sony-asia.com

Issued by Amazon

About this certificate

This digital certificate with serial number 05:89:9b:50:d5:cd:74:f9:78:b7:52:f6:67:cf:99:27 was issued on by Amazon.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sony-asia.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:89:9b:50:d5:cd:74:f9:78:b7:52:f6:67:cf:99:27
Serial Number (int): 7360634826454107181107730881233000743
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 35:5b:b4:c9:a5:ce:17:15:56:0b:93:f0:f9:f3:17:d2:55:5a:2c:76
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 01:c4:cf:0e:2b:3d:bc:96:57:6b:5e:a3:d3:94:9a:de:7b:6b:29:83
Fingerprint (sha256): 22:a2:1c:eb:72:0a:2b:b5:cf:5a:21:b4:e7:86:6f:db:c1:12:a8:1f:08:25:7c:3a:22:ae:e5:8c:b2:87:58:23

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate sony-asia.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sony-asia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sony-asia.com
sony.co.nz
sony.com.au
sony.com.my
sony.co.in
sony.com.hk
sony.com.vn
sony.co.id
sony.co.th
sony-mea.com
sony.com.ph
sony-africa.com
sony.com.tw
sony.co.kr
sony.com.sg

Other certificates including the domain name sony-asia.com

(limited to 100 certificates)
incapsula.com
preview-production-pdp.sony.co.uk
beta.sony.com
aportal.sony-asia.com
capture.sony-asia.com
preview-production-pdp.sony.co.uk
stage-capture.sony-asia.com
amea-mpi3.sony-asia.com
dtenrol.sony-asia.com
beta.sony.com
incapsula.com
cms-capture.sony-asia.com
preview.sony.com
preview-production-pdp.sony.co.uk
www.sony.com.sg
mysonyvm.sony-asia.com
preview-production-pdp.sony.co.uk
preview-production-pdp.sony.co.uk
test.sony.com
mysonyvm.sony-asia.com
sxsg1icfw01.sony-asia.com
preview-production-pdp.sony.co.uk
thinclient.proxy.sony-asia.com
test.sony.com
enews.pro.sony-asia.com
promoterportal.sony-asia.com
sdw.sony-asia.com
preview-test.sony.com
sony-asia.com
preview-production-pdp.sony.co.uk
imperva.com
web.sony-asia.com
preview-production-pdp.sony.co.uk
preview-production-pdp.sony.co.uk
uat-pdp.sony.co.uk
www.pro.sony.eu
beta.sony.com
preview-test.sony.com
thinclient.proxy.sony-asia.com
stg.sdw.sony-asia.com
soemeinv-test.sony-asia.com
exsite.sony-asia.com
sony-asia.com
preview-production-pdp.sony.co.uk
whatsyourview.sony-asia.com
link.sony-asia.com
test.sony.com
preview.sony.com
preview-test.sony.com
preview-test.sony.com
imperva.com
stg.mysonyvm.sony-asia.com
production-pdp.sony.co.uk
www.pro.sony.eu
www.pro.sony.eu
sony-asia.com
preview-production-pdp.sony.co.uk
enews.pro.sony-asia.com
preview.sony.com
preview.sony.com
www.pro.sony.eu
preview.sony.com
beta.sony.com
production-pdp.sony.co.uk
production-pdp.sony.co.uk
beta.sony.com
dealerportal.sony-asia.com
preview-production-pdp.sony.co.uk
stg.link.sony-asia.com
enews.pro.sony-asia.com
enews.pro.sony-asia.com
test.sony.com
web.sony-asia.com
www.sony.co.uk
web.sony-asia.com
production-pdp.sony.co.uk
test.sony.com
incapsula.com
www.pro.sony.eu
www.pro.sony.eu
amea-mpi3-RDWeb.sony-asia.com
dlv.update.sony.net
www.sony.co.uk
preview-test.sony.com
login.sony-asia.com
incapsula.com
login.sony-asia.com
preview-production-pdp.sony.co.uk
APRAS.sony-asia.com
preview.sony.com
gforgreatness.sony-asia.com
www.sony.com.sg
www.pro.sony.eu
preview.sony.com
ssc.sony-asia.com
dealerportalqa.sony-asia.com
capture.sony-asia.com
incapsula.com
preview-test.sony.com
stg.rmp.sony-asia.com

Certificate

The complete raw certificate details for sony-asia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3avwC+Jl6akj/xsxGCvt
hUu/uGraoos0xt369JnfCUrzF2Ohylu/5Bx6hXhzs/0vGP1uZMKGZzGBrheD0uji
t8x8CrZVeYHNuAvM+Tfc3JaV0DeBfmKi+QbV17KIYLKNCvLgp87O7hAuAK2LF+aj
PL8CSSGhU+Fgj/9yffngGUDRMGKqkN3hRHOPWCLKa84L0GxfbogIjHmp1GlemI78
fR/9Tf8S2YLE3EBim2Y2yL76Hh7T/meEmySAsDKau4MjJxLOJJvxBSg9Lhw/JFno
vRPEo9tP2ju5B2FJd/HzP/M2nzC6ESXXt23Wf+mkijlZmI6XMuqNYzT9lXXFJB98
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7360634826454107181107730881233000743
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sony-asia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27983451028171961238796597796484837867521038025417221140862216343854864822123416941584168821735284739586470810574364397757688633173777500162814584735346010884100675215784393611066652634790610692796571400030118881087246234627856482146942390511600478627396074726084886048785273638183156417003935747757849622926187808484060767424800366120018750399312176921525091179375042570650142850191299562577685525192912869164861621421796563302026895343657195112537452659464218090588823784942005894705291115027007474080256464987721136800478469808953650989049040098929683096152685984382282433655770828021553787241104497092764020735123
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							355bb4c9a5ce1715560b93f0f9f317d2555a2c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (200 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sony-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sony.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sony.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sony.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sony.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sony.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sony.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sony.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sony.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sony-mea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sony.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sony-africa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sony.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sony.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sony.com.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016db484620f0000040300483046022100d940461beb2f607331cff43565272c88fe3f937cc0e9f4ae4a90ca49c038dc29022100f7e79842a4aa8b19d09f01d05429c92b679f4c4fa0c7fd2ec261508ceb11fcc70077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016db48462760000040300483046022100a1a6f23ba14123837985d392e61d46032027105e2f9085a63c09185b6d14e13a022100c2e4d6fc7e0a620d4b481462ae6dbaa65e6fa73c5f38e261b4a657b6b624e983
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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