edge-affiliates.cinesony.com

- Sony Pictures Entertainment, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 04:9a:6a:c7:9e:cd:35:f1:e9:d2:1c:bb:93:4e:54:de was issued on by DigiCert Inc.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Sony Pictures Entertainment, Inc.

Organization: Sony Pictures Entertainment, Inc.
State / Province: California
Locality: Culver City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:9a:6a:c7:9e:cd:35:f1:e9:d2:1c:bb:93:4e:54:de
Serial Number (int): 6118691450323070454808038642134439134
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 0a:d5:96:98:f7:21:e7:41:4d:7d:27:c8:83:aa:34:a1:05:40:13:a1
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): db:6e:0c:64:3d:3a:90:b5:0a:df:3b:b6:4b:a9:3c:60:a9:e9:51:28
Fingerprint (sha256): 7e:63:9f:1f:78:d1:a6:ee:83:9a:52:cf:00:6f:3e:26:e3:4b:b0:07:dd:bb:f8:e0:39:0f:ec:7b:f9:59:73:9f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate edge-affiliates.cinesony.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for edge-affiliates.cinesony.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

edge-affiliates.cinesony.com
advertising.sonypictures.com
affiliates.cinesony.com
affiliates.get.tv
affiliates.sonymoviechannel.com
affiliates.sonymovies.com
alowritersinitiative.com
madisongaterecords.com
sonypicturesgreenerworld.com
sptdiversedirectors.com
stage.alowritersinitiative.com
staging.affiliates.get.tv
staging.affiliates.sonymoviechannel.com
staging.cinesony.com
staging.madisongaterecords.com
stg.madisongaterecords.com
stg.sonypicturesgreenerworld.com
stg.sonypicturestelevision.com
stg.sptdiversedirectors.com
www.alowritersinitiative.com
www.madisongaterecords.com
www.sonypicturesgreenerworld.com
www.sptdiversedirectors.com
www2.sptdiversedirectors.com
events.sonypictures.com
sonypictures.fr
sonypictures.be
sonypictures.co.uk
sonypictures.ca
intl.sonypictures.com
www2.sonypictures.ca
sonypictures.ie
www.sonypictures.com.au
www2.sonypictures.com.au
www.sonypictures.co.nz
www2.sonypictures.co.nz
www.sonypictures.no
www2.sonypictures.no
www.sonypictures.se
www2.sonypictures.se
www.sonypictures.fi
www2.sonypictures.fi
www.sonypictures.dk
www2.sonypictures.dk
www.sonypictures.com.sg
www2.sonypictures.com.sg
www.sonypictures.com.mx
www2.sonypictures.com.mx
www2.sonypictures.in
www.sonypictures.in
www2.sonypictures.com.co
www.sonypictures.com.co
www2.sonypictures.nl
www.sonypictures.nl
www2.sonypictures.my
www.sonypictures.my
www2.sonypictures.hk
www.sonypictures.hk
stg.intl.sonypictures.com
thebeneluxspehub.sonypictures.com
thenordicspehub.sonypictures.com
stage6films.com
www.stage6films.com
ceema.sonypictures.com
la.sonymovies.com
br.sonymovies.com
axn.es
axn.pt
sony-kal.com
sonyone.com.mx
animax.co.jp
kids-station.com
la.axn.com
br.axn.com
br.sonychannel.com
la.sonychannel.com
sony-canal.com
la.canalsony.com
br.canalsony.com
sonykal.com
www.sonyone.com.mx
www.sony-canal.com
www.sonykal.com
www.sony-kal.com
myspe.spe.sony.com
my.spe.sony.com
stg-myspe.spe.sony.com
www.sonypictures.es
www2.sonypictures.es
sonypictures.es

