la.axn.com

- Sony Pictures Entertainment -

Issued by Symantec Class 3 Secure Server SHA256 SSL CA

About this certificate

This digital certificate with serial number 26:15:cf:68:42:eb:32:b3:7a:52:0a:3a:e6:61:f4:a9 was issued on by Symantec Corporation.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Sony Pictures Entertainment

Organization: Sony Pictures Entertainment
State / Province: California
Locality: Culver City
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 26:15:cf:68:42:eb:32:b3:7a:52:0a:3a:e6:61:f4:a9
Serial Number (int): 50623908793083239574736339260122723497
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: db:62:20:fb:7d:02:89:7c:d2:3b:6f:c7:e4:32:6c:05:52:1d:ad:b1

Fingerprint (sha1): 1f:5d:f4:1d:75:bd:77:5b:fc:3c:0b:17:6f:f3:67:e4:c8:f6:d4:36
Fingerprint (sha256): 54:19:1a:94:4e:64:7f:58:25:a0:ec:a3:64:02:47:d9:e1:7c:55:08:e6:a2:cf:9a:2a:36:06:e8:c0:54:c0:63

Issuing Certificate URL: http://sg.symcb.com/sg.crt

Revocation information

OCSP Server: http://sg.symcd.com
CRL Distribution Point: http://sg.symcb.com/sg.crl

Check the revocation status for certificate la.axn.com

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for la.axn.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

affiliates.get.tv
cinesony.com
www.gencoin.io
get.tv
advertising.crackle.com
br.axn.com
play.br.axn.com
plus.br.canalsony.com
br.canalsony.com
la.axn.com
play.la.axn.com
plus.la.canalsony.com
la.canalsony.com
www.cinesony.com
contests.crackle.com
fyc.crackle.com
gencoin.io
www.get.tv
picturethis.crackle.com
www.sportsjeopardy.com
www.sonymoviechannel.com
plus.la.axn.com

Other certificates including the domain name axn.com

(limited to 100 certificates)
www.axn.com
www.sonytv.com
hu.axn.com
la.axn.com
hu.axn.com
www.axn.com
la.axn.com
www.axnspin.pl
la.sonymovies.com
la.axn.com
la.axn.com
soporte.canalsony.com
login.la.axn.com
www.axn.com
la.axn.com
www.axn.com
www.axnspin.pl
hu.axn.com
www.axn.com
www.axn.com
login.la.axn.com
soporte.canalsony.com
login.la.axn.com
www.axnspin.pl
www.axnspin.pl
www.axn.com
la.axn.com
la.axn.com
hu.axn.com
la.axn.com
login.hu.axn.com
edge-affiliates.cinesony.com
www.sonytv.com
edge-affiliates.cinesony.com
login.hu.axn.com
sonymovies.com
edge-affiliates.cinesony.com
hu.axn.com
www.axnspin.pl
hu.axn.com
hu.axn.com
hu.axn.com
soporte.canalsony.com
hu.axn.com
soporte.canalsony.com
la.axn.com
la.axn.com
www.axnspin.pl
la.axn.com
hu.axn.com
www.axn.com
www.sonytv.com
edge-affiliates.cinesony.com
hu.axn.com
hu.axn.com
www.axnspin.pl
hu.axn.com
la.axn.com
www.sonytv.com
www.sonytv.com
www.axnspin.pl
hu.axn.com
la.axn.com
soporte.canalsony.com
www.axnspin.pl
la.axn.com
edge-affiliates.cinesony.com
hu.axn.com
la.axn.com
www.sonytv.com
www.axnspin.pl
la.axn.com
edge-affiliates.cinesony.com
www.sonytv.com
soporte.canalsony.com
www.axnspin.pl
www.sonytv.com
www.axn.com
perc.sonypictures.com
login.br.axn.com
soporte.canalsony.com
la.axn.com
www.sonytv.com
soporte.canalsony.com
la.axn.com
perc.sonypictures.com
www.axnspin.pl
login.br.axn.com
www.sonytv.com
login.la.axn.com
www.axnspin.pl
www.axn.com
la.axn.com
www.axnspin.pl
hu.axn.com
la.axn.com
hu.axn.com
www.axnspin.pl
soporte.canalsony.com
edge-affiliates.cinesony.com

Certificate

The complete raw certificate details for la.axn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S4aoJFQZDOWClA9dV4O
CeKoyZQxm6DR1Uysrn0CHuw6XTMcRdzcKnZ1zBrcZzaDsPCbMl5RxwxzSVVu3dIi
QJ0dWh7VbjbmX5MXjBGve08Xc7yNTZqbW7L5Co6+pnHAgYceOUd7vMYOC4DWmJkt
TX626OF9eqDaIAuT7RfKBWXYgF/QPtpCQzgH2Ec86Ay4g0M90oBK4Lj3ukvTQ7kg
iG2V3D2Pk81pgW6NbYFDO4nswi7WqKyPqQfDeLbS9VwxJVc6/fq2hMA3Zwgyxgzj
dkU3x/JjebL40jqoWjp/ZhCxR24YQVil1umYJQ5obTX8HddHeywpYpt23lC8tZhw
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 50623908793083239574736339260122723497
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Culver City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sony Pictures Entertainment'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'la.axn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26406540473838567966837666747271934898220729612750314752112376463395312119728338164429178978934092099736386083995498758026593636747133746490241786044529341529890665200581900597827730886489627817201310585919752855768038453664289154320447502098503301724772830276799899750043155950446991194915025227436280236788436230259576976130686521336766314348596695243585616854883210705451719197204348396705728903269518516735314094747237159453001632976559139028889220199504689509415615389343710808477019383006427352413601913044530522616085885160825706549064948717951208120918873140043538000358173438678558851607618299183566532669643
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (399 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliates.get.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinesony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gencoin.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advertising.crackle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br.axn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.br.axn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plus.br.canalsony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br.canalsony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la.axn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.la.axn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plus.la.canalsony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la.canalsony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cinesony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contests.crackle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fyc.crackle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gencoin.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.get.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picturethis.crackle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsjeopardy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonymoviechannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plus.la.axn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName db6220fb7d02897cd23b6fc7e4326c05521dadb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015bef038ac90000040300473045022100958cd4a542678865fb8149e8db6091130c45319b5a9fa8ea2b83433d67d165b102207064657bad98cdfdcec44d9e3c405c07f2223e375640eded5c10247839b9c807007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015bef038af10000040300473045022100de4d34a88373ae783bf9b90c0c7660cb1b45cb9f5fec47b447c6b342681fc00802205bd0c34b711c35497b14c0ba8d7d4ad3a0e1462f029a7f98a814f3f219aa028a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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