edge-micros1.sonypictures.com

- Sony Pictures Entertainment, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:2d:cb:e3:66:81:28:72:5d:4e:b8:c0:c1:af:8d:bb was issued on by DigiCert Inc.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Sony Pictures Entertainment, Inc.

Organization: Sony Pictures Entertainment, Inc.
State / Province: California
Locality: Culver City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:2d:cb:e3:66:81:28:72:5d:4e:b8:c0:c1:af:8d:bb
Serial Number (int): 10871612670579439690434161637441113531
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6b:13:e3:ca:f4:c4:dc:bc:fd:25:30:8b:00:5b:3b:a2:16:4b:c0:c7
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): b3:1f:10:26:9d:04:96:da:36:9a:6e:05:57:2d:c4:24:fa:25:a8:16
Fingerprint (sha256): 1e:a6:0e:65:4f:62:54:c2:a2:03:1a:1b:3c:1a:47:5c:b8:80:73:86:0e:22:d5:c4:5b:82:18:fa:8a:a5:b1:40

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate edge-micros1.sonypictures.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for edge-micros1.sonypictures.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

edge-micros1.sonypictures.com
www.va-movie.jp
www.morbius-movie.jp
www.meninblack.jp
www.kendrickbrotherscatalogue.com
www.jumanji.jp
www.intothespiderverse.movie
www.iammakimoto.jp
www.groundhogdayvr.com
www.gokushufudo-movie.jp
www.ghostbustersfanposter.com
www.ghostbusters.jp
www.gaensehaut-film.de
www.filmandfoodmovieseries.com
www.fatherstumovie.com
www.donburi-movie.jp
www.digital-campaign.jp
www.charlies-angels.jp
www.bullettrain-movie.jp
www.bloodshot.jp
www.badboys-movie.jp
itunes.meninblack.com
fatherstu.sonypictures.co.uk
ar.hoteltransylvania.com
app.ghostbusters.com
www.spideymovies.com
www.zarigani-movie.jp
www.sing-for-me-lyle.jp
www.whitney-movie.jp
tickets.theson-film.com
www.godzilladay.com
tickets.turneverypagefilm.com
www.65.movie
www.acrossthespiderverse.movie
www.otto-movie.jp
www.biggeorgeforeman.movie
www.foremanresources.movie
www.thepopes-exorcist.movie
www.loveagain.movie
www.nazoshisya.jp
tickets.carmen-film.com
www.search-movie.jp
www.65-movie.jp
www.kotzmovie.com
equalizer3.sonypictures.co.uk
www.thebookofclarence.movie
www.welcometohelios.com
tickets.thepersianversionmovie.com
tickets.strangewayoflife.com
www.ghostbustersvr.com
www.butcherscrossingmovie.com
www.thanksgiving-movie.jp
www.anyonebutyou.movie
www2.ghostbustersvr.com
www.journey-to-bethlehem-tix.ca
tickets.journeytobethlehemmovie.com
oprotetor.sonypictures.com.br
www.journey-to-bethlehem-billets.ca
www.napoleonmovie.net
www.madameweb.movie
www.marriedwithchildren.com
www.thanksgiving-tix.ca
www.thewonderverse.com
thanksgiving.sonypictures.co.uk
www.action-de-grace-billets.ca
www.madame-web.jp
www.wonderversechicago.com
www.columbiapictures100.jp
www.garfield.movie
www.thegarfield-movie.com
tickets.thegarfield-movie.com
www.napoleonmovie.com.au
www.napoleonmovie.co.kr
www.napoleonmovie.co.nz
www.napoleon-tix.ca
www.napoleon-billets.ca
napoleon.sonypictures.in
napoleon.sonypictures.com.tw
napoleon.sonypictures.be
napoleon.sonypictures.fr
napoleon.sonypictures.co.uk
napoleon.sonypictures.com.br
napoleon.sonypictures.com.mx
napoleon.sonypictures.com.sg
napoleon.sonypictures.ie
www.theforgemovie.com
napoleon.sonypictures.es

