utf-admin.scee.sony.co.uk

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 0d:ee:71:71:d6:91:f9:9d:eb:eb:56:52:de:c4:9f:c9 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=utf-admin.scee.sony.co.uk

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:ee:71:71:d6:91:f9:9d:eb:eb:56:52:de:c4:9f:c9
Serial Number (int): 18518031529009037201972600203718729673
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d2:91:3b:ea:a6:e5:32:18:64:db:07:f7:0b:0c:de:b3:9a:af:b4:ca
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): ef:3a:37:80:a2:fa:48:e4:58:a7:5e:65:78:fc:4c:5b:02:2e:ab:83
Fingerprint (sha256): 1c:88:75:e2:c5:6b:ee:7d:a9:eb:07:47:54:89:58:10:b7:b2:d8:f3:c5:ce:af:a1:79:95:15:e9:fa:e4:b9:22

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate utf-admin.scee.sony.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for utf-admin.scee.sony.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

utf-admin.scee.sony.co.uk

Other certificates including the domain name sony.co.uk

(limited to 100 certificates)
preview-production-pdp.sony.co.uk
beta.sony.com
www.sony.at
preview-production-pdp.sony.co.uk
www.sony.at
beta.sony.com
smetrics.sony.co.uk
preview.sony.com
www.sony.pt
staffsales.sony.co.uk
preview-production-pdp.sony.co.uk
preview-production-pdp.sony.co.uk
preview-production-pdp.sony.co.uk
test.sony.com
Outlet.sony.co.uk
presscentre.sony.co.uk
paradox.scee.sony.co.uk
utf-aes.scee.sony.co.uk
preview-production-pdp.sony.co.uk
*.scee.sony.co.uk
utf-aes.scee.sony.co.uk
staffsales.sony.co.uk
test.sony.com
pssivanticsa.scee.sony.co.uk
preview-production-pdp.sony.co.uk
*.scee.sony.co.uk
paradox.scee.sony.co.uk
production-pdp.sony.co.uk
preview-production-pdp.sony.co.uk
preview-production-pdp.sony.co.uk
uat-pdp.sony.co.uk
*.scee.sony.co.uk
www.pro.sony.eu
beta.sony.com
preview-production-pdp.sony.co.uk
smetrics.sony.co.uk
preview-test.sony.com
services.sony.co.uk
gbwwsvcse2.scee.sony.co.uk
sony01.secure.lithium.com
preview-production-pdp.sony.co.uk
www.sony.at
test.sony.com
preview.sony.com
utf-stream.scee.sony.co.uk
preview-test.sony.com
www.sony.at
presscentre.sony.co.uk
stgservices.sony.bg
preview-test.sony.com
pleb-jens001.domain.snsys.com
mypension.sony.co.uk
production-pdp.sony.co.uk
www.pro.sony.eu
services.sony.bg
production-pdp.sony.co.uk
www.pro.sony.eu
www.sony.at
preview-production-pdp.sony.co.uk
preview.sony.com
preview.sony.com
preview.sony.com
www.pro.sony.eu
presscentre.sony.co.uk
preview.sony.com
remote-test.scee.sony.co.uk
beta.sony.com
production-pdp.sony.co.uk
production-pdp.sony.co.uk
beta.sony.com
test.sony.com
gbwwsclodns1.scee.sony.co.uk
www.sony.co.uk
london-wifi.scee.sony.co.uk
production-pdp.sony.co.uk
test.sony.com
www.pro.sony.eu
www.pro.sony.eu
www.sony.co.uk
stgservices.sony.bg
preview-test.sony.com
smetrics.sony.co.uk
preview-production-pdp.sony.co.uk
utf-admin.scee.sony.co.uk
services.sony.ie
corporatestaffsales.sony.co.uk
preview.sony.com
sony01.secure.stage.lithium.com
testraileu.scee.sony.co.uk
www.sony.com.sg
preview.sony.com
gbwwsvcse2.scee.sony.co.uk
staffsales.sony.co.uk
services.sony.bg
preview-production-pdp.sony.co.uk
preview-test.sony.com
www.sony.at
www.sony.at
preview.sony.com
beta.sony.com

Certificate

The complete raw certificate details for utf-admin.scee.sony.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxECzOHddYAM4b0SkB61O
6zaFC8B31ESwJgUG+41ie+1NNBg5qCCbhh0Kjrsp6fQvRU2mZVcjeeRp1zvi3I9X
vglHhOuu3AWei/3hgNFBi2GjL0WJJPWwCmKiCmDgNbwcd6RUR5K46TzKFWp+OA7/
tG385fJHqb9yYE/w/Iq7BWIYPN5h9yZVLn/5wm//9Xv491c8UZewik50dRYDmX9x
7NZW5E1gOHNXE238WuYD1aEDmEJ6lCh0AOPOUgyuW5/XTNmDE08quT7ThnScOOzU
aPbVBPb6ecuwY6jYvPPhe7ljDUuFJ71fp6Klr2v/pbr2BUZ2GFhj1F3I+IeJI0QL
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18518031529009037201972600203718729673
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'utf-admin.scee.sony.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24774612572079600970651640347787676702248496607761937195731177027081942678780406191130301242608239361454695779036788343270321271031436943152291129988509661619045029444605814383314120187214499906961320657403097932484483107979863858544363368996567007209493907319456118391855982099701325427536285898450978064519070290582240596402376063278294517998562253071878217444647121309291859484947122536854397635540212954681284966011252604422341612729258152501917398006066689879164827257789218513354011071525815638050008161765429885849347697536289563522834119241924884305873366439165621549472101654472525622874033841401065036319593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d2913beaa6e5321864db07f70b0cdeb39aafb4ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utf-admin.scee.sony.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ab02de7fb315849b1ce66492cd3ead62c7ee0ff20459501fbf7f6d4c10c58c9d7b86bfa95d5869daa7e587d9db11ad9a1387cd70509cc9a3dbcf1b88ce9d8f60ba3056812c3ad26fc741b6304407309ab7ce0620a820fb0673c5030d28cf21cf6e7cb520604055f5dd513f063ac96744362b65dcf43e35ecae3f6a9dde67e1953f10d02906ccf335c15ef52bc290525939f19ce09a7a334bf41eda4e1d7e496d80ee0e784ae950c953ad25f8321fbcdc27530c28895d98dfc3609867e21a6792b58997d61ff91739d8372728c77528715b856b4558851172ccd82a07c99b74e367c877fc72beefbe519637029d030bc91d029d80ea8d9394b68900169df36158