pa.sso.sony.com.sg

- Sony Electronics (Singapore) Pte Ltd -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:22:47:84 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Sony Electronics (Singapore) Pte Ltd

Organization: Sony Electronics (Singapore) Pte Ltd
Locality: Singapore
Country: SG

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:22:47:84
Serial Number (int): 1277314948
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 39:21:19:de:3c:84:21:57:49:54:fc:77:31:2b:c9:03:9e:22:fb:84
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): 98:e3:db:85:33:41:a9:34:c5:f8:0d:48:2a:7b:27:bf:f1:b5:09:39
Fingerprint (sha256): 13:8d:7a:13:76:9a:7d:41:a0:a2:e8:88:3b:07:e2:ff:9e:75:05:50:a3:23:f4:82:b8:af:48:15:0d:6c:93:fa

Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate pa.sso.sony.com.sg

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pa.sso.sony.com.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pa.sso.sony.com.sg

Other certificates including the domain name sony.com.sg

(limited to 100 certificates)
incapsula.com
pa.rcam.sony.com.sg
preview-production-pdp.sony.co.uk
beta.sony.com
preview-production-pdp.sony.co.uk
beta.sony.com
preview.sony.com
stg.sso.sony.com.sg
www.sedhkapex.sony.com.sg
cloud.engage.sony.com.sg
preview-production-pdp.sony.co.uk
www.sony.com.sg
www.sedsapex.sony.com.sg
preview-production-pdp.sony.co.uk
preview-production-pdp.sony.co.uk
test.sony.com
www.cs.sogul.sony.com.sg
incapsula.com
incapsula.com
preview-production-pdp.sony.co.uk
test.sony.com
incapsula.com
preview-test.sony.com
sony-asia.com
preview-production-pdp.sony.co.uk
incapsula.com
qa.ace.sony.com.sg
preview-production-pdp.sony.co.uk
preview-production-pdp.sony.co.uk
uat-pdp.sony.co.uk
beta.sony.com
preview-test.sony.com
sony-asia.com
preview-production-pdp.sony.co.uk
test.sony.com
preview.sony.com
preview-test.sony.com
ace.sony.com.sg
preview-test.sony.com
imperva.com
stg.store.sony.com.sg
mobilegw.sony.com.sg
production-pdp.sony.co.uk
support.sony.com.sg
incapsula.com
sony-asia.com
preview-production-pdp.sony.co.uk
pa.sso.sony.com.sg
pa.rcam.sony.com.sg
incapsula.com
preview.sony.com
apsegservice.sony.com.sg
preview.sony.com
incapsula.com
preview.sony.com
beta.sony.com
www.sedsapex.sony.com.sg
production-pdp.sony.co.uk
www.sedhkapex.sony.com.sg
production-pdp.sony.co.uk
incapsula.com
beta.sony.com
test.sony.com
www.sony.co.uk
production-pdp.sony.co.uk
myapps.aws.sisc.sony.com.sg
test.sony.com
geddpg01.sony.com.sg
incapsula.com
incapsula.com
www.sony.co.uk
ace.sony.com.sg
smetrics.sony.com.sg
www.cs.sogul.sony.com.sg
incapsula.com
incapsula.com
preview-test.sony.com
preview-production-pdp.sony.co.uk
preview.sony.com
incapsula.com
www.sony.com.sg
incapsula.com
preview.sony.com
www.sony.com.sg
incapsula.com
preview-test.sony.com
pa.sso.sony.com.sg
incapsula.com
incapsula.com
sony-asia.com
preview.sony.com
beta.sony.com
www.sony.co.uk
preview-production-pdp.sony.co.uk
inthubns.sony.com.sg
incapsula.com
incapsula.com
www.edmkapex.sony.com.sg
preview.sony.com
incapsula.com

Certificate

The complete raw certificate details for pa.sso.sony.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsJIRe/G00Z681qiFam0
jszaZ1cDKr3XtYg9VWkbxj3YCSPlUU+RHJzxtvYH1pjhKQpfkkEZPW+EzmNoltGb
lnCjwRKOD8Bb7MZ8o97+gSqzHzROtolXUoybxoHJY0O7fQLYqbnFWrbFXYylzQYX
pGKZDkDoK28AG354tHr1dxHOgcYCednq1OMp+6dZanQj/TaXGaZYV6ClaRQqIGzf
Q8BtO1dqWC9BmGtUjQwZkqnAqrpukmbfo2rNZ5klLOpid7rk770Zo9JcfHM4RPK7
KdHAJUlEpZAqAYVBeCDHTHdzmef30fLwnZlTJ8i7hCp3/YGiqV4fCsjbiOWrLYvX
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277314948
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-04 03:56:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-01 17:37:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sony Electronics (Singapore) Pte Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pa.sso.sony.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26100895004264611562880533677471499965090126969733763023154134590490379288273825179554582791573969110493958342283867777750147476604555805755590773054013370016352670661620204888671291269424131025156650590361013472472387281839378731482174062938639950731956860277851787276128919710866324720641311166473055211989240072463350732168871630330370252565161042874872709988281128713662505196514899406344274850287349506391128845550648767619713050077092873197962358203036286299999415767264479216627130186334260733791270150575351628389839956423039865005824647406186328224231124973362450940878526414646263285822550102736238912722709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pa.sso.sony.com.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							392119de3c8421574954fc77312bc9039e22fb84
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0008204d260f82bb1817a75e80154750e0a268cb9447a2ddc360d935da779f74101d51b87428a3bd40fb55c9a9d4477c512b5d1eeead5477cc9d659a4f5138650c9d8571a384349e9c5980d5c61da2be4bb91f3f1dc869557d8c761703abce6f2881f556c8666f3144ea74f624114727d58df4f140ed9fb9b83c6a8edcac1fe0dac8fcdf470e51cc976eff2ad897a25885cf5eca5d877fa5d7fc7539b7d0dd028d62b35e161cb1bd5e16b860b53fdba24709f0e46177880ad722045155afbeda691ac1264069c4539d4bc177abd35201b12ba60fec699b23f84040a9bcf753452fa16e509245d5610a2f690188a16609d406d7929910fa623f1c635c29c40d6e2f