flash.sonypictures.com

- Sony Pictures Entertainment, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0e:b7:eb:a6:43:01:18:91:a2:dd:ac:82:da:56:de:26 was issued on by DigiCert Inc.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sony Pictures Entertainment, Inc.

Organization: Sony Pictures Entertainment, Inc.
State / Province: California
Locality: Culver City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:b7:eb:a6:43:01:18:91:a2:dd:ac:82:da:56:de:26
Serial Number (int): 19564161804969351794262987479631453734
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ce:56:5d:58:c6:a8:cf:1f:60:1e:db:dc:a9:0d:fa:ff:80:83:81:73
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): f0:b4:7d:0c:f1:ee:3e:a4:b0:9d:61:bf:cf:1b:39:91:8a:33:8f:90
Fingerprint (sha256): 33:29:2b:5e:6b:f7:ef:3c:d2:ca:4c:22:81:c2:5e:d6:eb:db:8e:d5:05:eb:51:43:30:f9:e6:6b:e3:50:35:52

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate flash.sonypictures.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for flash.sonypictures.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

flash.sonypictures.com
benefits.sonypictures.com
brand.sonypictures.com
cdn.playshow.io
cdn.sonypicturestelevisiongames.com
dev.brand.sonypictures.com
dev.formats.sonypictures.com
dev.fyc.sonypictures.com
dev.globalassethub.sonypictures.com
dev.media.sonypictures.com
dev.presskits.sonypictures.com
dev.preview.sonypictures.com
dev.qa-admin.wheeloffortune.com
dev.qa-games.wheeloffortune.com
dev.qa-giveaways.wheeloffortune.com
dev.qa.wheeloffortune.com
dev.sonypicturesmuseum.com
dev.wwtbam.com
fb-stage.wheelpop.com
fb.wheelpop.com
formats.sonypictures.com
fyc.sonypictures.com
gam-dev.sonypictures.com
gam.sonypictures.com
globalassethub.sonypictures.com
gum-dev.sonypictures.com
gum.sonypictures.com
lt.wheeloffortune.com
media.sonypictures.com
prd.sonypicturestelevision.com
presskits.sonypictures.com
preview.sonypictures.com
prod-gum.sonypictures.com
prod.sonypicturesmuseum.com
prod.wheeloffortune.com
qa-admin.wheeloffortune.com
qa-games.wheeloffortune.com
qa-giveaways.wheeloffortune.com
qa.wheeloffortune.com
secure-dev.sonypictures.com
secure-prod.sonypictures.com
secure.sonypictures.com
sonypictures.com
sonypicturesmuseum.com
stg.brand.sonypictures.com
stg.formats.sonypictures.com
stg.fyc.sonypictures.com
stg.globalassethub.sonypictures.com
stg.imageworks.com
stg.media.sonypictures.com
stg.presskits.sonypictures.com
stg.preview.sonypictures.com
stg.sonypictures.com
stg.sonypictures.es
stg.sonypicturesanimation.com
stg.wwtbam.com
wwtbam.com
www.cdn.playshow.io
www.imageworks.com
www.PlayShowTV.com
www.sonypictures.be
www.sonypictures.com
www.sonypictures.es
www.sonypictures.fr
www.sonypicturesanimation.com
www.sonypicturesmuseum.com
www.wheelpop.com
www.wwtbam.com
www.sonypictures.ie
www.sonypictures.co.uk
www.sonypictures.ca
chameleon.spe.sony.com
sonypictures.jp
stage.sonypictures.jp
www.sonypictures.jp
qa-games.spe.wheeloffortune.com
qa-giveaways.spe.wheeloffortune.com
qa.spe.wheeloffortune.com
stg.stage6films.com
stg.thedailybugle.net
www.stage6films.com
www.thedailybugle.net
stg-benefits.sonypictures.com
www.sonypictures.de
www2.sonypictures.de
www.sonypictures.at
www2.sonypictures.at
www.sonypictures.com.br
impossiblescience.com
www.impossiblescience.com
www2.impossiblescience.com
dev.impossiblescience.com
stg.impossiblescience.com
www.sonypictures.it
www2.sonypictures.it
globalassethub-dev.sonypictures.com
stage-productionservices.sonypictures.com
www2.stage-productionservices.sonypictures.com
stg-stage-productionservices.sonypictures.com

Other certificates including the domain name sonypictures.com

(limited to 100 certificates)
