staging.sonyrewards.com

- Sony Corporation of America -

Issued by VeriSign Class 3 Secure Server CA - G3

About this certificate

This digital certificate with serial number 23:6a:b0:62:52:79:f5:1a:e0:75:75:b2:dd:53:65:86 was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Sony Corporation of America

Organization: Sony Corporation of America
Organization unit: Culpeper Operations
Organization unit: For Intranet Use Only
State / Province: Virginia
Locality: Culpeper
Country: US

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 23:6a:b0:62:52:79:f5:1a:e0:75:75:b2:dd:53:65:86
Serial Number (int): 47076940813452124677258456397188916614
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 0d:44:5c:16:53:44:c1:82:7e:1d:20:ab:25:f4:01:63:d8:be:79:a5

Fingerprint (sha1): f0:04:9d:a4:50:ab:7a:ce:3f:d9:a9:9c:f0:ab:2d:9e:ee:69:ab:7b
Fingerprint (sha256): 1a:f0:8d:f5:39:0a:0c:bf:a9:ca:a0:93:f1:c0:d5:9c:fc:42:f7:96:26:2c:0c:b3:fe:fe:33:f0:4b:99:bb:ae


Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl

Check the revocation status for certificate staging.sonyrewards.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for staging.sonyrewards.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

staging.sonyrewards.com

Other certificates including the domain name sonyrewards.com

(limited to 100 certificates)
sonyrewards.com
www.wheeldeals.sonyrewards.com
www.sonyrewards.com
ssl944227.cloudflaressl.com
view.member.sonyrewards.com
familycenter.sonyrewards.com
*.rewards.sony.com
admin.sonyrewards.com
view.member.sonyrewards.com
ws.sonyrewards.com
staging.sonyrewards.com
pub.member.sonyrewards.com
akamai-san235.exacttarget.com
sonyrewards.com
www.sonyrewards.com
www.sonyrewards.com
www.pointsplus.sonyrewards.com
*.sonyrewards.com
sonyrewards.com
akamai-san235.exacttarget.com
pages.member.sonyrewards.com
pages.member.sonyrewards.com
sonyrewards.com
www.wheeldeals.sonyrewards.com
pages.member.sonyrewards.com
www.rewards.sony.com
admin.sonyrewards.com
www.rewards.sony.com
pub.member.sonyrewards.com
admin.sonyrewards.com
pub.member.sonyrewards.com
click.member.sonyrewards.com
sonyrewards.com
www.sonyrewards.com
www.sonyrewards.com
sonyrewards.com
www.sonyrewards.com
ssl944228.cloudflaressl.com
akamai-san235.exacttarget.com
themarketplace.sonyrewards.com
pages.member.sonyrewards.com
view.member.sonyrewards.com
www.rewards.sony.com
sonyrewards.com
sonyrewards.com
www.rewards.sony.com
media.sonyrewards.com
pages.member.sonyrewards.com
sonyrewards.com
pub.member.sonyrewards.com
www.rewards.sony.com
sonyrewards.com
*.sonyrewards.com
view.member.sonyrewards.com
akamai-san235.exacttarget.com
www.pointsplus.sonyrewards.com
sonyrewards.com
www.pointsplus.sonyrewards.com
www.rewards.sony.com
sonyrewards.com
akamai-san235.exacttarget.com
www.rewards.sony.com
admin-uat.sonyrewards.com
*.sonyrewards.com
*.rewards.sony.com
sonyrewards.com
akamai-san235.exacttarget.com
www.sonyrewards.com
www.sonyrewards.com
akamai-san235.exacttarget.com
ws.sonyrewards.com
sonyrewards.com
admin-staging.sonyrewards.com
www.partnerspecials.sonyrewards.com
uat.sonyrewards.com
sonyrewards.com
www.sonyrewards.com
www.sonyrewards.com
www.rewards.sony.com
www.sonyrewards.com
admin.sonyrewards.com
view.member.sonyrewards.com
www.sonyrewards.com
ssl944229.cloudflaressl.com
www.sonyrewards.com
CLICK1.MEMBERS.SONYREWARDS.COM
ws.sonyrewards.com
media.sonyrewards.com
view.member.sonyrewards.com
view.member.sonyrewards.com
pages.member.sonyrewards.com
click.member.sonyrewards.com
click.member.sonyrewards.com
www.sonyrewards.com
*.sonyrewards.com
*.rewards.sony.com
themarketplace.sonyrewards.com
media.sonyrewards.com
www.pointsplus.sonyrewards.com
click.member.sonyrewards.com

Certificate

The complete raw certificate details for staging.sonyrewards.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NsjJXWyqSivf/Kw7lhR
gLnaGLhzu9QNd8wOaZ7IDizSL+zbjELfh1mJ1SE6duRAopw5zEGsKDZQ5YjDR+6M
AScZdqB1AzuN3xyntin0XJLFumBNzUZKy3T9EKW4tnuuvezYd40MmjU3Z0Ov16qu
5WQ1b3gID4CsfQNWlS3Z+s4rqzWgdMJlnIAiomdwaXTP/Omr+D40i5oG9sin62YD
R4PKFTLk6ts+2gEXwfnk8+jvjRywlWAebTQw21ikKZLFuhJvtW7Qh3wlHq5/p+Fh
SfcvVnpNJGYK1QZBY0wB/6HDGAzt6VBbObHAXLvrxtBql6SN2rMGPsHw1Cr7XUV7
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 47076940813452124677258456397188916614
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-05-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Culpeper'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Sony Corporation of America'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Culpeper Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'For Intranet Use Only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'staging.sonyrewards.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26365628058281773015095618765471716611780383029379631175739712676750825144914861636825838891129011515473441467684406370708106342555346081237043377675040637828516715306547948872766060946962693743501383406569973422565359749117330703948106139267198230718492805275894379857790622551881637605901373360056418838857363258999874230859667276084797420031466257491332567999652699668350224561462785905277097633814125505453654061788717729803603089343904299268555424484159883293301244951046316573195916863272414816484826947296000227954751594443884904849364901739113109676776751997100233747635341899413042144605833125763551699761941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.sonyrewards.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d445c165344c1827e1d20ab25f40163d8be79a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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