edge-micros1.sonypictures.com

- Sony Pictures Entertainment, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0c:25:57:a7:79:99:51:78:b4:32:ce:bf:59:54:d1:0a was issued on by DigiCert Inc.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Sony Pictures Entertainment, Inc.

Organization: Sony Pictures Entertainment, Inc.
State / Province: California
Locality: Culver City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:25:57:a7:79:99:51:78:b4:32:ce:bf:59:54:d1:0a
Serial Number (int): 16144628771556473251635435482979291402
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2b:cc:b1:97:f9:58:b4:4e:5c:66:aa:d8:72:1b:0a:90:41:33:9f:b8
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): de:cc:65:5b:e3:95:cc:17:92:b0:70:54:5b:95:13:ff:aa:82:d3:03
Fingerprint (sha256): 1c:e2:f6:31:80:a9:7f:93:49:1f:ba:a9:5d:32:9c:21:10:2f:30:57:85:90:e7:4b:06:d5:c2:31:20:97:de:6b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate edge-micros1.sonypictures.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for edge-micros1.sonypictures.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

edge-micros1.sonypictures.com
www.va-movie.jp
www.morbius-movie.jp
www.meninblack.jp
www.kendrickbrotherscatalogue.com
www.jumanji.jp
www.intothespiderverse.movie
www.iammakimoto.jp
www.groundhogdayvr.com
www.gokushufudo-movie.jp
www.ghostbustersfanposter.com
www.ghostbusters.jp
www.gaensehaut-film.de
www.filmandfoodmovieseries.com
www.fatherstumovie.com
www.donburi-movie.jp
www.digital-campaign.jp
www.charlies-angels.jp
www.bullettrain-movie.jp
www.bloodshot.jp
www.badboys-movie.jp
itunes.meninblack.com
fatherstu.sonypictures.co.uk
ar.hoteltransylvania.com
app.ghostbusters.com
www.spideymovies.com
www.zarigani-movie.jp
www.sing-for-me-lyle.jp
www.whitney-movie.jp
tickets.theson-film.com
www.godzilladay.com
tickets.turneverypagefilm.com
www.65.movie
www.acrossthespiderverse.movie
www.otto-movie.jp
www.biggeorgeforeman.movie
www.foremanresources.movie
www.thepopes-exorcist.movie
www.loveagain.movie
www.nazoshisya.jp
tickets.carmen-film.com
www.search-movie.jp
www.65-movie.jp
www.kotzmovie.com
equalizer3.sonypictures.co.uk
www.thebookofclarence.movie
www.welcometohelios.com
tickets.thepersianversionmovie.com
tickets.strangewayoflife.com
www.ghostbustersvr.com
www.butcherscrossingmovie.com
www.thanksgiving-movie.jp
www.anyonebutyou.movie
www2.ghostbustersvr.com
www.journey-to-bethlehem-tix.ca
tickets.journeytobethlehemmovie.com
oprotetor.sonypictures.com.br
www.journey-to-bethlehem-billets.ca
www.napoleonmovie.net
www.madameweb.movie
www.marriedwithchildren.com
www.thanksgiving-tix.ca
www.thewonderverse.com
thanksgiving.sonypictures.co.uk
www.action-de-grace-billets.ca
www.madame-web.jp
www.wonderversechicago.com
www.columbiapictures100.jp
www.garfield.movie
www.thegarfield-movie.com
tickets.thegarfield-movie.com
www.napoleonmovie.com.au
www.napoleonmovie.co.kr
www.napoleonmovie.co.nz
www.napoleon-tix.ca
www.napoleon-billets.ca
napoleon.sonypictures.in
napoleon.sonypictures.com.tw
napoleon.sonypictures.be
napoleon.sonypictures.fr
napoleon.sonypictures.co.uk
napoleon.sonypictures.com.br
napoleon.sonypictures.com.mx
napoleon.sonypictures.com.sg
napoleon.sonypictures.ie
www.theforgemovie.com
napoleon.sonypictures.es
www.columbiapictures100.co.uk
www.columbiapictures100.ca