conectados.sonypictures.com
*.sonypictures.com
redeem.sonypictures.com
origin-flash.sonypictures.com
edge-micros1.sonypictures.com
secure.sonypictures.com
origin-flash.sonypictures.com
edge-micros2.sonypictures.com
brand.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
extaz-qa.spe.sony.com
edge-micros2.sonypictures.com
edge-micros2.sonypictures.com
sites.sonypictures.com
sites.sonypictures.com
secure.sonypictures.com
globalassethub.sonypictures.com
www.stage6films.com
api.stg-stage-productionservices.sonypictures.com
pub.email.sonypictures.com
connect.sonypictures.com
sites.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
stage-microsites.sonypictures.com
portals.sonypictures.com
microsites.sonypictures.com
image.20210419.200345.s6.et.yellsatcloud.com
globalassethub.sonypictures.com
portals.sonypictures.com
portals.sonypictures.com
conectados.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
sites.sonypictures.com
edge-portals.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
edge-micros2.sonypictures.com
flash.sonypictures.com
pub.email.sonypictures.com
griffin.sonypictures.com
view.email.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
sites.sonypictures.com
audiolibrary.sonypictures.com
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
akamai-san77.exacttarget.com
stage-microsites.sonypictures.com
www.sonypictures.co.uk
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
viewer.sonypictures.com
secure.sonypictures.com
edge-portals.sonypictures.com
sites2.sonypictures.com
edge-micros2.sonypictures.com
test.rewards.sonypictures.com
www.stage6films.com
test.rewards.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
gam.sonypictures.com
microsites.sonypictures.com
flash.sonypictures.com
view.email.games.sonypictures.com
rewards.sonypictures.com
test.redeem.sonypictures.com
edge-micros1.sonypictures.com
brand.sonypictures.com
gam.sonypictures.com
stage-microsites.sonypictures.com
perc.sonypictures.com
sony-prod.actioniq.mr-in.com
click.email.sonypictures.com
stage-edge-portals.sonypictures.com
stage-microsites.sonypictures.com
tweets.sonypictures.com
flash.sonypictures.com
rewards.sonypictures.com
pages.email.games.sonypictures.com
view.email.sonypictures.com
rewards.sonypictures.com
redeem.sonypictures.com
microsites.sonypictures.com
redeem.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
origin-flash.sonypictures.com

Certificate

The complete raw certificate details for flash.sonypictures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPcTCCDlmgAwIBAgIQDrfrpkMBGJGi3ayC2lbeJjANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMjA4MjIwMDAwMDBa
Fw0yMzA5MjIyMzU5NTlaMIGFMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZv
cm5pYTEUMBIGA1UEBxMLQ3VsdmVyIENpdHkxKjAoBgNVBAoTIVNvbnkgUGljdHVy
ZXMgRW50ZXJ0YWlubWVudCwgSW5jLjEfMB0GA1UEAxMWZmxhc2guc29ueXBpY3R1
cmVzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPJYQ3fG+1Yh
LM1aKITTmM5SpRVVEFXh8UWZK3R4I1GGHwMITRcCzSixBbcndrBtHR9GSTdy14r/
iZ2Jviky0eiQpYLuw/PaIk6sVpXhwVsEp1/V4KY3kOl4DPLkjKISkohyxked6sZT
ymjPjWvAsdirPtJvrast7PeTiGB7BGsw0fkuUAGESOypmCzN/K2Q+3zwfR6z7kDZ
EUVtDZANC3vUmqfnu30Uc9MVCYC/5wghNVCzGzIJ8I9Oh78vO51N89YTggsFZbzG
Pe5uvV5RR+KuCBFv1IxEVtQssiSZAtqD4R1sib8QFYR1mg6Reo5O797xrX1Km1EP
Mh9sO+MOXX0CAwEAAaOCDBAwggwMMB8GA1UdIwQYMBaAFLdrouqoqoSMeeq02g+Y
ssWVdrn0MB0GA1UdDgQWBBTOVl1YxqjPH2Ae29ypDfr/gIOBczCCCiYGA1UdEQSC
Ch0wggoZghZmbGFzaC5zb255cGljdHVyZXMuY29tghliZW5lZml0cy5zb255cGlj
dHVyZXMuY29tghZicmFuZC5zb255cGljdHVyZXMuY29tgg9jZG4ucGxheXNob3cu
aW+CI2Nkbi5zb255cGljdHVyZXN0ZWxldmlzaW9uZ2FtZXMuY29tghpkZXYuYnJh
bmQuc29ueXBpY3R1cmVzLmNvbYIcZGV2LmZvcm1hdHMuc29ueXBpY3R1cmVzLmNv
bYIYZGV2LmZ5Yy5zb255cGljdHVyZXMuY29tgiNkZXYuZ2xvYmFsYXNzZXRodWIu
