view.member.sonyrewards.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 04:ba:49:5a:e9:50:0a:36:9d:5b:0b:8d:13:75:47:44 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ba:49:5a:e9:50:0a:36:9d:5b:0b:8d:13:75:47:44
Serial Number (int): 6284167017469603871323481337654232900
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 72:d6:25:80:8c:12:af:e9:a9:80:db:7e:61:58:20:d0:e1:f5:f8:66
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 90:71:ba:bb:2b:70:73:59:07:2a:45:13:5a:9c:bb:74:6a:5d:43:08
Fingerprint (sha256): 87:15:af:b2:6a:77:10:69:fa:ff:5e:9a:be:e9:96:44:2e:f5:1e:44:23:37:cf:69:73:48:b8:72:fb:65:be:2b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate view.member.sonyrewards.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for view.member.sonyrewards.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

view.member.sonyrewards.com

Other certificates including the domain name sonyrewards.com

(limited to 100 certificates)
sonyrewards.com
www.wheeldeals.sonyrewards.com
www.sonyrewards.com
ssl944227.cloudflaressl.com
view.member.sonyrewards.com
familycenter.sonyrewards.com
*.rewards.sony.com
admin.sonyrewards.com
view.member.sonyrewards.com
ws.sonyrewards.com
staging.sonyrewards.com
pub.member.sonyrewards.com
akamai-san235.exacttarget.com
sonyrewards.com
www.sonyrewards.com
www.sonyrewards.com
www.pointsplus.sonyrewards.com
*.sonyrewards.com
sonyrewards.com
akamai-san235.exacttarget.com
pages.member.sonyrewards.com
pages.member.sonyrewards.com
sonyrewards.com
www.wheeldeals.sonyrewards.com
pages.member.sonyrewards.com
www.rewards.sony.com
admin.sonyrewards.com
www.rewards.sony.com
pub.member.sonyrewards.com
admin.sonyrewards.com
pub.member.sonyrewards.com
click.member.sonyrewards.com
sonyrewards.com
www.sonyrewards.com
www.sonyrewards.com
sonyrewards.com
www.sonyrewards.com
ssl944228.cloudflaressl.com
akamai-san235.exacttarget.com
themarketplace.sonyrewards.com
pages.member.sonyrewards.com
view.member.sonyrewards.com
www.rewards.sony.com
sonyrewards.com
sonyrewards.com
www.rewards.sony.com
media.sonyrewards.com
pages.member.sonyrewards.com
sonyrewards.com
pub.member.sonyrewards.com
www.rewards.sony.com
sonyrewards.com
*.sonyrewards.com
view.member.sonyrewards.com
akamai-san235.exacttarget.com
www.pointsplus.sonyrewards.com
sonyrewards.com
www.pointsplus.sonyrewards.com
www.rewards.sony.com
sonyrewards.com
akamai-san235.exacttarget.com
www.rewards.sony.com
admin-uat.sonyrewards.com
*.sonyrewards.com
*.rewards.sony.com
sonyrewards.com
akamai-san235.exacttarget.com
www.sonyrewards.com
www.sonyrewards.com
akamai-san235.exacttarget.com
ws.sonyrewards.com
sonyrewards.com
admin-staging.sonyrewards.com
www.partnerspecials.sonyrewards.com
uat.sonyrewards.com
sonyrewards.com
www.sonyrewards.com
www.sonyrewards.com
www.rewards.sony.com
www.sonyrewards.com
admin.sonyrewards.com
view.member.sonyrewards.com
www.sonyrewards.com
ssl944229.cloudflaressl.com
www.sonyrewards.com
CLICK1.MEMBERS.SONYREWARDS.COM
ws.sonyrewards.com
media.sonyrewards.com
view.member.sonyrewards.com
view.member.sonyrewards.com
pages.member.sonyrewards.com
click.member.sonyrewards.com
click.member.sonyrewards.com
www.sonyrewards.com
*.sonyrewards.com
*.rewards.sony.com
themarketplace.sonyrewards.com
media.sonyrewards.com
www.pointsplus.sonyrewards.com
click.member.sonyrewards.com

Certificate

The complete raw certificate details for view.member.sonyrewards.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv827vW9n/BlWETMvnfI9
EUEDpEcSJdaBM2P27WCRWu/oCSYeH7Zh/vug6Twag82DIxQpLAdNEXHUcTSF5553
asJyc38g3tH+gV9TuY7+thSzXPp1QNhz9dl0QT1Chv86PRd0jYXHxLhi/Bf6h5kT
gNk4IySCu/GmsuS6lKsnwtffPR4xA4DHnwKJqPM9lPrKMakSGkTcFSDHu+OGmHAZ
n1XBuvG6M8mkq53kkoMz8cQ38LDL3NETnKLUoxRYo6S0swxdaDFEOE5E6YRwTySg
QmhN88IdyjBjaLK0zwMKDsp+uxL3mJGyXh8XNOtS+U/aydoGo5hJf/IbzYh7lWKc
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6284167017469603871323481337654232900
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'view.member.sonyrewards.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24212967149115592644260007556993381170234011468819804448244071473829456911457074449447854919835180767779386742622679634265688070671693226638064677032231832236121095234083544160499935141351218264133974034887151722819831542284097428893756897478354765446652737604491428958476255389841926235313527671406686151872897359964042466640742473807783665234158974240564523891373006631723278824205863481687751655235968423789890359730849621569616660171131378203210283234453038595706398740299690962298931698718240641609934058435015889524081263283182546892647127410545894786843868405401221998871316507266836381958848527526881048828961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							72d625808c12afe9a980db7e615820d0e1f5f866
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view.member.sonyrewards.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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