www.pro.sony.eu

Issued by R3

About this certificate

This digital certificate with serial number 04:55:5c:67:ad:f6:4c:13:7c:9a:3d:6e:fd:34:ce:e0:34:c9 was issued on by Let's Encrypt.

With 53 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.pro.sony.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:55:5c:67:ad:f6:4c:13:7c:9a:3d:6e:fd:34:ce:e0:34:c9
Serial Number (int): 377495972225879931157439003043636615066825
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c8:98:9c:27:00:44:37:35:c9:7a:c7:0c:85:67:83:b8:e4:23:9d:01
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): da:a7:35:1a:e5:54:70:17:27:6f:c0:53:13:8e:25:f8:39:d0:e9:b8
Fingerprint (sha256): 33:6c:c7:52:ad:88:5c:4b:d2:c7:7e:66:4c:59:e7:03:6d:1f:d2:2d:99:30:22:77:25:ea:a5:74:39:43:2b:75

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.pro.sony.eu

53

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pro.sony.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assets.pro.sony.eu
concierge.sony.at
concierge.sony.ba
concierge.sony.be
concierge.sony.bg
concierge.sony.ch
concierge.sony.co.uk
concierge.sony.com.mk
concierge.sony.com.tr
concierge.sony.cz
concierge.sony.de
concierge.sony.dk
concierge.sony.ee
concierge.sony.es
concierge.sony.fi
concierge.sony.fr
concierge.sony.gr
concierge.sony.hr
concierge.sony.hu
concierge.sony.ie
concierge.sony.it
concierge.sony.kz
concierge.sony.lt
concierge.sony.lu
concierge.sony.nl
concierge.sony.no
concierge.sony.pl
concierge.sony.pt
concierge.sony.ro
concierge.sony.rs
concierge.sony.ru
concierge.sony.se
concierge.sony.si
concierge.sony.sk
concierge.sony.ua
concierge.sonylatvija.com
pro.sony-asia.com
pro.sony.co.in
pro.sony.co.nz
pro.sony.com.au
ps.sony.co.kr
www.pro.sony-asia.com
www.pro.sony.co.in
www.pro.sony.co.nz
www.pro.sony.com.au
www.pro.sony.com.cn
www.pro.sony.eu
www.ps.sony.co.kr
www.sony-psmea.com
www.sonybiz.ca
www.sonybiz.net
www.sonybiz.ru
www.sonypro.com.br

