test.sony.com

Issued by R3

About this certificate

This digital certificate with serial number 04:d4:9c:9f:aa:8b:92:bb:6e:96:1d:d1:3a:d1:e5:51:10:d1 was issued on by Let's Encrypt.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=test.sony.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d4:9c:9f:aa:8b:92:bb:6e:96:1d:d1:3a:d1:e5:51:10:d1
Serial Number (int): 420797194115890653367555317638098213474513
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b5:90:60:12:08:d2:87:ed:b7:2b:53:db:6b:a2:87:f0:3d:a2:73:7d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d2:68:69:e5:3b:94:50:bf:cf:b7:c6:bb:73:e3:88:36:3d:58:90:46
Fingerprint (sha256): 2e:bc:86:65:c1:41:af:80:76:58:a6:b3:88:6a:f9:1e:16:aa:4b:1c:31:7f:87:0e:85:52:b6:88:32:c2:d3:cb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate test.sony.com

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test.sony.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test.sony-africa.com
test.sony-asia.com
test.sony-latin.com
test.sony-mea.com
test.sony.at
test.sony.ba
test.sony.be
test.sony.bg
test.sony.ca
test.sony.ch
test.sony.cl
test.sony.co.cr
test.sony.co.id
test.sony.co.in
test.sony.co.kr
test.sony.co.nz
test.sony.co.th
test.sony.co.uk
test.sony.com
test.sony.com.ar
test.sony.com.au
test.sony.com.bo
test.sony.com.br
test.sony.com.co
test.sony.com.do
test.sony.com.ec
test.sony.com.gt
test.sony.com.hk
test.sony.com.hn
test.sony.com.mk
test.sony.com.mx
test.sony.com.my
test.sony.com.ni
test.sony.com.pa
test.sony.com.pe
test.sony.com.ph
test.sony.com.sg
test.sony.com.sv
test.sony.com.tr
test.sony.com.tw
test.sony.com.vn
test.sony.cz
test.sony.de
test.sony.dk
test.sony.ee
test.sony.es
test.sony.eu
test.sony.fi
test.sony.fr
test.sony.gr
test.sony.hr
test.sony.hu
test.sony.ie
test.sony.it
test.sony.kz
test.sony.lt
test.sony.lu
test.sony.nl
test.sony.no
test.sony.pl
test.sony.pt
test.sony.ro
test.sony.rs
test.sony.se
test.sony.si
test.sony.sk
test.sony.ua
test.sonylatvija.com

Other certificates including the domain name sony.com

(limited to 100 certificates)
incapsula.com
code-jira-staging.am.sony.com
intedcpam.spe.sony.com
git.gis.sony.com
pod.am.sony.com
preview-production-pdp.sony.co.uk
content.esupport.sony.com
beta.sony.com
usphxadc11v.spe.sony.com
sgsinxapp01.spe.sony.com
tview.spe.sony.com
tbos.spe.sony.com
crpap05.am.sony.com
*.unity.eu.sie.sony.com
git.gis.sony.com
wpfqc-qa.spe.sony.com
pix-vm-lmgmgr.am.sony.com
usdl432.spe.sony.com
adfs.sony.com
s4hanaqa.sie.sony.com
www.sony.at
www.servicesplus.sel.sony.com
cnhkaeshxd01.am.sony.com
gateway-ext.api.spe.sony.com
prodev.sony.com
uklonext-pag01.spe.sony.com
www.dealersalescentral.sony.com
cidealerlocator.electronics.sony.com
mobile.spe.sony.com
prwweb.am.sony.com
preview-production-pdp.sony.co.uk
work.playstation.sony.com
csbd.sdp.sel.sony.com
uspwh0536.spe.sony.com
docs.sony.com
alfresco08-dev.spe.sony.com
www.sony.at
secure.sony.net
nocinfosys.sony.com
Hybrid.sonyusa.com
snap.sel.sony.com
extedc.spe.sony.com
dbiz.sel.sony.com
qtest.sie.sony.com
nexus.mc.spe.sony.com
pam.spe.sony.com
beta.sony.com
locator.sony
rebate.api.sony.com
USQWH0050.spe.sony.com
mfl.slp.csx.sony.com
itoc.sie.sony.com
recycling.sel.sony.com
tst-ext.am.sony.com
api.nsu.vcs.electronics.sony.com
dmgmobile.spe.sony.com
distribute.me.sel.sony.com
incapsula.com
sscookie.www.sony.com
*.retail.me.sony.com
uspxh104da.spe.sony.com
uspwh0038.spe.sony.com
preview.sony.com
usculvordsm02.am.sony.com
uspxh103d2.spe.sony.com
uspxh010p2.spe.sony.com
incapsula.com
extjbsan.spe.sony.com
extaz-qa.spe.sony.com
secure04.lithium.com
cxvdi-sf-dev.spe.sony.com
mcm-ext.mc.spe.sony.com
www.sonyrewards.com
acm.account.sony.com
dev.developer.sony.com
apps.sie.sony.com
centerstage.sie.sony.com
extjbsan.spe.sony.com
mail.me.sony.com
taascognos-qa.spe.sony.com
b2b.sony.com
pages.email.sel.sony.com
www.stage6films.com
square.sony.com
ebm01.cheetahmail.com
connect.sonypictures.com
intjbsan.spe.sony.com
sptaws-alb-dev.spe.sony.com
ucsjcacuc01-ms.ps.am.sony.com
qa-bomgar.spe.sony.com
www.unity.scee.net
fdus-6.freshdesk.com
uspxh104p1.spe.sony.com
s4globalhapp.sie.sony.com
extjbsan2.spe.sony.com
ussdisokta02.am.sony.com
preview-production-pdp.sony.co.uk
relativity-dev.spe.sony.com
www.sony.com.sg
incapsula.com