Other certificates including the domain name cinesony.com

(limited to 100 certificates)
la.axn.com
staging.cinesony.com
la.axn.com
la.axn.com
la.axn.com
la.axn.com
la.axn.com
la.axn.com
la.axn.com
staging.cinesony.com
www.sonymoviechannel.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
cinesony.com
staging.cinesony.com
affiliates.cinesony.com
staging.cinesony.com
edge-affiliates.cinesony.com
affiliates.cinesony.com
la.axn.com
staging.cinesony.com
affiliates.cinesony.com
www.sonytv.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
la.axn.com
staging.cinesony.com
affiliates.cinesony.com
la.axn.com
affiliates.cinesony.com
staging.cinesony.com
staging.cinesony.com
la.axn.com
cinesony.com
staging.cinesony.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
affiliates.cinesony.com
la.axn.com
www.sonytv.com
la.axn.com
edge-affiliates.cinesony.com
www.sonytv.com
affiliates.cinesony.com
edge-affiliates.cinesony.com
www.sonytv.com
cinesony.com
staging.cinesony.com
edge-affiliates.cinesony.com
la.axn.com
staging.cinesony.com
edge-affiliates.cinesony.com
www.cinesony.com
la.axn.com
la.axn.com
edge-affiliates.cinesony.com
cinesony.com
edge-affiliates.cinesony.com
la.axn.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
la.axn.com
edge-affiliates.cinesony.com
staging.cinesony.com
www.sonytv.com
la.axn.com
affiliates.cinesony.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
la.axn.com
staging.cinesony.com
la.axn.com
edge-affiliates.cinesony.com
affiliates.cinesony.com
la.axn.com
edge-affiliates.cinesony.com
staging.cinesony.com
cinesony.com
edge-affiliates.cinesony.com
cinesony.com
la.axn.com
affiliates.cinesony.com
cinesony.com
la.axn.com
affiliates.cinesony.com
la.axn.com
edge-affiliates.cinesony.com
www.cinesony.com
staging.cinesony.com
staging.cinesony.com
staging.cinesony.com
edge-affiliates.cinesony.com
affiliates.cinesony.com
www.sonytv.com
www.sonytv.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com

Certificate

The complete raw certificate details for edge-affiliates.cinesony.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF55CySs8lW+gFJDV1GD
Tkho3JvNpx7Wu1qguv7bMtjMHfYAT09nmFaBNqDY8/vncYQtDGbnZZWgRnP6O7Pj
PRnk7S8pXusTgdXML14S4cKOITrUAmfuyOF/xiD2PA7/wPv9HvoLR8y3QhTen8Si
KltmsIV2Xzb1Jx0wqwms6WdzbTN3S5ELEWv7bEATQYSq/pEO4a58LhU0GukjHyHR
6ilsdaEqZGLnsBC3dDnNzsgyBh3aPaCaLYzjTPGnaGREFOAvE7c3ZscsquNSVN33
rRkgf0IPBodaTWEK8iBHieqz4GnoHUz/sOsAfgRVkorbEXdoRwmr4DsQHTF7KxQm
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6118691450323070454808038642134439134
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Culver City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sony Pictures Entertainment, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'edge-affiliates.cinesony.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24284340840417953717915832004797026329777325383399779261491834148973542962168985950706602892648128162831589793193253087578461445011916997228422240227719610588696988972705733744950471147439327505708458601953168558832660043145717874813113476393604815858115884292337936977062179094627515197746687796478292120154419062254015169277462213235741787925829215417830822309980705285837637936520717101946155788140891609467676352209078874191363495545261398892432645932104524903295762328495121559389262127127771348766852591757703988170801162877782672163110456065321409837856850898009857259920903646862723582646734675180827740219037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0ad59698f721e7414d7d27c883aa34a1054013a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2055 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge-affiliates.cinesony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advertising.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliates.cinesony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliates.get.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliates.sonymoviechannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliates.sonymovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alowritersinitiative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madisongaterecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonypicturesgreenerworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sptdiversedirectors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.alowritersinitiative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.affiliates.get.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.affiliates.sonymoviechannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.cinesony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.madisongaterecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.madisongaterecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.sonypicturesgreenerworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.sonypicturestelevision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.sptdiversedirectors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alowritersinitiative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madisongaterecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypicturesgreenerworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sptdiversedirectors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.sptdiversedirectors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonypictures.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonypictures.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonypictures.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intl.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.sonypictures.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonypictures.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.sonypictures.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.sonypictures.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.sonypictures.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.sonypictures.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.sonypictures.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.sonypictures.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.sonypictures.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.sonypictures.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.sonypictures.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.sonypictures.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.sonypictures.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.sonypictures.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.sonypictures.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.intl.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebeneluxspehub.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thenordicspehub.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage6films.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage6films.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceema.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la.sonymovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br.sonymovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axn.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axn.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sony-kal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonyone.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animax.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kids-station.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la.axn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br.axn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br.sonychannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la.sonychannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sony-canal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la.canalsony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br.canalsony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonykal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonyone.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sony-canal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonykal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sony-kal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myspe.spe.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.spe.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-myspe.spe.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.sonypictures.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonypictures.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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