Other certificates including the domain name sonypictures.com

(limited to 100 certificates)
conectados.sonypictures.com
*.sonypictures.com
redeem.sonypictures.com
origin-flash.sonypictures.com
edge-micros1.sonypictures.com
secure.sonypictures.com
origin-flash.sonypictures.com
edge-micros2.sonypictures.com
brand.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
extaz-qa.spe.sony.com
edge-micros2.sonypictures.com
edge-micros2.sonypictures.com
sites.sonypictures.com
sites.sonypictures.com
secure.sonypictures.com
globalassethub.sonypictures.com
www.stage6films.com
api.stg-stage-productionservices.sonypictures.com
pub.email.sonypictures.com
connect.sonypictures.com
sites.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
stage-microsites.sonypictures.com
portals.sonypictures.com
microsites.sonypictures.com
image.20210419.200345.s6.et.yellsatcloud.com
globalassethub.sonypictures.com
portals.sonypictures.com
portals.sonypictures.com
conectados.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
sites.sonypictures.com
edge-portals.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
edge-micros2.sonypictures.com
flash.sonypictures.com
pub.email.sonypictures.com
griffin.sonypictures.com
view.email.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
sites.sonypictures.com
audiolibrary.sonypictures.com
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
akamai-san77.exacttarget.com
stage-microsites.sonypictures.com
www.sonypictures.co.uk
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
viewer.sonypictures.com
secure.sonypictures.com
edge-portals.sonypictures.com
sites2.sonypictures.com
edge-micros2.sonypictures.com
test.rewards.sonypictures.com
www.stage6films.com
test.rewards.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
gam.sonypictures.com
microsites.sonypictures.com
flash.sonypictures.com
view.email.games.sonypictures.com
rewards.sonypictures.com
test.redeem.sonypictures.com
edge-micros1.sonypictures.com
brand.sonypictures.com
gam.sonypictures.com
stage-microsites.sonypictures.com
perc.sonypictures.com
sony-prod.actioniq.mr-in.com
click.email.sonypictures.com
stage-edge-portals.sonypictures.com
stage-microsites.sonypictures.com
tweets.sonypictures.com
flash.sonypictures.com
rewards.sonypictures.com
pages.email.games.sonypictures.com
view.email.sonypictures.com
rewards.sonypictures.com
redeem.sonypictures.com
microsites.sonypictures.com
redeem.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
origin-flash.sonypictures.com

Certificate

The complete raw certificate details for edge-micros1.sonypictures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8193UgbjJJyhauxmUsxq
Db2scm3bGQiUyTrDBNGqZxnG5VGX+nPi4gs2RnVj2yBwhBzWnzUE4xLubohmpuXF
leWkTn6PIdALo1LzJhfvT2919Xk9dBVzXIgJ9L3UHGaJnl+KUTOn/m86gZamsRjj
7q+r3EjkGDUdl1UI7Wv6h0f004pBPxSiJkb6VmLbsLDRFllOZO+gAroA/84zyr5u
2IVzTY0FvkXMTpZxOyZ4tQHDtxExeTeA7nHGY5lOSlidZCYj957Sznii0OwrjRWX
Dy8yvLI2+6Q/HcioR4Qf83cRYRLTYynlqaQEgyA/S3voxaaZTilWoUidIzXOVIvE
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16144628771556473251635435482979291402
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Culver City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sony Pictures Entertainment, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'edge-micros1.sonypictures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30722984192934483074231009664445821150261722887301841360620302794768163373974769226737156121725409767575362306539520307646145506388480625792620150639801598449290547152561142177871227903945524779209574962706732042292025297498866748773222189624218917748755738432635001854299882495981885379113774269908760384489007022528175497031550799376046086110831033597362532033936122611367195858422682383836226523508233346476285078985149609400863578703176135740559598891278673426228374310134611700750645275777562650071429566762774109301883862026045417639849945826993778530570885168177835409769952910574240360080717492929486119486481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2bccb197f958b44e5c66aad8721b0a9041339fb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2298 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge-micros1.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.va-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morbius-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meninblack.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kendrickbrotherscatalogue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jumanji.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intothespiderverse.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iammakimoto.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.groundhogdayvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gokushufudo-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbustersfanposter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbusters.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaensehaut-film.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.filmandfoodmovieseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatherstumovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donburi-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digital-campaign.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charlies-angels.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bullettrain-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bloodshot.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badboys-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.meninblack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatherstu.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.hoteltransylvania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.ghostbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spideymovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zarigani-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sing-for-me-lyle.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whitney-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.theson-film.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.godzilladay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.turneverypagefilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.65.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acrossthespiderverse.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otto-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biggeorgeforeman.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foremanresources.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thepopes-exorcist.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loveagain.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nazoshisya.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.carmen-film.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.search-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.65-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kotzmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equalizer3.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebookofclarence.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welcometohelios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thepersianversionmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.strangewayoflife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbustersvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.butcherscrossingmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thanksgiving-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anyonebutyou.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.ghostbustersvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journey-to-bethlehem-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.journeytobethlehemmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oprotetor.sonypictures.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journey-to-bethlehem-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napoleonmovie.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madameweb.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marriedwithchildren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thanksgiving-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thewonderverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thanksgiving.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.action-de-grace-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madame-web.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wonderversechicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiapictures100.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garfield.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thegarfield-movie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thegarfield-movie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napoleonmovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napoleonmovie.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napoleonmovie.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napoleon-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napoleon-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napoleon.sonypictures.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napoleon.sonypictures.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napoleon.sonypictures.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napoleon.sonypictures.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napoleon.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napoleon.sonypictures.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napoleon.sonypictures.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napoleon.sonypictures.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napoleon.sonypictures.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theforgemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napoleon.sonypictures.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiapictures100.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiapictures100.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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