Certificate

The complete raw certificate details for test.sony.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJYDCCCEigAwIBAgISBNScn6qLkrtulh3ROtHlURDRMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTAyMTgwOTU2NTdaFw0yMTA1MTkwOTU2NTdaMBgxFjAUBgNVBAMT
DXRlc3Quc29ueS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY
cYy8ddT+45hBNLNiww14qbsKAmoXsyqYwAr4mwp0Au/NO5HuSIanC3K7xYvA91cB
byq/zzi3cjZisx7ad7FT+uXnNL8q/S7mhEDJQoxGW3xYY5Xmb9zmoXuxRuhelzRZ
+9gscBNAZhr9d00p1p3uAU064LN5g+3qzpwHnFWdBMaLID5Qwa6xpqzzFQxJXk31
pkQawg6cIvMOdmFIJDD5P2NG6SsDSH7cQheWQxpL9/634Q3JKvb6EZlxTYAp96cT
WWU8YKCYzx/mofP4vmparCN8tXagQboCMxjH4qgM1HMWHyRMgasaWr0EkQWRvXxy
ItvO83Jdk6TnyLdA3U1hAgMBAAGjggaIMIIGhDAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFLWQYBII0ofttytT22uih/A9onN9MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJ
QOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3Iz
Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcv
MIIEVQYDVR0RBIIETDCCBEiCFHRlc3Quc29ueS1hZnJpY2EuY29tghJ0ZXN0LnNv
bnktYXNpYS5jb22CE3Rlc3Quc29ueS1sYXRpbi5jb22CEXRlc3Quc29ueS1tZWEu
Y29tggx0ZXN0LnNvbnkuYXSCDHRlc3Quc29ueS5iYYIMdGVzdC5zb255LmJlggx0
ZXN0LnNvbnkuYmeCDHRlc3Quc29ueS5jYYIMdGVzdC5zb255LmNoggx0ZXN0LnNv
bnkuY2yCD3Rlc3Quc29ueS5jby5jcoIPdGVzdC5zb255LmNvLmlkgg90ZXN0LnNv
bnkuY28uaW6CD3Rlc3Quc29ueS5jby5rcoIPdGVzdC5zb255LmNvLm56gg90ZXN0
LnNvbnkuY28udGiCD3Rlc3Quc29ueS5jby51a4INdGVzdC5zb255LmNvbYIQdGVz
dC5zb255LmNvbS5hcoIQdGVzdC5zb255LmNvbS5hdYIQdGVzdC5zb255LmNvbS5i
b4IQdGVzdC5zb255LmNvbS5icoIQdGVzdC5zb255LmNvbS5jb4IQdGVzdC5zb255
LmNvbS5kb4IQdGVzdC5zb255LmNvbS5lY4IQdGVzdC5zb255LmNvbS5ndIIQdGVz
dC5zb255LmNvbS5oa4IQdGVzdC5zb255LmNvbS5oboIQdGVzdC5zb255LmNvbS5t
a4IQdGVzdC5zb255LmNvbS5teIIQdGVzdC5zb255LmNvbS5teYIQdGVzdC5zb255
LmNvbS5uaYIQdGVzdC5zb255LmNvbS5wYYIQdGVzdC5zb255LmNvbS5wZYIQdGVz
dC5zb255LmNvbS5waIIQdGVzdC5zb255LmNvbS5zZ4IQdGVzdC5zb255LmNvbS5z
doIQdGVzdC5zb255LmNvbS50coIQdGVzdC5zb255LmNvbS50d4IQdGVzdC5zb255
LmNvbS52boIMdGVzdC5zb255LmN6ggx0ZXN0LnNvbnkuZGWCDHRlc3Quc29ueS5k
a4IMdGVzdC5zb255LmVlggx0ZXN0LnNvbnkuZXOCDHRlc3Quc29ueS5ldYIMdGVz
dC5zb255LmZpggx0ZXN0LnNvbnkuZnKCDHRlc3Quc29ueS5ncoIMdGVzdC5zb255
Lmhyggx0ZXN0LnNvbnkuaHWCDHRlc3Quc29ueS5pZYIMdGVzdC5zb255Lml0ggx0
ZXN0LnNvbnkua3qCDHRlc3Quc29ueS5sdIIMdGVzdC5zb255Lmx1ggx0ZXN0LnNv
bnkubmyCDHRlc3Quc29ueS5ub4IMdGVzdC5zb255LnBsggx0ZXN0LnNvbnkucHSC
DHRlc3Quc29ueS5yb4IMdGVzdC5zb255LnJzggx0ZXN0LnNvbnkuc2WCDHRlc3Qu
c29ueS5zaYIMdGVzdC5zb255LnNrggx0ZXN0LnNvbnkudWGCFHRlc3Quc29ueWxh
dHZpamEuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgw
JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYB
BAHWeQIEAgSB9gSB8wDxAHYAXNxDkv7mq0VEsV6a1FbmEDf71fpH3KFzlLJe5vbH
DsoAAAF3tMkm6wAABAMARzBFAiBUSMLfYPS6vbMLS3o1SkbdXM72Br0aFDwtBfjC
7Ir+ZAIhAOYR3nqIz0Vc+tPbvBoP+6JW+l0WRetKJB5QyTYT2OkdAHcAfT7y+I//
iFVoJMLAyp5SiXkrxQ54CX8uapdomX4i8NcAAAF3tMknEAAABAMASDBGAiEAy2eE