Other certificates including the domain name sony.eu

(limited to 100 certificates)
service6.octopus3.sony.eu
dev.service2.octopus3.sony.eu
preview-production-pdp.sony.co.uk
service12.octopus3.sony.eu
beta.sony.com
psejira.sony.eu
producttestersnl.sony.eu
service9.octopus3.sony.eu
tqa.service6.octopus3.sony.eu
www.sony.at
preview-production-pdp.sony.co.uk
dev.service9.octopus3.sony.eu
stg2.crmservice.sony.eu
sra-eu.sony.eu
www.sony.at
beta.sony.com
presscentre.sony.eu
service4.octopus3.sony.eu
preview.sony.com
tqa.service6.octopus3.sony.eu
training.sony.eu
www.sony.pt
preview-production-pdp.sony.co.uk
www.sony.com.sg
esp-marketingtool.sony.eu
producttestersfr.sony.eu
preview-production-pdp.sony.co.uk
preview-production-pdp.sony.co.uk
test.sony.com
dev.crmservice.sony.eu
assets.pro.sony.eu
dev.crmservice.sony.eu
dev.service5.octopus3.sony.eu
preview-production-pdp.sony.co.uk
training.sony.eu
test.sony.com
assist.sony.eu
students.sony.eu
presscentre.sony.eu
crmservice.sony.eu
preview-test.sony.com
events.sony.eu
service5.octopus3.sony.eu
dev.service8.octopus3.sony.eu
preview-production-pdp.sony.co.uk
admin.octopus3.sony.eu
www.sony.at
premium-services.staging.sony.eu
dev.service12.octopus3.sony.eu
www.sony.at
dev.service5.octopus3.sony.eu
tqa.service4.octopus3.sony.eu
production-pdp.sony.co.uk
tqa.crmservice.sony.eu
end-user.promotions.sony.eu
preview-production-pdp.sony.co.uk
preview-production-pdp.sony.co.uk
webservices2.sony.eu
uat-pdp.sony.co.uk
www.pro.sony.eu
tqa.admin.octopus3.sony.eu
beta.sony.com
preview-production-pdp.sony.co.uk
tqa.service9.octopus3.sony.eu
preview-test.sony.com
serviceportal.staging.sony.eu
sonar.staging.sony.eu
preview-production-pdp.sony.co.uk
tqa.service9.octopus3.sony.eu
www.sony.at
test.sony.com
stgeagle.sony.eu
preview.sony.com
preview-test.sony.com
www.sony.at
service9.octopus3.sony.eu
tqa.service10.octopus3.sony.eu
products.pro.sony.eu
preview-test.sony.com
premium-services.staging.sony.eu
production-pdp.sony.co.uk
www.pro.sony.eu
production-pdp.sony.co.uk
www.pro.sony.eu
www.relay.sony.eu
tqa.service1.octopus3.sony.eu
www.sony.at
tqa.service7.octopus3.sony.eu
preview-production-pdp.sony.co.uk
premium-services.staging.sony.eu
intranet.ibiss.sony.eu
preview.sony.com
preview.sony.com
preview.sony.com
www.pro.sony.eu
preview.sony.com
beta.sony.com
production-pdp.sony.co.uk
tqa.service9.octopus3.sony.eu
production-pdp.sony.co.uk

Certificate

The complete raw certificate details for www.pro.sony.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9E3iwHDIvKIsIh/544bH
Zzj2oMQJOicp8YfxzySkDv/49CXsqEGlw2DMe6HOGFFvbRHo26NRFTpFiiJ51WYd
Vd65Wx8R2Wo4WEk4ltToKoeLFYFE6zmli6wBMz372cqn46+jv/GR0qdDALQU59NH
VtZ8TtB10JpyuR8AqisYofk0LJgK5ddHxjsqrMLlOBap1COTSCGT1UuQ8KdSzVtW
8sa8rgsLtwbCQCeqBIVwkh4CjWUouu4SJZJNwcbko8ZaXt895NEgeOIqdNEJNla7
u72k7L6uaD6Euq17rFNElo7YWV591wD91l65DlcwJHNWC7tbF4i2YN2DglK8aWiD
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377495972225879931157439003043636615066825
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-21 22:51:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 22:51:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pro.sony.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30840553305950355137755099300282111240342411649140842580513740026936781257792823798311802981087307488463683606351383769052595733368590657911305259964815407059645518582135032530489624442745433660692619051213622898082102162276935177246185248647105863009565685181085624145336312314325054106947609245620069715228335654980451441832163088501056567464405590623001358154525629204489997164188070808315523504054539459346722492097430612702360956020980011491992814567533156657737725593084372883813748866657542973736237704822386127945128699294439902915687941520762371726984158608750838519616501413730890801128332943996841433269067
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c8989c2700443735c97ac70c856783b8e4239d01
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1021 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.pro.sony.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.com.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sony.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.sonylatvija.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.sony-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.sony.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.sony.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.sony.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps.sony.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pro.sony-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pro.sony.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pro.sony.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pro.sony.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pro.sony.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pro.sony.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.sony.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sony-psmea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonybiz.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonybiz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonybiz.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypro.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aba281594000004030046304402203d34a8067129d63b4b419adafcd6c826ad9f06f2bd3c79c5110a9fac8613901502205eb7a1f3130e6ac37c1bf7b8b31729261e0a01dc4b01a29ca6a873b92ae7eb31007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aba281587000004030047304502204d15f6dbe3237c78f889cea74a69af3124c8225cfd82028edb65f696308179b1022100fd8ccf9566d6dc1c782553b5253be3008255348f52520fa49de46e04d937fb19
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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