Other certificates including the domain name sonypictures.com

(limited to 100 certificates)
conectados.sonypictures.com
*.sonypictures.com
redeem.sonypictures.com
origin-flash.sonypictures.com
edge-micros1.sonypictures.com
secure.sonypictures.com
origin-flash.sonypictures.com
edge-micros2.sonypictures.com
brand.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
extaz-qa.spe.sony.com
edge-micros2.sonypictures.com
edge-micros2.sonypictures.com
sites.sonypictures.com
sites.sonypictures.com
secure.sonypictures.com
globalassethub.sonypictures.com
www.stage6films.com
api.stg-stage-productionservices.sonypictures.com
pub.email.sonypictures.com
connect.sonypictures.com
sites.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
stage-microsites.sonypictures.com
portals.sonypictures.com
microsites.sonypictures.com
image.20210419.200345.s6.et.yellsatcloud.com
globalassethub.sonypictures.com
portals.sonypictures.com
portals.sonypictures.com
conectados.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
sites.sonypictures.com
edge-portals.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
edge-micros2.sonypictures.com
flash.sonypictures.com
pub.email.sonypictures.com
griffin.sonypictures.com
view.email.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
sites.sonypictures.com
audiolibrary.sonypictures.com
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
akamai-san77.exacttarget.com
stage-microsites.sonypictures.com
www.sonypictures.co.uk
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
viewer.sonypictures.com
secure.sonypictures.com
edge-portals.sonypictures.com
sites2.sonypictures.com
edge-micros2.sonypictures.com
test.rewards.sonypictures.com
www.stage6films.com
test.rewards.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
gam.sonypictures.com
microsites.sonypictures.com
flash.sonypictures.com
view.email.games.sonypictures.com
rewards.sonypictures.com
test.redeem.sonypictures.com
edge-micros1.sonypictures.com
brand.sonypictures.com
gam.sonypictures.com
stage-microsites.sonypictures.com
perc.sonypictures.com
sony-prod.actioniq.mr-in.com
click.email.sonypictures.com
stage-edge-portals.sonypictures.com
stage-microsites.sonypictures.com
tweets.sonypictures.com
flash.sonypictures.com
rewards.sonypictures.com
pages.email.games.sonypictures.com
view.email.sonypictures.com
rewards.sonypictures.com
redeem.sonypictures.com
microsites.sonypictures.com
redeem.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
origin-flash.sonypictures.com

Certificate

The complete raw certificate details for edge-micros1.sonypictures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Y3eqJeejm7iuOZSZksz
4keLlpgAv4OR4gEJ7FInbNyxcpoM7MG8OEqJI6/MKqH5GIRG4yZ78R9MZHgMN6V8
Q+fa6xdYJofXiq9V38xBNeGynrPXjN0GW5hKEX79k2Q6s+rrJJBOebtW3x0rrhTb
4JbORluynz20dTITHxZLBWiGBt38iE16pacBlLPJtGq7s6b16vk/vVeKnndj21xz
GiMEdc2Y2I32xtLE33ScvpzJW1wXz26vJVTqtjvIVHQbYJsRtruVmr3VqFvDMGvv
ChVuFXG6JVlj2+tcVhJq96E7EyEiKp89ct3Kd0Neb8+K1OAagPtPETgrgH/MVSrH
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10871612670579439690434161637441113531
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Culver City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sony Pictures Entertainment, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'edge-micros1.sonypictures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27463670763689725681269991647877137227164393856600002853495222644110198210886268117843620136892364025062966769750047244064771702613634350329169267726991308814512671310328923169413201889174279305224818604187889464187180025876762527371820743991451153493371253134756857198888068230786633366533078289357570449333101096128452307616469428942626454158259644830528773878174737382702780463883732688309266812799762720695062252071863283728263127206874968671079997140384899185270468964601229892168931560865986392651599461930243889501570736059469921449769714701346001033391465909529613265837635100557471187833303357603955404883823
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6b13e3caf4c4dcbcfd25308b005b3ba2164bc0c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2239 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge-micros1.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.va-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morbius-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meninblack.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kendrickbrotherscatalogue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jumanji.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intothespiderverse.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iammakimoto.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.groundhogdayvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gokushufudo-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbustersfanposter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbusters.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaensehaut-film.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.filmandfoodmovieseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatherstumovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donburi-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digital-campaign.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charlies-angels.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bullettrain-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bloodshot.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badboys-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.meninblack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatherstu.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.hoteltransylvania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.ghostbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spideymovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zarigani-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sing-for-me-lyle.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whitney-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.theson-film.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.godzilladay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.turneverypagefilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.65.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acrossthespiderverse.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otto-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biggeorgeforeman.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foremanresources.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thepopes-exorcist.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loveagain.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nazoshisya.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.carmen-film.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.search-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.65-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kotzmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equalizer3.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebookofclarence.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welcometohelios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thepersianversionmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.strangewayoflife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbustersvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.butcherscrossingmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thanksgiving-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anyonebutyou.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.ghostbustersvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journey-to-bethlehem-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.journeytobethlehemmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oprotetor.sonypictures.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journey-to-bethlehem-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napoleonmovie.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madameweb.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marriedwithchildren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thanksgiving-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thewonderverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thanksgiving.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.action-de-grace-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madame-web.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wonderversechicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiapictures100.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garfield.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thegarfield-movie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thegarfield-movie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napoleonmovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napoleonmovie.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napoleonmovie.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napoleon-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napoleon-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napoleon.sonypictures.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napoleon.sonypictures.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napoleon.sonypictures.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napoleon.sonypictures.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napoleon.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napoleon.sonypictures.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napoleon.sonypictures.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napoleon.sonypictures.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napoleon.sonypictures.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theforgemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napoleon.sonypictures.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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