UxDdi9IOX+ZYv9WKIX5I33gKcSuXAB14n3LakQYCIQD9jIdAIyRx+jT+5mEeQuKt
n36xP+Jb2bi99o33sbVl5zANBgkqhkiG9w0BAQsFAAOCAQEAK6r7mz3Q0hjf+dxx
SDq3yxY9ZIlijAkat6AxyL4fDVUNT2suAbu+fwMsY42VIk1+g1N6ZmYeHIoYwu7i
e8+XKYo4vdGMrd3kfNeEgDQ/ZYrfvGVtDPJluzz9aiV0noA14Ahyp1YvRXroOaMz
K4Uf4DDdqxz3O2CRWleaGlKNek+tNrPIu8a7bQ3XJfwdYyEFWiJ90EJFWDSpgNRO
K6CvR2jyhBvTjFzCmRbur1PHOuT4t2XlBTCmdu6a/3GtOs1M6BwnNqO/MHSZqPxH
K02BpYOHTuIJj8DIfbfa0xIGOOdZSYAhv4Jr32VEeX7QryIJXckiFQ2R9A2bp7rC
TgIc6w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HGMvHXU/uOYQTSzYsMN
eKm7CgJqF7MqmMAK+JsKdALvzTuR7kiGpwtyu8WLwPdXAW8qv884t3I2YrMe2nex
U/rl5zS/Kv0u5oRAyUKMRlt8WGOV5m/c5qF7sUboXpc0WfvYLHATQGYa/XdNKdad
7gFNOuCzeYPt6s6cB5xVnQTGiyA+UMGusaas8xUMSV5N9aZEGsIOnCLzDnZhSCQw
+T9jRukrA0h+3EIXlkMaS/f+t+ENySr2+hGZcU2AKfenE1llPGCgmM8f5qHz+L5q
WqwjfLV2oEG6AjMYx+KoDNRzFh8kTIGrGlq9BJEFkb18ciLbzvNyXZOk58i3QN1N
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 420797194115890653367555317638098213474513
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-18 09:56:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-19 09:56:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test.sony.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27323467341632007331898801661047775758819299736573660080721989620084051144845299378467627832271791835748643925113928057358249790047872709396423996372669188265569686803064330679656261805258299825716449009779013728711030575439692709506255768573840042712841288738710238615718967556898608152634176994020769667431729979012641505968410551321948427818420917098671735217853197064742898605038098654134531982417243896814165623835440956274472626581629976170635722225096944704991867203467550319846160730259610951956888338949568173152766242617111460070556549163619346461399518316688267900612287078018811578562339740391892485754209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b590601208d287edb72b53db6ba287f03da2737d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony-africa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony-latin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony-mea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.hn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.sv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sony.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sonylatvija.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000177b4c926eb000004030047304502205448c2df60f4babdb30b4b7a354a46dd5ccef606bd1a143c2d05f8c2ec8afe64022100e611de7a88cf455cfad3dbbc1a0ffba256fa5d1645eb4a241e50c93613d8e91d0077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000177b4c927100000040300483046022100cb67845310dd8bd20e5fe658bfd58a217e48df780a712b97001d789f72da9106022100fd8c8740232471fa34fee6611e42e2ad9f7eb13fe25bd9b8bdf68df7b1b565e7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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