edge-micros1.sonypictures.com

- Sony Pictures Entertainment, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 02:a2:c4:15:94:e0:23:b8:d0:b0:22:6d:52:0c:99:4a was issued on by DigiCert Inc.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sony Pictures Entertainment, Inc.

Organization: Sony Pictures Entertainment, Inc.
State / Province: California
Locality: Culver City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:a2:c4:15:94:e0:23:b8:d0:b0:22:6d:52:0c:99:4a
Serial Number (int): 3503585144800951877801851766824540490
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 59:1c:6c:49:f7:b7:ed:46:3e:df:8b:03:35:30:57:32:b2:e7:34:2b
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 2e:8c:09:19:fd:24:7a:38:a4:06:5f:70:d8:53:d3:0b:2e:74:2c:28
Fingerprint (sha256): 1c:fb:50:a2:59:94:c6:95:90:40:87:8c:05:85:18:9f:bc:c2:28:be:8b:23:87:2f:4f:d3:ac:42:09:69:5e:91

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate edge-micros1.sonypictures.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for edge-micros1.sonypictures.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

edge-micros1.sonypictures.com
app.ghostbusters.com
ar.hoteltransylvania.com
ar.venom.movie
dontbreathe2.sonypictures.co.uk
ecto1game.ghostbusters.com
feedthebeast.venom.movie
holidays.sonypictures.com
itunes.meninblack.com
misterrogers.jp
resources.abeautifulday.movie
showmethefathermovie.com
stayathome.sonypictures.com
tickets.12mightyorphansmovie.com
tickets.courageousthemovie.com
tickets.escaperoom.movie
tickets.greed-film.com
tickets.julia-film.com
tickets.ninedaysfilm.com
tickets.showmethefathermovie.com
us-ar.venom.movie
www.amouthfulofair.movie
www.angrybird2-movie.jp
www.artofhoteltransylvania3.com
www.artoftheemojimovie.com
www.babydriver-movie.com
www.badboys-movie.jp
www.bignightinmovies.com
www.black-and-blue.jp
www.bloodshot.jp
www.charlies-angels.jp
www.digital-campaign.jp
www.divoc-12.jp
www.donburi-movie.jp
www.dontbreathemovie-intothedark.com
www.dontbreathemovie-intothedark.net
www.dontbreathemovie.com
www.escaperoom-tix.ca
www.escaperoom.movie
www.escaperoomfilm.co.uk
www.explorejumanji.com
www.filmandfoodmovieseries.com
www.gaensehaut-film.de
www.ghostbusters.jp
www.ghostbustersfanposter.com
www.gokushufudo-movie.jp
www.groundhogdayvr.com
www.grudge.jp
www.happybirthdayspidey.com
www.hoteltmovie.com
www.house-of-cards.jp
www.intothespiderverse.movie
www.jeudevasion-billets.ca
www.jumanji-film.de
www.jumanji.com.br
www.jumanji.jp
www.jumanji360.com
www.jumanjimovie.net
www.jumanjinextlevelar.com
www.kendrickbrotherscatalogue.com
www.meninblack.jp
www.minosescaperooms.com
www.miraclesfromheavenresources.com
www.misterrogers.jp
www.morbius-movie.jp
www.morbius.movie
www.narzissundgoldmundfilm.de
www.onceinhollywood.jp
www.openseason.com
www.showusyourgroundhogday.com
www.spideyfanweek.com
www.storyofmylife.jp
www.wearevenom.co.uk
tickets.ghostbusters.com
www.sosfantomes-billets.ca
www.ghostbusters-tix.ca
tickets.ghostbustersafterlife.co.uk
tickets.ajournalforjordan.movie
www.ghostbustersafterlife.com.au
tickets.jockeymovie.com
www.ajournalforyou.com
morbius.sonypictures.co.uk
www.morbius.com.au
tickets.whowearemovie.com
hasbro.ghostbusters.com
www.xavier-music.com
www.va-movie.jp
tickets.compartmentno6.com
uncharted.sonypictures.co.uk
www.fatherstumovie.com
www.studio666movie.com.au
tickets.motheringsundaymovie.com
studio666.sonypictures.co.uk
www.getreadyforspidey.com
www.bullettrainmovie.com
www.iammakimoto.jp
www.nipponspeedline.com

