edge-micros1.sonypictures.com

- Sony Pictures Entertainment, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 01:73:68:5e:ac:50:3f:3a:af:ab:69:db:88:76:16:fb was issued on by DigiCert Inc.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sony Pictures Entertainment, Inc.

Organization: Sony Pictures Entertainment, Inc.
State / Province: California
Locality: Culver City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:73:68:5e:ac:50:3f:3a:af:ab:69:db:88:76:16:fb
Serial Number (int): 1928459005890911511255065232110130939
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 55:81:ed:39:19:92:f3:47:ad:8b:e7:9c:06:f8:2f:1d:27:53:a5:83
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 3e:5b:fa:c8:16:37:52:21:21:bc:b3:1b:ae:0f:03:0a:64:f1:79:69
Fingerprint (sha256): 14:e0:39:dc:5a:c7:a0:97:33:ff:10:01:46:d4:7a:cd:b8:d9:40:bf:31:7a:42:83:57:93:fd:ce:55:00:10:72

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate edge-micros1.sonypictures.com

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for edge-micros1.sonypictures.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

edge-micros1.sonypictures.com
www.wherethecrawdadssingmovie.com.au
www.where-the-crawdads-sing-tix.ca
www.va-movie.jp
www.train-a-grande-vitesse-billets.ca
www.thewomanking.movie
www.morbius-movie.jp
www.meninblack.jp
www.lylelylecrocodile.movie
www.la-ou-chantent-les-ecrevisses-billets.ca
www.kendrickbrotherscatalogue.com
www.jumanji.jp
www.iwannadancewithsomebody.movie
www.intothespiderverse.movie
www.iammakimoto.jp
www.groundhogdayvr.com
www.gokushufudo-movie.jp
www.ghostbustersfanposter.com
www.ghostbusters.jp
www.gaensehaut-film.de
www.filmandfoodmovieseries.com
www.fatherstumovie.com
www.donburi-movie.jp
www.digital-campaign.jp
www.devotion.movie
www.charlies-angels.jp
www.bullettrainmovie.com.au
www.bullettrain-movie.jp
www.bullet-train-tix.ca
www.bloodshot.jp
www.badboys-movie.jp
trenbala.sonypictures.com.mx
trembalafilme.sonypictures.com.br
tickets.lylelylecrocodile.movie
tickets.hallelujahfilm.com
studio666.sonypictures.co.uk
stayathome.sonypictures.com
morbius.sonypictures.co.uk
itunes.meninblack.com
fatherstu.sonypictures.co.uk
crawdads.sonypictures.co.uk
bullettrain.sonypictures.co.uk
ar.hoteltransylvania.com
app.ghostbusters.com
www.spideymovies.com
bodiesbodiesbodies.sonypictures.co.uk
www.invitation-billets.ca
www.invitation-tix.ca
umlugarbemlongedaqui.sonypictures.com.br
www.the-woman-king-tix.ca
www.la-femme-roi-billets.ca
tickets.thereturnoftanyatucker.com
www.zarigani-movie.jp
amulherei.sonypictures.com.br
lylelylecrocodile.sonypictures.co.uk
lilolilocrocodilo.sonypictures.com.br
mortemortemorte.sonypictures.com.br
www.thehoagiebrothers.com
www.5000blanketsmovie.com
www.sing-for-me-lyle.jp
matilda.sonypictures.co.uk
tickets.salvatoreshoemakerofdreams.com
www.iwannadancewithsomebodymovie.com.au
www.amancalledotto.movie
www.lylelylecrocodilemovie.com.au
www.whitney-movie.jp
tickets.theson-film.com
www.chicobonbonseries.com
www.hildatheseries.com
www.theoctonauts.com
www.devotion-billets.ca
www.godzilladay.com
www.devotion-tix.ca
www.i-wanna-dance-tix.ca
www.i-wanna-dance-billets.ca
iwannadance.sonypictures.co.uk
www.missing.movie
tickets.living-movie.com
www.hollywoodsleadingmen.com
amancalledotto.sonypictures.co.uk
tickets.turneverypagefilm.com
matildasingalong.sonypictures.co.uk
www.la-vie-selon-otto-billets.ca
www.a-man-called-otto-tix.ca
www.65.movie
www.acrossthespiderverse.movie
tickets.onefinemorningmovie.com
www.acrossthespiderversemovie.com
tickets.returntoseoul.com
whitneyhoustonfilme.sonypictures.com.br
www.otto-movie.jp

