edge-micros2.sonypictures.com

- Sony Pictures Entertainment, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 06:cb:cc:b6:4d:8c:40:ae:50:54:9e:4f:4e:8e:44:69 was issued on by DigiCert Inc.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Sony Pictures Entertainment, Inc.

Organization: Sony Pictures Entertainment, Inc.
State / Province: California
Locality: Culver City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:cb:cc:b6:4d:8c:40:ae:50:54:9e:4f:4e:8e:44:69
Serial Number (int): 9033556292076688600856876724333200489
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 92:92:be:01:92:27:6d:62:47:d5:ab:53:5d:d1:92:fc:4b:a5:6a:55
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 91:2e:4c:f3:5b:f5:8c:e2:26:7e:1d:93:03:af:95:5e:eb:9b:d2:0b
Fingerprint (sha256): 75:0e:13:bb:74:5c:e2:35:a4:26:cd:92:0a:1e:05:23:35:8f:d9:f6:c1:1b:1a:6f:32:29:b4:45:ab:4a:a2:1a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate edge-micros2.sonypictures.com

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for edge-micros2.sonypictures.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

edge-micros2.sonypictures.com
ghostbusters.com
watch.sonypictures.ca
www.biomovie.jp
www.ghostbusters.com
www.paulmovie.com
www.peterrabbit-movie.jp
www.peterrabbitmovie.ca
www.spiderman-movie.jp
www.spiderversemovie.ca
www.thestarmovie.com
www.uncharted-movie.jp
www.venom-movie.jp
www.zombie-land.jp
www.truffle-movie.jp
www.helldogs.jp
www.catchuponspidey.com
www.spider-verse.jp
app.spidermannowayhome.movie
testing.spehosting.com
www.vatican-exorcist.jp
www.spider-verse-tix.ca
www.gt-movie.jp
www.spider-verse-billets.ca
tickets.acrossthespiderverse.movie
www.haroldandthepurplecrayon.movie
www.haroldspurplecrayon.com
www.kravenmovie.com
www.kraven-movie.jp
tickets.miracleclubmovie.com
www.kraventhehuntermovie.com.au
www.napoleon.movie
www.thanksgiving.movie
www.napoleon-movie.jp
licensetorace.granturismo.movie
www.columbiapictures100.com
www.diymovienightathome.com
www.journeytobethlehemmovie.com
www.justicier-billets.ca
tickets.carlosfilm.com
buy.equalizer.movie
www.equalizer.jp
www.journeytobethlehemmovie.com.au
www.n-importe-qui-sauf-toi-billets.ca
www.anyone-but-you-tix.ca
www.anyonebutyoumovie.com.au
anyonebutyou.sonypictures.co.uk
www.anyonebutyoumovie.co.nz
www.garfield-movie.jp
www.the-book-of-clarence-tix.ca
www.ghostbustersar.com
www.cultkillermovie.com
www.madamewebmovie.com.au
www.madamewebmovie.co.nz
madameweb.sonypictures.com.sg
madameweb.sonypictures.com.tw
madameweb.sonypictures.co.uk
www.100for100sale.com
tickets.peasantsmovie.com
tickets.ameliemovie.com
www.tarotmovie.com
www.takarajima-movie.jp
madameweb.sonypictures.es
www.demon-slayer-movie-tix.ca
thepersianversion.sonypictures.co.uk
www.ghostbustersmovie.net
www.ghostbustersfrozenempire.com.au
ghostbusters.sonypictures.be
www.ghostbusters-movie-tix.ca
www.sos-fantomes-lefilm-billets.ca
ghostbusters.sonypictures.fr
ghostbusters.sonypictures.in
www.ghostbusters.my
ghostbusters.sonypictures.com.mx
ghostbusters.sonypictures.com.sg
ghostbusters.sonypictures.com.tw
ghostbusters.sonypictures.co.uk
www.gbsapocalipsedegelo.com.br
www.ghostbustersmovie.co.nz
ghostbusters.sonypictures.es

