edge-micros2.sonypictures.com

- Sony Pictures Entertainment -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 09:7e:b8:de:7b:e1:bd:51:8d:58:9e:86:c2:58:2e:85 was issued on by DigiCert Inc.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sony Pictures Entertainment

Organization: Sony Pictures Entertainment
State / Province: California
Locality: Culver City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:7e:b8:de:7b:e1:bd:51:8d:58:9e:86:c2:58:2e:85
Serial Number (int): 12621030956598339760445390350796205701
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f5:e8:e9:c5:85:e5:c3:a3:52:db:e0:8a:ee:16:1b:01:37:4f:8d:4a
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): c7:f5:5c:8e:10:aa:34:1e:b5:d4:26:eb:6b:7e:13:57:a4:46:cb:67
Fingerprint (sha256): 1a:cf:16:62:6d:43:96:7f:b1:34:f7:bb:9b:79:98:cd:17:a5:36:71:82:74:42:ac:91:75:61:19:18:86:e1:cd

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl

Check the revocation status for certificate edge-micros2.sonypictures.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for edge-micros2.sonypictures.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

edge-micros2.sonypictures.com
ghostbusters.com
meme.abeautifulday.movie
meme.badboysforlife.movie
meme.peterrabbit-movie.com
tickets.charmcitykings.com
tickets.theburntorangeheresymovie.com
tickets.theclimbfilm.com
tickets.thesongofnames.com
tickets.thetraitormovie.com
translate.pallabs.com
watch.sonypictures.ca
www.ghostbusters.com
www.greyhound.movie
www.monsterhunter.movie
www.otonanojijo.jp
www.overcomermovie.ca
www.overcomermovie.com
www.pallabs.com
www.paulmovie.com
www.peterhasefilm.de
www.peterrabbit-movie.com
www.peterrabbit-movie.jp
www.peterrabbitlapelicula.com
www.peterrabbitmovie.ca
www.peterrabbitmovie.co.uk
www.revengegirl-movie.jp
www.risen-movie.com
www.risenmovieresources.com
www.sniper8.jp
www.spider-manintothespider-verse.com
www.spider-verse.jp
www.spiderman-movie.jp
www.spiderman-tickets.co.uk
www.spidermanfarfromhome.de
www.spidermanfarfromhome.movie
www.spidermanfarfromhomemovie.ca
www.spidermanhomecoming.com
www.spidermanhomecoming.net
www.spidermanlapelicula.com
www.spidermannewuniverse.de
www.spiderversemovie.ca
www.starshiptroopers.com
www.surfsup.com
www.theblacklist.jp
www.thedailybugle.net
www.thestarmovie.com
www.thestarmovie.net
www.thestarmoviemusic.com
www.thestarofmylife.com
www.venom-movie.jp
www.venom.movie
www.venomfilm.de
www.venommovie.ca
www.worldofjumanji.com
www.yurushi-chikara.jp
www.zombie-land.jp
tickets.monsterhunter.movie
tickets.frenchexitmovie.com
tickets.thefathermovie.com
tickets.thetrufflehuntersmovie.com
www.demonslayermovie.co.uk
tickets.thehumanfactormovie.com
tickets.icarryyouwithmemovie.com
www.theunholyfilm.co.uk
tickets.peterrabbit-movie.com
www.courageousthemovie.com
www.showmethefathermovie.com
www.monsterhuntermovie.co.uk
courageousthemovie.com
ie-ar.venom.movie
fr-ar.venom.movie
be-ar.venom.movie
de-ar.venom.movie
br-ar.venom.movie
mx-ar.venom.movie
ca-ar.venom.movie
uk-ar.venom.movie
jp-ar.venom.movie
www.retodevalienteslapelicula.com
www.nerespirepas-billets.ca
www.dontbreathe-tix.ca
www.muestramealpadre.com
www.venom-billets.ca
www.venom-tix.ca
tickets.thelostleonardomovie.com
br.dontbreathemovie-intothedark.net
uk.dontbreathemovie-intothedark.net
www.spidermannowayhome.jp
www.spidermannowayhome.movie
www.ourladiesmovie.co.uk
www.unchartedmovie.com
www.uncharted-movie.jp
www.residentevil.movie
www.biomovie.jp