Other certificates including the domain name sonypictures.com

(limited to 100 certificates)
conectados.sonypictures.com
*.sonypictures.com
redeem.sonypictures.com
origin-flash.sonypictures.com
edge-micros1.sonypictures.com
secure.sonypictures.com
origin-flash.sonypictures.com
edge-micros2.sonypictures.com
brand.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
extaz-qa.spe.sony.com
edge-micros2.sonypictures.com
edge-micros2.sonypictures.com
sites.sonypictures.com
sites.sonypictures.com
secure.sonypictures.com
globalassethub.sonypictures.com
www.stage6films.com
api.stg-stage-productionservices.sonypictures.com
pub.email.sonypictures.com
connect.sonypictures.com
sites.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
stage-microsites.sonypictures.com
portals.sonypictures.com
microsites.sonypictures.com
image.20210419.200345.s6.et.yellsatcloud.com
globalassethub.sonypictures.com
portals.sonypictures.com
portals.sonypictures.com
conectados.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
sites.sonypictures.com
edge-portals.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
edge-micros2.sonypictures.com
flash.sonypictures.com
pub.email.sonypictures.com
griffin.sonypictures.com
view.email.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
sites.sonypictures.com
audiolibrary.sonypictures.com
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
akamai-san77.exacttarget.com
stage-microsites.sonypictures.com
www.sonypictures.co.uk
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
viewer.sonypictures.com
secure.sonypictures.com
edge-portals.sonypictures.com
sites2.sonypictures.com
edge-micros2.sonypictures.com
test.rewards.sonypictures.com
www.stage6films.com
test.rewards.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
gam.sonypictures.com
microsites.sonypictures.com
flash.sonypictures.com
view.email.games.sonypictures.com
rewards.sonypictures.com
test.redeem.sonypictures.com
edge-micros1.sonypictures.com
brand.sonypictures.com
gam.sonypictures.com
stage-microsites.sonypictures.com
perc.sonypictures.com
sony-prod.actioniq.mr-in.com
click.email.sonypictures.com
stage-edge-portals.sonypictures.com
stage-microsites.sonypictures.com
tweets.sonypictures.com
flash.sonypictures.com
rewards.sonypictures.com
pages.email.games.sonypictures.com
view.email.sonypictures.com
rewards.sonypictures.com
redeem.sonypictures.com
microsites.sonypictures.com
redeem.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
origin-flash.sonypictures.com

Certificate

The complete raw certificate details for edge-micros1.sonypictures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmVy/8KjbYor1nTMO0Sy
07Pmml2C9V3b3C/Gt+2sQ7zz33OjKCWT7f2k2W7aWCjHYrD2vLbOjmrTYLq7OZuz
iF/0Ily5OtYWyyjNtanfnfNIs/yJHfibQjYX4j9G4ZxCB9Z6e43XSI0WS/61vj8C
N46wyePy9BOeOWGaYi8g0yVub+BsmyRwi/MriygePMx6nwmg3Rmrom5f3SncRf3k
Yl/vP1ie5RrBjS9TmMK+rVrnfwpvDIPg1C2rByIMsPKZcW3eKdFDnXmwJRfQBohC
P1c9luozorFP6DNVn9WFM1D8fjoKikWaFmV4CydxME2DYKymMH2YeH0qynr/b287
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1928459005890911511255065232110130939
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Culver City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sony Pictures Entertainment, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'edge-micros1.sonypictures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22520444756432740430699450164489976183445925737551967468723135365915551837520259120754993175562136964555647046543364612100952039032024583370985272166688244175762519386107521445445643453239119536065150754279961659248351180249228671421072797141685327380935112184161552571646819156357449178583132724171314167244301943249362676841648071531053097701180683462249001943425591863157759605675753375042021671216941849615255746795838695898681358819281675887192079090301677502046093215040919470933333867279247150739823706694422827558033319973778495124415025350973832219885190182445912288140628102402652278753454574295953653578619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5581ed391992f347ad8be79c06f82f1d2753a583
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2589 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge-micros1.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wherethecrawdadssingmovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.where-the-crawdads-sing-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.va-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.train-a-grande-vitesse-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thewomanking.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morbius-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meninblack.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lylelylecrocodile.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.la-ou-chantent-les-ecrevisses-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kendrickbrotherscatalogue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jumanji.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iwannadancewithsomebody.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intothespiderverse.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iammakimoto.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.groundhogdayvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gokushufudo-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbustersfanposter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbusters.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaensehaut-film.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.filmandfoodmovieseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatherstumovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donburi-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digital-campaign.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devotion.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charlies-angels.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bullettrainmovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bullettrain-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bullet-train-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bloodshot.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badboys-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trenbala.sonypictures.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trembalafilme.sonypictures.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.lylelylecrocodile.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.hallelujahfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio666.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stayathome.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morbius.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.meninblack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatherstu.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crawdads.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullettrain.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.hoteltransylvania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.ghostbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spideymovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodiesbodiesbodies.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invitation-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invitation-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umlugarbemlongedaqui.sonypictures.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.the-woman-king-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.la-femme-roi-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thereturnoftanyatucker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zarigani-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amulherei.sonypictures.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lylelylecrocodile.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lilolilocrocodilo.sonypictures.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortemortemorte.sonypictures.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thehoagiebrothers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.5000blanketsmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sing-for-me-lyle.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matilda.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.salvatoreshoemakerofdreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iwannadancewithsomebodymovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amancalledotto.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lylelylecrocodilemovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whitney-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.theson-film.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chicobonbonseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hildatheseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theoctonauts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devotion-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.godzilladay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devotion-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.i-wanna-dance-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.i-wanna-dance-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwannadance.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missing.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.living-movie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hollywoodsleadingmen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amancalledotto.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.turneverypagefilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matildasingalong.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.la-vie-selon-otto-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.a-man-called-otto-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.65.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acrossthespiderverse.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.onefinemorningmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acrossthespiderversemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.returntoseoul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitneyhoustonfilme.sonypictures.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otto-movie.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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