flash.sonypictures.com

- Sony Pictures Entertainment, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0e:12:20:43:6b:33:a4:28:38:7f:c9:75:71:5d:3a:94 was issued on by DigiCert Inc.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Sony Pictures Entertainment, Inc.

Organization: Sony Pictures Entertainment, Inc.
State / Province: California
Locality: Culver City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:12:20:43:6b:33:a4:28:38:7f:c9:75:71:5d:3a:94
Serial Number (int): 18703307663013980904859448963411819156
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5a:f0:f8:6c:5b:3b:79:c2:a9:d2:4d:e4:34:94:92:0e:eb:5a:e4:7c
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): ba:ec:10:49:c1:2c:bf:99:d6:02:b4:26:bb:00:6b:2c:12:4a:b7:82
Fingerprint (sha256): 48:de:af:af:eb:79:e0:ff:f4:4f:cb:e9:79:91:66:21:04:71:fd:0c:09:36:90:cf:de:8f:26:9c:83:9f:2a:8c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate flash.sonypictures.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for flash.sonypictures.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

flash.sonypictures.com
benefits.sonypictures.com
brand.sonypictures.com
cdn.playshow.io
cdn.sonypicturestelevisiongames.com
dev.brand.sonypictures.com
dev.formats.sonypictures.com
dev.fyc.sonypictures.com
dev.globalassethub.sonypictures.com
dev.media.sonypictures.com
dev.presskits.sonypictures.com
dev.preview.sonypictures.com
dev.qa-admin.wheeloffortune.com
dev.qa-games.wheeloffortune.com
dev.qa-giveaways.wheeloffortune.com
dev.qa.wheeloffortune.com
dev.sonypicturesmuseum.com
dev.wwtbam.com
fb-stage.wheelpop.com
fb.wheelpop.com
formats.sonypictures.com
fyc.sonypictures.com
gam-dev.sonypictures.com
gam.sonypictures.com
globalassethub.sonypictures.com
gum-dev.sonypictures.com
gum.sonypictures.com
lt.wheeloffortune.com
media.sonypictures.com
prd.sonypicturestelevision.com
presskits.sonypictures.com
preview.sonypictures.com
prod-gum.sonypictures.com
prod.sonypicturesmuseum.com
prod.wheeloffortune.com
qa-admin.wheeloffortune.com
qa-games.wheeloffortune.com
qa-giveaways.wheeloffortune.com
qa.wheeloffortune.com
secure-dev.sonypictures.com
secure-prod.sonypictures.com
secure.sonypictures.com
sonypictures.com
sonypicturesmuseum.com
stg.brand.sonypictures.com
stg.formats.sonypictures.com
stg.fyc.sonypictures.com
stg.globalassethub.sonypictures.com
stg.imageworks.com
stg.media.sonypictures.com
stg.presskits.sonypictures.com
stg.preview.sonypictures.com
stg.sonypictures.com
stg.sonypictures.es
stg.sonypicturesanimation.com
stg.wwtbam.com
wwtbam.com
www.cdn.playshow.io
www.imageworks.com
www.PlayShowTV.com
www.sonypictures.be
www.sonypictures.com
www.sonypictures.es
www.sonypictures.fr
www.sonypicturesanimation.com
www.sonypicturesmuseum.com
www.wheelpop.com
www.wwtbam.com
www.sonypictures.ie
www.sonypictures.co.uk
www.sonypictures.ca
chameleon.spe.sony.com
sonypictures.jp
stage.sonypictures.jp
www.sonypictures.jp
qa-games.spe.wheeloffortune.com
qa-giveaways.spe.wheeloffortune.com
qa.spe.wheeloffortune.com
stg.stage6films.com
stg.thedailybugle.net
www.thedailybugle.net
stg-benefits.sonypictures.com
www.sonypictures.de
www.sonypictures.at
www.sonypictures.com.br
impossiblescience.com
www.impossiblescience.com
www2.impossiblescience.com
dev.impossiblescience.com
stg.impossiblescience.com
www.sonypictures.it
globalassethub-dev.sonypictures.com
stage-productionservices.sonypictures.com
www2.stage-productionservices.sonypictures.com
stg-stage-productionservices.sonypictures.com
www.sonypictures.com.ar
www.sonypictures.com.tw