Other certificates including the domain name sonypictures.com

(limited to 100 certificates)
conectados.sonypictures.com
*.sonypictures.com
redeem.sonypictures.com
origin-flash.sonypictures.com
edge-micros1.sonypictures.com
secure.sonypictures.com
origin-flash.sonypictures.com
edge-micros2.sonypictures.com
brand.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
extaz-qa.spe.sony.com
edge-micros2.sonypictures.com
edge-micros2.sonypictures.com
sites.sonypictures.com
sites.sonypictures.com
secure.sonypictures.com
globalassethub.sonypictures.com
www.stage6films.com
api.stg-stage-productionservices.sonypictures.com
pub.email.sonypictures.com
connect.sonypictures.com
sites.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
stage-microsites.sonypictures.com
portals.sonypictures.com
microsites.sonypictures.com
image.20210419.200345.s6.et.yellsatcloud.com
globalassethub.sonypictures.com
portals.sonypictures.com
portals.sonypictures.com
conectados.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
sites.sonypictures.com
edge-portals.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
edge-micros2.sonypictures.com
flash.sonypictures.com
pub.email.sonypictures.com
griffin.sonypictures.com
view.email.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
sites.sonypictures.com
audiolibrary.sonypictures.com
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
akamai-san77.exacttarget.com
stage-microsites.sonypictures.com
www.sonypictures.co.uk
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
viewer.sonypictures.com
secure.sonypictures.com
edge-portals.sonypictures.com
sites2.sonypictures.com
edge-micros2.sonypictures.com
test.rewards.sonypictures.com
www.stage6films.com
test.rewards.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
gam.sonypictures.com
microsites.sonypictures.com
flash.sonypictures.com
view.email.games.sonypictures.com
rewards.sonypictures.com
test.redeem.sonypictures.com
edge-micros1.sonypictures.com
brand.sonypictures.com
gam.sonypictures.com
stage-microsites.sonypictures.com
perc.sonypictures.com
sony-prod.actioniq.mr-in.com
click.email.sonypictures.com
stage-edge-portals.sonypictures.com
stage-microsites.sonypictures.com
tweets.sonypictures.com
flash.sonypictures.com
rewards.sonypictures.com
pages.email.games.sonypictures.com
view.email.sonypictures.com
rewards.sonypictures.com
redeem.sonypictures.com
microsites.sonypictures.com
redeem.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
origin-flash.sonypictures.com

Certificate

The complete raw certificate details for edge-micros2.sonypictures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdAWPzIrujp1/hCMML56
8aZQgATSz/gJU5YzjIoC6jpLc3rz5/259AOLD8++aWCUA9ZzQNQTqo7mLUnKA/zx
dwjtgCAXX7UM0oC+P76eTjyEBFfwSsFfZ/k2bwHUNB3h4qcVjjtIi/RZeRzOJomg
/x998axFK/8anGTultMn6zCv27SCvnHhgolUW1iLvcgvuR7/g8QARFR578W2oVVw
I9w19TxfbZRrsASgRZTRbs7V+UGHOrrKw3xrGTvWy00IGd+hCCF8XgfWf54T7w+j
v3PkwTMgYeBrWgk+TsXdIevPt3PB2BZnCPHfCNP2CFg4ay9+QXYngMGVBgEEpLzw
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9033556292076688600856876724333200489
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Culver City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sony Pictures Entertainment, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'edge-micros2.sonypictures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20931931795056426386685277299142372322882121823069514397968021215835231265474859528851720173957262825517537000081530095528642752281805181055777700698518677969243172666033630495823206302909724714769216520799034268543398572402669941630209816456212879420159405961453569592784413909651548346356173182017691567052000411015229887462417054375417165659134220963303088927078125646254984429269461128307200053136019583887225520033336660033129663832780500300723807876657301244975035121030173070779240049696324891636625121332471851328954148427661954754126266387062092401671538055175309647947433464939260130881146983592504443334863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9292be0192276d6247d5ab535dd192fc4ba56a55
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge-micros2.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghostbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.sonypictures.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biomovie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paulmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterrabbit-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterrabbitmovie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiderman-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiderversemovie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thestarmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uncharted-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venom-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zombie-land.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.truffle-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helldogs.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catchuponspidey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spider-verse.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.spidermannowayhome.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.spehosting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vatican-exorcist.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spider-verse-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gt-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spider-verse-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.acrossthespiderverse.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haroldandthepurplecrayon.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haroldspurplecrayon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kravenmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kraven-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.miracleclubmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kraventhehuntermovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napoleon.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thanksgiving.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napoleon-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'licensetorace.granturismo.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiapictures100.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diymovienightathome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journeytobethlehemmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.justicier-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.carlosfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.equalizer.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equalizer.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journeytobethlehemmovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.n-importe-qui-sauf-toi-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anyone-but-you-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anyonebutyoumovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anyonebutyou.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anyonebutyoumovie.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garfield-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.the-book-of-clarence-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbustersar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cultkillermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madamewebmovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madamewebmovie.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madameweb.sonypictures.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madameweb.sonypictures.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madameweb.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.100for100sale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.peasantsmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.ameliemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tarotmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.takarajima-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madameweb.sonypictures.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demon-slayer-movie-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepersianversion.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbustersmovie.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbustersfrozenempire.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghostbusters.sonypictures.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbusters-movie-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-fantomes-lefilm-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghostbusters.sonypictures.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghostbusters.sonypictures.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbusters.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghostbusters.sonypictures.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghostbusters.sonypictures.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghostbusters.sonypictures.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghostbusters.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gbsapocalipsedegelo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbustersmovie.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghostbusters.sonypictures.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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