Other certificates including the domain name sonypictures.com

(limited to 100 certificates)
conectados.sonypictures.com
*.sonypictures.com
redeem.sonypictures.com
origin-flash.sonypictures.com
edge-micros1.sonypictures.com
secure.sonypictures.com
origin-flash.sonypictures.com
edge-micros2.sonypictures.com
brand.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
extaz-qa.spe.sony.com
edge-micros2.sonypictures.com
edge-micros2.sonypictures.com
sites.sonypictures.com
sites.sonypictures.com
secure.sonypictures.com
globalassethub.sonypictures.com
www.stage6films.com
api.stg-stage-productionservices.sonypictures.com
pub.email.sonypictures.com
connect.sonypictures.com
sites.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
stage-microsites.sonypictures.com
portals.sonypictures.com
microsites.sonypictures.com
image.20210419.200345.s6.et.yellsatcloud.com
globalassethub.sonypictures.com
portals.sonypictures.com
portals.sonypictures.com
conectados.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
sites.sonypictures.com
edge-portals.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
edge-micros2.sonypictures.com
flash.sonypictures.com
pub.email.sonypictures.com
griffin.sonypictures.com
view.email.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
sites.sonypictures.com
audiolibrary.sonypictures.com
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
akamai-san77.exacttarget.com
stage-microsites.sonypictures.com
www.sonypictures.co.uk
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
viewer.sonypictures.com
secure.sonypictures.com
edge-portals.sonypictures.com
sites2.sonypictures.com
edge-micros2.sonypictures.com
test.rewards.sonypictures.com
www.stage6films.com
test.rewards.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
gam.sonypictures.com
microsites.sonypictures.com
flash.sonypictures.com
view.email.games.sonypictures.com
rewards.sonypictures.com
test.redeem.sonypictures.com
edge-micros1.sonypictures.com
brand.sonypictures.com
gam.sonypictures.com
stage-microsites.sonypictures.com
perc.sonypictures.com
sony-prod.actioniq.mr-in.com
click.email.sonypictures.com
stage-edge-portals.sonypictures.com
stage-microsites.sonypictures.com
tweets.sonypictures.com
flash.sonypictures.com
rewards.sonypictures.com
pages.email.games.sonypictures.com
view.email.sonypictures.com
rewards.sonypictures.com
redeem.sonypictures.com
microsites.sonypictures.com
redeem.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
origin-flash.sonypictures.com

Certificate

The complete raw certificate details for edge-micros1.sonypictures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcT9oLzEAoZ8A+Q+47jD
tv/6/ScyReHZmpH8z3IySWwD2VczTqfswh8sgZmLkA1l2BlcgOeU/FPvDjdzBC57
QObuWBKA/U7a6DRATWGlN4OqKCBNrynxaGMF+FO/0nr6W1u8YsWtVUGBPYKAx/gP
67kIvMrNafj7oTPqBK0cSthHHtKRVI4HwG6bsJZTHQ5ZvfGCyaytmDCsXFwn45B/
mV3lAb+YHEto5oq7boTsf32C36ykuU0501kh4a8zSloDveRAFOy2mmg+IcGF4I8Y
mg44lt3ZjcOhuueOG/GHHj2fKK/5YciikVvD+zZt4D07RAhPHejmelP2okIBY/5u
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3503585144800951877801851766824540490
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Culver City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sony Pictures Entertainment, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'edge-micros1.sonypictures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24461132609787244975389387330037588095601714215499704122583032733282201037750538034304237729155313203224356987041611250544602298196416119237948890066498331679722859210689618745003645001155228666797489565864321947240154686416690183644568915592988248043762810156859102407302719933526582015408367498442868767401144530714914677433180455691154963050060227778346851151982892016005707794129247332548465071863231971925294311519457264190309352795892808222083751552701161779735121128233035960116695178423488354809067107152884121992225628416991132084006886241288188850107796250759761230451118783228436333210251711592514182868547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							591c6c49f7b7ed463edf8b0335305732b2e7342b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2496 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge-micros1.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.ghostbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.hoteltransylvania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dontbreathe2.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecto1game.ghostbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedthebeast.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holidays.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.meninblack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misterrogers.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.abeautifulday.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showmethefathermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stayathome.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.12mightyorphansmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.courageousthemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.escaperoom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.greed-film.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.julia-film.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.ninedaysfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.showmethefathermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-ar.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amouthfulofair.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angrybird2-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artofhoteltransylvania3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artoftheemojimovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.babydriver-movie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badboys-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bignightinmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.black-and-blue.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bloodshot.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charlies-angels.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digital-campaign.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.divoc-12.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donburi-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dontbreathemovie-intothedark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dontbreathemovie-intothedark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dontbreathemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.escaperoom-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.escaperoom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.escaperoomfilm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorejumanji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.filmandfoodmovieseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaensehaut-film.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbusters.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbustersfanposter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gokushufudo-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.groundhogdayvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grudge.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.happybirthdayspidey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoteltmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.house-of-cards.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intothespiderverse.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jeudevasion-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jumanji-film.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jumanji.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jumanji.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jumanji360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jumanjimovie.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jumanjinextlevelar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kendrickbrotherscatalogue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meninblack.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minosescaperooms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miraclesfromheavenresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.misterrogers.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morbius-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morbius.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.narzissundgoldmundfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onceinhollywood.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.openseason.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.showusyourgroundhogday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spideyfanweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.storyofmylife.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wearevenom.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.ghostbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosfantomes-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbusters-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.ghostbustersafterlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.ajournalforjordan.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbustersafterlife.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.jockeymovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ajournalforyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morbius.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morbius.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.whowearemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hasbro.ghostbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xavier-music.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.va-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.compartmentno6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uncharted.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatherstumovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studio666movie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.motheringsundaymovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio666.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getreadyforspidey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bullettrainmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iammakimoto.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nipponspeedline.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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