Other certificates including the domain name sonypictures.com

(limited to 100 certificates)
conectados.sonypictures.com
*.sonypictures.com
redeem.sonypictures.com
origin-flash.sonypictures.com
edge-micros1.sonypictures.com
secure.sonypictures.com
origin-flash.sonypictures.com
edge-micros2.sonypictures.com
brand.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
extaz-qa.spe.sony.com
edge-micros2.sonypictures.com
edge-micros2.sonypictures.com
sites.sonypictures.com
sites.sonypictures.com
secure.sonypictures.com
globalassethub.sonypictures.com
www.stage6films.com
api.stg-stage-productionservices.sonypictures.com
pub.email.sonypictures.com
connect.sonypictures.com
sites.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
stage-microsites.sonypictures.com
portals.sonypictures.com
microsites.sonypictures.com
image.20210419.200345.s6.et.yellsatcloud.com
globalassethub.sonypictures.com
portals.sonypictures.com
portals.sonypictures.com
conectados.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
sites.sonypictures.com
edge-portals.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
edge-micros2.sonypictures.com
flash.sonypictures.com
pub.email.sonypictures.com
griffin.sonypictures.com
view.email.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
sites.sonypictures.com
audiolibrary.sonypictures.com
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
akamai-san77.exacttarget.com
stage-microsites.sonypictures.com
www.sonypictures.co.uk
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
viewer.sonypictures.com
secure.sonypictures.com
edge-portals.sonypictures.com
sites2.sonypictures.com
edge-micros2.sonypictures.com
test.rewards.sonypictures.com
www.stage6films.com
test.rewards.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
gam.sonypictures.com
microsites.sonypictures.com
flash.sonypictures.com
view.email.games.sonypictures.com
rewards.sonypictures.com
test.redeem.sonypictures.com
edge-micros1.sonypictures.com
brand.sonypictures.com
gam.sonypictures.com
stage-microsites.sonypictures.com
perc.sonypictures.com
sony-prod.actioniq.mr-in.com
click.email.sonypictures.com
stage-edge-portals.sonypictures.com
stage-microsites.sonypictures.com
tweets.sonypictures.com
flash.sonypictures.com
rewards.sonypictures.com
pages.email.games.sonypictures.com
view.email.sonypictures.com
rewards.sonypictures.com
redeem.sonypictures.com
microsites.sonypictures.com
redeem.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
origin-flash.sonypictures.com

Certificate

The complete raw certificate details for flash.sonypictures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkS86b8zgJxinSQ6NF+L
wo91xYQNtm4N5EM5KBwva6yAXUkXWjfpnaua95yBYCyoP16zaQHTHVpS3BYqg9B4
sGarjtQWf7Ys4in0jTnwlfrA9xsy3wfoRPfco08qzh0uZyyH2kSHu+uO72yRYyOH
rMGpHVM/Dhwh947gENbvMzccJNvcedqo0yV0m2uox6w2hDFMAIM7eAwlEFIZlnrI
EugXbjV9k392CZUGFvAmQnUkiuBQ1EHMyw6k0LlrBTIuaj8wuD0822phNFtjumzI
uftp+QEEOviSGmnZxbPqEr4tj0zBAU6S4Jzlp2NDwmHAUw9UoCk4o+/VXvzERxIF
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18703307663013980904859448963411819156
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Culver City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sony Pictures Entertainment, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flash.sonypictures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24524127105783919567609820295639238176212455269555494797623953925527408386220093094455854553661177532985499040913576365568289872331114748549029232253728312756399797742289372054935380232743060348829933638504601757979209737651112252021721658386890952045345915351888627375981418656262773885947191381520817732703981852191747031048006448615419176031514723310912072673613700858892263180822785405221164268195921362968554277800698928492595594464795672716871164953366369632984244789702983396104346597497138266885711765794573160038168029584338939563354821601956010899315754501616627028839784194856190797306106136092603353007529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5af0f86c5b3b79c2a9d24de43494920eeb5ae47c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2552 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flash.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefits.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brand.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.playshow.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.sonypicturestelevisiongames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.brand.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.formats.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.fyc.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.globalassethub.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.media.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.presskits.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.preview.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.qa-admin.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.qa-games.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.qa-giveaways.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.qa.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.sonypicturesmuseum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.wwtbam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fb-stage.wheelpop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fb.wheelpop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formats.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fyc.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gam-dev.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gam.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalassethub.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gum-dev.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gum.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lt.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prd.sonypicturestelevision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presskits.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-gum.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.sonypicturesmuseum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-admin.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-games.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-giveaways.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-dev.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-prod.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonypicturesmuseum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.brand.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.formats.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.fyc.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.globalassethub.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.imageworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.media.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.presskits.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.preview.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.sonypictures.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.sonypicturesanimation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.wwtbam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwtbam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdn.playshow.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imageworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.PlayShowTV.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypicturesanimation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypicturesmuseum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wheelpop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wwtbam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chameleon.spe.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonypictures.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.sonypictures.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-games.spe.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-giveaways.spe.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.spe.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.stage6films.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.thedailybugle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thedailybugle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-benefits.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impossiblescience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.impossiblescience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.impossiblescience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.impossiblescience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.impossiblescience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalassethub-dev.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-productionservices.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.stage-productionservices.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-stage-productionservices.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.com.tw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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