c29ueXBpY3R1cmVzLmNvbYIaZGV2Lm1lZGlhLnNvbnlwaWN0dXJlcy5jb22CHmRl
di5wcmVzc2tpdHMuc29ueXBpY3R1cmVzLmNvbYIcZGV2LnByZXZpZXcuc29ueXBp
Y3R1cmVzLmNvbYIfZGV2LnFhLWFkbWluLndoZWVsb2Zmb3J0dW5lLmNvbYIfZGV2
LnFhLWdhbWVzLndoZWVsb2Zmb3J0dW5lLmNvbYIjZGV2LnFhLWdpdmVhd2F5cy53
aGVlbG9mZm9ydHVuZS5jb22CGWRldi5xYS53aGVlbG9mZm9ydHVuZS5jb22CGmRl
di5zb255cGljdHVyZXNtdXNldW0uY29tgg5kZXYud3d0YmFtLmNvbYIVZmItc3Rh
Z2Uud2hlZWxwb3AuY29tgg9mYi53aGVlbHBvcC5jb22CGGZvcm1hdHMuc29ueXBp
Y3R1cmVzLmNvbYIUZnljLnNvbnlwaWN0dXJlcy5jb22CGGdhbS1kZXYuc29ueXBp
Y3R1cmVzLmNvbYIUZ2FtLnNvbnlwaWN0dXJlcy5jb22CH2dsb2JhbGFzc2V0aHVi
LnNvbnlwaWN0dXJlcy5jb22CGGd1bS1kZXYuc29ueXBpY3R1cmVzLmNvbYIUZ3Vt
LnNvbnlwaWN0dXJlcy5jb22CFWx0LndoZWVsb2Zmb3J0dW5lLmNvbYIWbWVkaWEu
c29ueXBpY3R1cmVzLmNvbYIecHJkLnNvbnlwaWN0dXJlc3RlbGV2aXNpb24uY29t
ghpwcmVzc2tpdHMuc29ueXBpY3R1cmVzLmNvbYIYcHJldmlldy5zb255cGljdHVy
ZXMuY29tghlwcm9kLWd1bS5zb255cGljdHVyZXMuY29tghtwcm9kLnNvbnlwaWN0
dXJlc211c2V1bS5jb22CF3Byb2Qud2hlZWxvZmZvcnR1bmUuY29tghtxYS1hZG1p
bi53aGVlbG9mZm9ydHVuZS5jb22CG3FhLWdhbWVzLndoZWVsb2Zmb3J0dW5lLmNv
bYIfcWEtZ2l2ZWF3YXlzLndoZWVsb2Zmb3J0dW5lLmNvbYIVcWEud2hlZWxvZmZv
cnR1bmUuY29tghtzZWN1cmUtZGV2LnNvbnlwaWN0dXJlcy5jb22CHHNlY3VyZS1w
cm9kLnNvbnlwaWN0dXJlcy5jb22CF3NlY3VyZS5zb255cGljdHVyZXMuY29tghBz
b255cGljdHVyZXMuY29tghZzb255cGljdHVyZXNtdXNldW0uY29tghpzdGcuYnJh
bmQuc29ueXBpY3R1cmVzLmNvbYIcc3RnLmZvcm1hdHMuc29ueXBpY3R1cmVzLmNv
bYIYc3RnLmZ5Yy5zb255cGljdHVyZXMuY29tgiNzdGcuZ2xvYmFsYXNzZXRodWIu
c29ueXBpY3R1cmVzLmNvbYISc3RnLmltYWdld29ya3MuY29tghpzdGcubWVkaWEu
c29ueXBpY3R1cmVzLmNvbYIec3RnLnByZXNza2l0cy5zb255cGljdHVyZXMuY29t
ghxzdGcucHJldmlldy5zb255cGljdHVyZXMuY29tghRzdGcuc29ueXBpY3R1cmVz
LmNvbYITc3RnLnNvbnlwaWN0dXJlcy5lc4Idc3RnLnNvbnlwaWN0dXJlc2FuaW1h
dGlvbi5jb22CDnN0Zy53d3RiYW0uY29tggp3d3RiYW0uY29tghN3d3cuY2RuLnBs
YXlzaG93LmlvghJ3d3cuaW1hZ2V3b3Jrcy5jb22CEnd3dy5QbGF5U2hvd1RWLmNv
bYITd3d3LnNvbnlwaWN0dXJlcy5iZYIUd3d3LnNvbnlwaWN0dXJlcy5jb22CE3d3
dy5zb255cGljdHVyZXMuZXOCE3d3dy5zb255cGljdHVyZXMuZnKCHXd3dy5zb255
cGljdHVyZXNhbmltYXRpb24uY29tghp3d3cuc29ueXBpY3R1cmVzbXVzZXVtLmNv
bYIQd3d3LndoZWVscG9wLmNvbYIOd3d3Lnd3dGJhbS5jb22CE3d3dy5zb255cGlj
dHVyZXMuaWWCFnd3dy5zb255cGljdHVyZXMuY28udWuCE3d3dy5zb255cGljdHVy
ZXMuY2GCFmNoYW1lbGVvbi5zcGUuc29ueS5jb22CD3NvbnlwaWN0dXJlcy5qcIIV
c3RhZ2Uuc29ueXBpY3R1cmVzLmpwghN3d3cuc29ueXBpY3R1cmVzLmpwgh9xYS1n
YW1lcy5zcGUud2hlZWxvZmZvcnR1bmUuY29tgiNxYS1naXZlYXdheXMuc3BlLndo
ZWVsb2Zmb3J0dW5lLmNvbYIZcWEuc3BlLndoZWVsb2Zmb3J0dW5lLmNvbYITc3Rn
LnN0YWdlNmZpbG1zLmNvbYIVc3RnLnRoZWRhaWx5YnVnbGUubmV0ghN3d3cuc3Rh
Z2U2ZmlsbXMuY29tghV3d3cudGhlZGFpbHlidWdsZS5uZXSCHXN0Zy1iZW5lZml0
cy5zb255cGljdHVyZXMuY29tghN3d3cuc29ueXBpY3R1cmVzLmRlghR3d3cyLnNv
bnlwaWN0dXJlcy5kZYITd3d3LnNvbnlwaWN0dXJlcy5hdIIUd3d3Mi5zb255cGlj
dHVyZXMuYXSCF3d3dy5zb255cGljdHVyZXMuY29tLmJyghVpbXBvc3NpYmxlc2Np
ZW5jZS5jb22CGXd3dy5pbXBvc3NpYmxlc2NpZW5jZS5jb22CGnd3dzIuaW1wb3Nz
aWJsZXNjaWVuY2UuY29tghlkZXYuaW1wb3NzaWJsZXNjaWVuY2UuY29tghlzdGcu
aW1wb3NzaWJsZXNjaWVuY2UuY29tghN3d3cuc29ueXBpY3R1cmVzLml0ghR3d3cy
LnNvbnlwaWN0dXJlcy5pdIIjZ2xvYmFsYXNzZXRodWItZGV2LnNvbnlwaWN0dXJl
cy5jb22CKXN0YWdlLXByb2R1Y3Rpb25zZXJ2aWNlcy5zb255cGljdHVyZXMuY29t
gi53d3cyLnN0YWdlLXByb2R1Y3Rpb25zZXJ2aWNlcy5zb255cGljdHVyZXMuY29t
gi1zdGctc3RhZ2UtcHJvZHVjdGlvbnNlcnZpY2VzLnNvbnlwaWN0dXJlcy5jb20w
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCB
jwYDVR0fBIGHMIGEMECgPqA8hjpodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGln
aUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3JsMECgPqA8hjpodHRwOi8vY3Js
NC5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3Js
MD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cu
ZGlnaWNlcnQuY29tL0NQUzB/BggrBgEFBQcBAQRzMHEwJAYIKwYBBQUHMAGGGGh0
dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBJBggrBgEFBQcwAoY9aHR0cDovL2NhY2Vy
dHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS0xLmNy
dDAJBgNVHRMEAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUA
A4IBAQA+tBhk5BqiAUPnKsXqjEkEWkR2pd9mE1PK4f4q3YS3OjoK4/oFOhJX88Dr
Ohh94Fh9Y79uuN5v4FKHKL2kVCADNm6f0aPIjQ9yjXRyadm3Zj8lAJFaZtLpEyw1
x5PMmBe5pNWkAc2m1i77+PQQpcgIELwr3W+GDd/Dih6spn8lFm1yVXAcwSF34kvE
T33yXF208h8TCd7+nVus5s1ffO3kGHvVnASSGUGg9qv1Dbln5wDhk14H0q/rEth6
MstX6eEldoJUmc8a+yPgHSly6dIX9gH0uqCY6NtbtpgEynYpPSPlFjCusV1iSiPe
SGUyIIVAyglKvPC+c9qCW/7YdoHg
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lhDd8b7ViEszVoohNOY
zlKlFVUQVeHxRZkrdHgjUYYfAwhNFwLNKLEFtyd2sG0dH0ZJN3LXiv+JnYm+KTLR
6JClgu7D89oiTqxWleHBWwSnX9XgpjeQ6XgM8uSMohKSiHLGR53qxlPKaM+Na8Cx
2Ks+0m+tqy3s95OIYHsEazDR+S5QAYRI7KmYLM38rZD7fPB9HrPuQNkRRW0NkA0L
e9Sap+e7fRRz0xUJgL/nCCE1ULMbMgnwj06Hvy87nU3z1hOCCwVlvMY97m69XlFH
4q4IEW/UjERW1CyyJJkC2oPhHWyJvxAVhHWaDpF6jk7v3vGtfUqbUQ8yH2w74w5d
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19564161804969351794262987479631453734
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Culver City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sony Pictures Entertainment, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flash.sonypictures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30593194178694795109055152281064100156711285588184755147146049495936684311897319754701318099685520246416574377059559531238069874368575497217040009337341033520786688679663344984364251770913616764955484261036277402327016900844155854098402054662836799278177752903289955310433521331545241819415838354577532679089273830491552331644216219263920481028782801454548263324025121682465755648749677720426388106208185570481188810761749926985904313977295845681795861900833244392340523921830292753091428385724028172387547710657950284643080616107222288178302819247271682593750535511320029864182787342882473105950475404238748314918269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ce565d58c6a8cf1f601edbdca90dfaff80838173
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2589 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flash.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefits.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brand.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.playshow.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.sonypicturestelevisiongames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.brand.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.formats.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.fyc.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.globalassethub.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.media.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.presskits.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.preview.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.qa-admin.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.qa-games.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.qa-giveaways.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.qa.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.sonypicturesmuseum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.wwtbam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fb-stage.wheelpop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fb.wheelpop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formats.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fyc.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gam-dev.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gam.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalassethub.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gum-dev.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gum.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lt.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prd.sonypicturestelevision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presskits.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-gum.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.sonypicturesmuseum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-admin.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-games.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-giveaways.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-dev.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-prod.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonypicturesmuseum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.brand.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.formats.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.fyc.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.globalassethub.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.imageworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.media.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.presskits.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.preview.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.sonypictures.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.sonypicturesanimation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.wwtbam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwtbam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdn.playshow.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imageworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.PlayShowTV.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypicturesanimation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypicturesmuseum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wheelpop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wwtbam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chameleon.spe.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonypictures.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.sonypictures.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-games.spe.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-giveaways.spe.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.spe.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.stage6films.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.thedailybugle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage6films.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thedailybugle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-benefits.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.sonypictures.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.sonypictures.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impossiblescience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.impossiblescience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.impossiblescience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.impossiblescience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.impossiblescience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.sonypictures.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalassethub-dev.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-productionservices.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.stage-productionservices.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-stage-productionservices.sonypictures.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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