Other certificates including the domain name sonypictures.com

(limited to 100 certificates)
conectados.sonypictures.com
*.sonypictures.com
redeem.sonypictures.com
origin-flash.sonypictures.com
edge-micros1.sonypictures.com
secure.sonypictures.com
origin-flash.sonypictures.com
edge-micros2.sonypictures.com
brand.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
extaz-qa.spe.sony.com
edge-micros2.sonypictures.com
edge-micros2.sonypictures.com
sites.sonypictures.com
sites.sonypictures.com
secure.sonypictures.com
globalassethub.sonypictures.com
www.stage6films.com
api.stg-stage-productionservices.sonypictures.com
pub.email.sonypictures.com
connect.sonypictures.com
sites.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
stage-microsites.sonypictures.com
portals.sonypictures.com
microsites.sonypictures.com
image.20210419.200345.s6.et.yellsatcloud.com
globalassethub.sonypictures.com
portals.sonypictures.com
portals.sonypictures.com
conectados.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
sites.sonypictures.com
edge-portals.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
edge-micros2.sonypictures.com
flash.sonypictures.com
pub.email.sonypictures.com
griffin.sonypictures.com
view.email.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
sites.sonypictures.com
audiolibrary.sonypictures.com
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
akamai-san77.exacttarget.com
stage-microsites.sonypictures.com
www.sonypictures.co.uk
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
viewer.sonypictures.com
secure.sonypictures.com
edge-portals.sonypictures.com
sites2.sonypictures.com
edge-micros2.sonypictures.com
test.rewards.sonypictures.com
www.stage6films.com
test.rewards.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
gam.sonypictures.com
microsites.sonypictures.com
flash.sonypictures.com
view.email.games.sonypictures.com
rewards.sonypictures.com
test.redeem.sonypictures.com
edge-micros1.sonypictures.com
brand.sonypictures.com
gam.sonypictures.com
stage-microsites.sonypictures.com
perc.sonypictures.com
sony-prod.actioniq.mr-in.com
click.email.sonypictures.com
stage-edge-portals.sonypictures.com
stage-microsites.sonypictures.com
tweets.sonypictures.com
flash.sonypictures.com
rewards.sonypictures.com
pages.email.games.sonypictures.com
view.email.sonypictures.com
rewards.sonypictures.com
redeem.sonypictures.com
microsites.sonypictures.com
redeem.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
origin-flash.sonypictures.com

Certificate

The complete raw certificate details for edge-micros2.sonypictures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9MJUDJmIYc2vZmUJjC/
WrtTRO1re9/x5/LcNLYMJUTOFI9SIF8KO5OD3ZYhREKhwFA/55l2Tpqrzi4m+ehw
lSVTcer8dHGiaAYbpyHLDauUbwAEKrNCxfg5gSXur8u+JURXFOQ+i5VlN0L6M4hI
Z2/AXufx00IBIEso2lRocGM4y9QKH5OCFNw3x1rrQl4eOECew/fPytfK9uyt95si
KCcvbCzxN3Wx8zUsdtSJMR29W4MUThdCiislN67h6DsQLQTjmAScXgoESRpfiljg
Or4z2lqUN7EZQZE6+BStDxiw503BxKX1zHyEmrWIoZP9DUfDgNiKsLdhoxUSzjNv
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12621030956598339760445390350796205701
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Culver City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sony Pictures Entertainment'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'edge-micros2.sonypictures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22700722506471220001827870049280770524771133388059490762241446658177851519588850378405676655274749400223804168025060370983005556718653158005474185091644852461411986149457453395934295925796071930309722198411808000612368501632452607057145182071828570180350147419298008812801313539137824127325439147365486125933267562399376733075786080750053894319058230246355823080454026655553356571575400222980845017901197214914194731766116039152981959661477973876992527914700945348671285797176358651361444870029420390433670900479703030566015492810716528933064547303306312775079774427278962275905790897627516969788303152632553312317307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f5e8e9c585e5c3a352dbe08aee161b01374f8d4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2416 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge-micros2.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghostbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meme.abeautifulday.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meme.badboysforlife.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meme.peterrabbit-movie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.charmcitykings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.theburntorangeheresymovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.theclimbfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thesongofnames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thetraitormovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'translate.pallabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.sonypictures.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greyhound.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monsterhunter.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otonanojijo.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overcomermovie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overcomermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pallabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paulmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterhasefilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterrabbit-movie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterrabbit-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterrabbitlapelicula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterrabbitmovie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterrabbitmovie.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.revengegirl-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.risen-movie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.risenmovieresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sniper8.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spider-manintothespider-verse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spider-verse.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiderman-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiderman-tickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermanfarfromhome.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermanfarfromhome.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermanfarfromhomemovie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermanhomecoming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermanhomecoming.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermanlapelicula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermannewuniverse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiderversemovie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starshiptroopers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surfsup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theblacklist.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thedailybugle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thestarmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thestarmovie.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thestarmoviemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thestarofmylife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venom-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venomfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venommovie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldofjumanji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yurushi-chikara.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zombie-land.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.monsterhunter.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.frenchexitmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thefathermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thetrufflehuntersmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demonslayermovie.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thehumanfactormovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.icarryyouwithmemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theunholyfilm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.peterrabbit-movie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courageousthemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.showmethefathermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monsterhuntermovie.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courageousthemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie-ar.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr-ar.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-ar.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de-ar.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br-ar.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx-ar.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca-ar.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk-ar.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp-ar.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retodevalienteslapelicula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nerespirepas-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dontbreathe-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muestramealpadre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venom-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venom-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thelostleonardomovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br.dontbreathemovie-intothedark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.dontbreathemovie-intothedark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermannowayhome.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidermannowayhome.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladiesmovie.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unchartedmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uncharted-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.residentevil.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biomovie.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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