services.sony.bg

Issued by Amazon

About this certificate

This digital certificate with serial number 0d:b0:09:29:ad:18:84:1f:34:bf:9e:fd:34:b2:1a:d8 was issued on by Amazon.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=services.sony.bg

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:b0:09:29:ad:18:84:1f:34:bf:9e:fd:34:b2:1a:d8
Serial Number (int): 18193994035917676807031700486767123160
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 17:68:4d:37:00:9e:2d:31:32:67:c9:c1:0e:ec:66:60:df:68:e3:a2
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): e4:a1:4b:40:e9:4f:8e:3a:f5:a0:a8:e4:b7:01:e6:6f:3f:89:f1:46
Fingerprint (sha256): 11:d5:d6:da:66:92:3e:45:a4:67:02:a2:c9:f2:2f:67:31:e8:af:b2:58:ec:95:a6:dd:14:93:42:76:bd:66:11

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate services.sony.bg

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for services.sony.bg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

services.sony.bg
*.services.sony.bg
services.sony.ch
*.services.sony.ch
services.sony.co.uk
*.services.sony.co.uk
services.sony.com.mk
*.services.sony.com.mk

Other certificates including the domain name sony.bg

(limited to 100 certificates)
preview-production-pdp.sony.co.uk
beta.sony.com
preview-production-pdp.sony.co.uk
www.sony.pt
preview-production-pdp.sony.co.uk
preview-production-pdp.sony.co.uk
preview-production-pdp.sony.co.uk
test.sony.com
preview-production-pdp.sony.co.uk
test.sony.com
preview-production-pdp.sony.co.uk
production-pdp.sony.co.uk
presscenter.sony.bg
preview-production-pdp.sony.co.uk
preview-production-pdp.sony.co.uk
uat-pdp.sony.co.uk
www.pro.sony.eu
beta.sony.com
preview-production-pdp.sony.co.uk
preview-test.sony.com
services.sony.co.uk
sony01.secure.lithium.com
preview-production-pdp.sony.co.uk
test.sony.com
preview.sony.com
preview-test.sony.com
stgservices.sony.bg
preview-test.sony.com
production-pdp.sony.co.uk
www.pro.sony.eu
services.sony.bg
production-pdp.sony.co.uk
www.pro.sony.eu
www.sony.at
preview-production-pdp.sony.co.uk
www.sony.bg
preview.sony.com
preview.sony.com
www.pro.sony.eu
preview.sony.com
beta.sony.com
production-pdp.sony.co.uk
production-pdp.sony.co.uk
beta.sony.com
test.sony.com
www.sony.co.uk
production-pdp.sony.co.uk
test.sony.com
www.pro.sony.eu
www.pro.sony.eu
www.sony.co.uk
stgservices.sony.bg
preview-test.sony.com
preview-production-pdp.sony.co.uk
services.sony.ie
preview.sony.com
sony01.secure.stage.lithium.com
preview.sony.com
services.sony.bg
preview-production-pdp.sony.co.uk
preview-test.sony.com
preview.sony.com
beta.sony.com
www.sony.co.uk
preview-production-pdp.sony.co.uk
preview.sony.com
www.pro.sony.eu
preview.sony.com
www.pro.sony.eu
stgservices.sony.bg
production-pdp.sony.co.uk
www.sony.co.uk
www.sony.co.uk
test.sony.com
sony01.secure.stage.lithium.com
test.sony.com
preview-test.sony.com
preview-test.sony.com
sony01.secure.stage.lithium.com
preview-test.sony.com
preview-production-pdp.sony.co.uk
beta.sony.com
preview-test.sony.com
preview-test.sony.com
preview-test.sony.com
sony01.secure.stage.lithium.com
uat-pdp.sony.co.uk
preview-production-pdp.sony.co.uk
presscentre.sony.co.uk
test.sony.com
www.sony.co.uk
www.pro.sony.eu
sony01.secure.lithium.com
beta.sony.com
www.pro.sony.eu
production-pdp.sony.co.uk
preview-test.sony.com
preview-production-pdp.sony.co.uk
preview-test.sony.com
sony01.stage.secure.lithium.com

Certificate

The complete raw certificate details for services.sony.bg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/rpupyYvLAkyBKR53I5
zy+p/UvomXY3QvquUSFR1vm54E+eKxXvEaXbgXgiNip4kGzfbZalCkomda89llB9
8/FBGgkiHVGaYAF0fqXpRF85XnxU7L/4aAVV6yDePDlBTLmSdull89aOtB9+DTeO
azXcv9C8bNhsSoX9Vb7tenhF0kqP0n+Sr3sCo7zEB0UpxOLunsftu0VsBcQBidVe
l/kbPoKdTQQ68cydU03oOH2mm7M2lFSGjmlql9Zo1jZBUUcMe2PXjJ2ppyy+7V2t
DCxfHkBFFon4wPNLg8Fz8zWLygHEbbYN7KbmycH0YOo/1KZAvH4KMM1OCSJzJ/n5
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18193994035917676807031700486767123160
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'services.sony.bg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23225339622395700540154519898548288395089937542418300788605747774447026671831695852156749450397913951756809867826178015226248520303023747387261091976929586089381398144180413514988575338379972345784700590618379925375800148205621836428285399297930756484816981132752139187111141901593438004465605018237650091908523310174431840053480512697379918275937245776134026676077826771992622708488199793418050359735262421480178157631335224349782827382879041590228863954132115228845346324659152711488641981798090842903319204963570641789651041477369881594574603239573528164182931076236362281325591212538275773352322136775336518089023
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							17684d37009e2d313267c9c10eec6660df68e3a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.sony.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.services.sony.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.sony.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.services.sony.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.sony.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.services.sony.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.sony.com.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.services.sony.com.mk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016c8da97a020000040300483046022100d5304c5e7b4251757d0f3f5d256aa89a0c12812be94a138d689e478ea4a87902022100ed2463dbba60afecd371c443d334d847d939fdef6c837c8ab6f6b7825f1bd2aa0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016c8da97a4b000004030046304402203764e683059a67e9f89af1572bceac31d362a4cee80bfe36ce1586b93bee1d8c02200420f082f23a7208e2314879d760382b1d3af360be49489ca38b64bc728847ff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b09c110d7a3e3589603a5ee95ce1879f90bd256c576216d86c6b1774641338fe94e66558f19df761e001c8b16793ad2259f741ee6a6fce80d3f6203da965938a054a739e1a4143ae240fe674f747718fa9c76a2a0715d3154122b8736697d52a49f96869c92e12ee702ba150ae0af7a69dab4aded6838f3cd66771ae995f71640da31182d125b290aae88977267be4ba82519ed98848313ff6f7b57ccc9152b4c7577161fdcf3d1ec9d4029fdba06eac7c1740260105ac492b26a8bd80ff3589b988d79b6c60d0572690528f6a33e6d356e60a820eb41abf260eca5356599272ed6d2039fc00be7dfd9abfeea314f4b5d3e44a7573c16cec053fff3251df007c