZF/AoTTPYLhnYhcGr8v2iuX0KfpDonuUSjHZKUc4Vz+7whASXJh3Ucc5OYzlLF4u
5bUAW3/DkC4H5B70kcf9MIEsRFgTlNdmh0depFyNVNa5C+KCpnlVvn64qn9dkGnW
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14255873287215387121923278859282334193
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Culver City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sony Pictures Entertainment'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'edge-micros1.sonypictures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24858152600363300138484672293942497986470569534510143760262437078208709726689067255980763901232176602284864023927632527569782295333365863322831233098253389430428751496298344250997959602224260162546670546641325771030953548531432800465836769051398055376752835132074399722123212027911694594466908714203371996240909812793796189532446637071245586063850227901006994028971737595630223364991958764157196231230324458192715295942460337530556225516296722383239248456547806435637487897922352678665966642868085141254382733295017375605928915569997601086667039113558898450395403496098096480628321774511015618040805432996936416876283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bdef40943c66ba8784a45039df9a1cc6549810ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge-micros1.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.ghostbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.meninblack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.abeautifulday.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.greed-film.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abeautifulday.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alexrider.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allsaintsmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angrybird2-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artofhoteltransylvania3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artoftheemojimovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.babydriver-movie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badboys-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.black-and-blue.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bloodshot.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brokenheartsgallery.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charlies-angels.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.divoc-12.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equalizer.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.escaperoomfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorejumanji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaensehaut-film.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbusters.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbustersfanposter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greedmovie.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.groundhogdayvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.house-of-cards.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intothespiderverse-ar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intothespiderverse.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jumanji-film.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jumanji.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jumanji.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jumanji.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jumanji2.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jumanji360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jumanjimovie.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jumanjimovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jumanjimovie.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jumanjinextlevelar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kendrickbrotherscatalogue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meninblack.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minitheater.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minosescaperooms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miraclesfromheavenresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miraclesfromheaventhemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morbius-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morbius.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.narzissundgoldmundfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onceinhollywood.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.openseason.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.showusyourgroundhogday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.storyofmylife.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.filmandfoodmovieseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.happybirthdayspidey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.misterrogers.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digital-campaign.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newreleasesale.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misterrogers.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grudge.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holidays.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stayathome.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.theunholy.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecto1game.ghostbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-ar.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoteltmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.heretoday.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.escaperoom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.12mightyorphansmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showmethefathermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.ninedaysfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.escaperoomfilm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelttransformonstrao.sonypictures.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.hoteltransylvania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dontbreathemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spideyfanweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bignightinmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.escaperoom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jeudevasion-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.escaperoom-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donburi-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escaperoom2.sonypictures.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venomtempodecarnificina.sonypictures.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homemnastrevas2.sonypictures.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dontbreathemovie-intothedark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dontbreathemovie-intothedark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dontbreathe2.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedthebeast.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.courageousthemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.showmethefathermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedrocoelho2.sonypictures.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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