www.pro.sony.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:68:08:68:0d:13:8d:bc:6a:97:15:ba:3b:3f:e9:04:01:7f was issued on by Let's Encrypt.

With 55 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.pro.sony.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:68:08:68:0d:13:8d:bc:6a:97:15:ba:3b:3f:e9:04:01:7f
Serial Number (int): 296737398043118432192158761607447680647551
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 66:bd:5d:1f:8e:54:a9:0b:12:72:3b:a1:29:30:39:6e:6d:6d:4b:5e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): eb:d9:6a:24:ab:f3:42:25:02:82:25:97:c8:a3:3b:21:15:21:4f:c1
Fingerprint (sha256): 25:55:3a:ba:19:b4:32:0c:48:70:be:44:d7:81:b9:a3:05:0d:29:f9:e8:63:43:e9:83:32:3f:c8:ba:8f:2a:d0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.pro.sony.eu

55

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pro.sony.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assets.pro.sony.eu
concierge.sony.at
concierge.sony.ba
concierge.sony.be
concierge.sony.bg
concierge.sony.ch
concierge.sony.co.uk
concierge.sony.com.mk
concierge.sony.com.tr
concierge.sony.cz
concierge.sony.de
concierge.sony.dk
concierge.sony.ee
concierge.sony.es
concierge.sony.fi
concierge.sony.fr
concierge.sony.gr
concierge.sony.hr
concierge.sony.hu
concierge.sony.ie
concierge.sony.it
concierge.sony.kz
concierge.sony.lt
concierge.sony.lu
concierge.sony.nl
concierge.sony.no
concierge.sony.pl
concierge.sony.pt
concierge.sony.ro
concierge.sony.rs
concierge.sony.ru
concierge.sony.se
concierge.sony.si
concierge.sony.sk
concierge.sony.ua
concierge.sonylatvija.com
pro.sony-asia.com
pro.sony.co.in
pro.sony.co.nz
pro.sony.com.au
pro.sony.com.cn
ps.sony.co.kr
us.digitalcinema.sony.com
www.pro.sony-asia.com
www.pro.sony.co.in
www.pro.sony.co.nz
www.pro.sony.com.au
www.pro.sony.com.cn
www.pro.sony.eu
www.ps.sony.co.kr
www.sony-psmea.com
www.sonybiz.ca
www.sonybiz.ru
www.sonypro-latin.com
www.sonypro.com.br

Other certificates including the domain name sony.eu

(limited to 100 certificates)
service6.octopus3.sony.eu
dev.service2.octopus3.sony.eu
preview-production-pdp.sony.co.uk
service12.octopus3.sony.eu
beta.sony.com
producttestersnl.sony.eu
service9.octopus3.sony.eu
tqa.service6.octopus3.sony.eu
www.sony.at
preview-production-pdp.sony.co.uk
dev.service9.octopus3.sony.eu
stg2.crmservice.sony.eu
www.sony.at
beta.sony.com
presscentre.sony.eu
service4.octopus3.sony.eu
preview.sony.com
tqa.service6.octopus3.sony.eu
training.sony.eu
www.sony.pt
preview-production-pdp.sony.co.uk
www.sony.com.sg
esp-marketingtool.sony.eu
producttestersfr.sony.eu
preview-production-pdp.sony.co.uk
preview-production-pdp.sony.co.uk
test.sony.com
dev.crmservice.sony.eu
assets.pro.sony.eu
dev.crmservice.sony.eu
dev.service5.octopus3.sony.eu
preview-production-pdp.sony.co.uk
training.sony.eu
test.sony.com
assist.sony.eu
students.sony.eu
presscentre.sony.eu
crmservice.sony.eu
events.sony.eu
service5.octopus3.sony.eu
dev.service8.octopus3.sony.eu
preview-production-pdp.sony.co.uk
admin.octopus3.sony.eu
www.sony.at
premium-services.staging.sony.eu
dev.service12.octopus3.sony.eu
www.sony.at
dev.service5.octopus3.sony.eu
tqa.service4.octopus3.sony.eu
production-pdp.sony.co.uk
tqa.crmservice.sony.eu
end-user.promotions.sony.eu
preview-production-pdp.sony.co.uk
preview-production-pdp.sony.co.uk
webservices2.sony.eu
uat-pdp.sony.co.uk
www.pro.sony.eu
tqa.admin.octopus3.sony.eu
beta.sony.com
preview-production-pdp.sony.co.uk
tqa.service9.octopus3.sony.eu
preview-test.sony.com
serviceportal.staging.sony.eu
sonar.staging.sony.eu
preview-production-pdp.sony.co.uk
tqa.service9.octopus3.sony.eu
www.sony.at
test.sony.com
stgeagle.sony.eu
preview.sony.com
preview-test.sony.com
www.sony.at
service9.octopus3.sony.eu
tqa.service10.octopus3.sony.eu
products.pro.sony.eu
preview-test.sony.com
premium-services.staging.sony.eu
production-pdp.sony.co.uk
www.pro.sony.eu
production-pdp.sony.co.uk
www.pro.sony.eu
www.relay.sony.eu
tqa.service1.octopus3.sony.eu
www.sony.at
tqa.service7.octopus3.sony.eu
preview-production-pdp.sony.co.uk
premium-services.staging.sony.eu
intranet.ibiss.sony.eu
preview.sony.com
preview.sony.com
preview.sony.com
www.pro.sony.eu
preview.sony.com
beta.sony.com
production-pdp.sony.co.uk
tqa.service9.octopus3.sony.eu
production-pdp.sony.co.uk
beta.sony.com
service2.octopus3.sony.eu
dev.service13.octopus3.sony.eu

Certificate

The complete raw certificate details for www.pro.sony.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbbLxOUp9d7EFW3Zq1tq
wZHlqHshKmtxWFr1XC66pg433Np9YgueU+cUlii+DPwk3rzJGB6SijSA9Wd66QIE
L9nUYcAB23oPUmpKPGbQv/sxiTp93g4jUgjVt+2UalnW5h1wnxpn0JcU7Io7KHPs
O+EUQieVZQi/d8HNbUpuiAt8jhYMWrBMiYd9tN+c4Ws91ZbHT05F7czvpgODsNJf
ed31CsVTpzvJPf7Rh258wrJWdvgUyNqlu0MxrbZBYf24w3cEajUalwCyWuFTAuj3
mEmd2S3zqRx8mJG1W7SG3ihiVnbrktXWWtdZYWHG+AS/1D6vRlP1TsNOv+bxbxlK
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296737398043118432192158761607447680647551
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-08 08:12:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-06 08:12:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pro.sony.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22939273252773762718665453628774793097542937909735299817404780272429382809641763990892323881935016298711113482019064336800931457729362470501903999116335475357118570767245805934785245804782217579372522122199806242012611397852166552770082141830114160295195952509410283813119777831977486697342430122191823937511470001710592061361647484906863926963594026679394166888345282913902369932957118850111357116576903746654408140229665819157552699910968534245538081960124237201587538446166055884690768635730598164386681094364612300628683494125340609272630548033812998067661788454317208470066522014902006414131180737918664034568799
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							66bd5d1f8e54a90b12723ba12930396e6d6d4b5e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1071 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.pro.sony.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.com.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sonylatvija.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.sony-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.sony.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.sony.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.sony.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.sony.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps.sony.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.digitalcinema.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pro.sony-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pro.sony.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pro.sony.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pro.sony.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pro.sony.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pro.sony.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.sony.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sony-psmea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonybiz.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonybiz.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypro-latin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypro.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163deab521200000403004730450220127db25e42c52c7c47f27199cfb494fbc52389345713a50ed3ae9d5bc9b535ea022100be4565b6bda8a706e1cfbba3668bae4a927bd35b29ec59403471ffba870b91c9007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163deab521a0000040300483046022100982031861ffefa3b3e81a77d1176bbf7fad1b62568053b95a1e3bb40d4bfbf82022100a50c2227a58dfbd2e764e17ed187d1ec2c42fbeb5e0a4db8407406f1e7bdbbba
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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