flash.sonypictures.com

- Sony Pictures Entertainment -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0f:80:24:f8:dc:b0:4a:b2:98:85:ab:23:16:ac:16:52 was issued on by DigiCert Inc.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sony Pictures Entertainment

Organization: Sony Pictures Entertainment
State / Province: California
Locality: Culver City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:80:24:f8:dc:b0:4a:b2:98:85:ab:23:16:ac:16:52
Serial Number (int): 20603783818296056882278640695397586514
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: fc:3d:33:1e:4a:37:dd:ed:af:a0:40:12:cb:d6:38:0b:08:a9:3d:8a
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 92:01:09:b4:b9:ce:aa:0b:02:b9:a0:9a:45:cc:71:07:4a:79:fa:a5
Fingerprint (sha256): 90:81:58:54:5f:d1:75:9e:98:0c:6a:3e:1a:50:76:6f:fd:8d:3b:7c:b4:92:18:89:78:8a:8f:31:e3:84:f8:80

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl

Check the revocation status for certificate flash.sonypictures.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for flash.sonypictures.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

flash.sonypictures.com
benefits.sonypictures.com
brand.sonypictures.com
cdn.playshow.io
cdn.sonypicturestelevisiongames.com
dev.brand.sonypictures.com
dev.formats.sonypictures.com
dev.fyc.sonypictures.com
dev.globalassethub.sonypictures.com
dev.media.sonypictures.com
dev.motionpictureser.com
dev.presskits.sonypictures.com
dev.preview.sonypictures.com
dev.qa-admin.wheeloffortune.com
dev.qa-games.wheeloffortune.com
dev.qa-giveaways.wheeloffortune.com
dev.qa.wheeloffortune.com
dev.sonypicturesmuseum.com
dev.wwtbam.com
dev.yourfantasybeginsnow.com
fb-stage.wheelpop.com
fb.wheelpop.com
formats.sonypictures.com
fyc.sonypictures.com
gam-dev.sonypictures.com
gam.sonypictures.com
globalassethub.sonypictures.com
gum-dev.sonypictures.com
gum.sonypictures.com
lt.wheeloffortune.com
media.sonypictures.com
prd.sonypicturestelevision.com
presskits.sonypictures.com
preview.sonypictures.com
prod-gum.sonypictures.com
prod.sonypicturesmuseum.com
prod.wheeloffortune.com
prod.yourfantasybeginsnow.com
qa-admin.wheeloffortune.com
qa-games.wheeloffortune.com
qa-giveaways.wheeloffortune.com
qa.wheeloffortune.com
secure-dev.sonypictures.com
secure-prod.sonypictures.com
secure.sonypictures.com
sonypictures.com
sonypicturesmuseum.com
stage.motionpictureser.com
stg.brand.sonypictures.com
stg.formats.sonypictures.com
stg.fyc.sonypictures.com
stg.globalassethub.sonypictures.com
stg.imageworks.com
stg.media.sonypictures.com
stg.motionpictureser.com
stg.presskits.sonypictures.com
stg.preview.sonypictures.com
stg.sonypictures.com
stg.sonypictures.es
stg.sonypicturesanimation.com
stg.wwtbam.com
stg2.sonypictures.be
stg2.sonypictures.fr
stg2.sonypicturesanimation.com
wwtbam.com
www.cdn.playshow.io
www.imageworks.com
www.PlayShowTV.com
www.sonypictures.be
www.sonypictures.com
www.sonypictures.es
www.sonypictures.fr
www.sonypicturesanimation.com
www.sonypicturesmuseum.com
www.wheelpop.com
www.wwtbam.com
www.yourfantasybeginsnow.com
www2.sonypictures.es
www2.sonypicturesanimation.com
yourfantasybeginsnow.com
www.sonypictures.ie
www.sonypictures.co.uk
www.sonypictures.ca
chameleon.spe.sony.com
sonypictures.jp
stage.sonypictures.jp
www.sonypictures.jp

Other certificates including the domain name sonypictures.com

(limited to 100 certificates)
conectados.sonypictures.com
*.sonypictures.com
redeem.sonypictures.com
origin-flash.sonypictures.com
edge-micros1.sonypictures.com
secure.sonypictures.com
origin-flash.sonypictures.com
edge-micros2.sonypictures.com
brand.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
extaz-qa.spe.sony.com
edge-micros2.sonypictures.com
edge-micros2.sonypictures.com
sites.sonypictures.com
sites.sonypictures.com
secure.sonypictures.com
globalassethub.sonypictures.com
www.stage6films.com
api.stg-stage-productionservices.sonypictures.com
pub.email.sonypictures.com
connect.sonypictures.com
sites.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
stage-microsites.sonypictures.com
portals.sonypictures.com
microsites.sonypictures.com
image.20210419.200345.s6.et.yellsatcloud.com
globalassethub.sonypictures.com
portals.sonypictures.com
portals.sonypictures.com
conectados.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
sites.sonypictures.com
edge-portals.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
edge-micros2.sonypictures.com
flash.sonypictures.com
pub.email.sonypictures.com
griffin.sonypictures.com
view.email.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
sites.sonypictures.com
audiolibrary.sonypictures.com
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
akamai-san77.exacttarget.com
stage-microsites.sonypictures.com
www.sonypictures.co.uk
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
viewer.sonypictures.com
secure.sonypictures.com
edge-portals.sonypictures.com
sites2.sonypictures.com
edge-micros2.sonypictures.com
test.rewards.sonypictures.com
www.stage6films.com
test.rewards.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
gam.sonypictures.com
microsites.sonypictures.com
flash.sonypictures.com
view.email.games.sonypictures.com
rewards.sonypictures.com
test.redeem.sonypictures.com
edge-micros1.sonypictures.com
brand.sonypictures.com
gam.sonypictures.com
stage-microsites.sonypictures.com
perc.sonypictures.com
sony-prod.actioniq.mr-in.com
click.email.sonypictures.com
stage-edge-portals.sonypictures.com
stage-microsites.sonypictures.com
tweets.sonypictures.com
flash.sonypictures.com
rewards.sonypictures.com
pages.email.games.sonypictures.com
view.email.sonypictures.com
rewards.sonypictures.com
redeem.sonypictures.com
microsites.sonypictures.com
redeem.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
origin-flash.sonypictures.com

Certificate

The complete raw certificate details for flash.sonypictures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbsyFZP0bXV3KJXmSBiM
uaGyn0OUWwLZ+WSB+WHoGD3H94eY69TzEFq/BFKQCSImTl1+qiiGJANUmt3blyqF
UtnRpELSucuSgC13Wr1BwXa9uyZ0zTXrqxJNhbEaoAXUhhg7yIJff2S/v3Ve7mVK
MuY+bRr5wZ53AIvBu4O2pDNEgAJKiHQTmJy4OvPNmBgNy8ww4imeiueR2sqPIeiK
R/yHOOPeIlNRz7asp5mP0HOxh6R0LSOIC+YVkp38HywujzVqmDEF/MRvjfD8GUIR
HL22JPHDPW/oGq3tEyQFbRNe1ZxXQadmZOFNg1SlxgiwRdBT8S1C8e03zJtudeqq
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20603783818296056882278640695397586514
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Culver City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sony Pictures Entertainment'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flash.sonypictures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24961255689688463180848540329244664661112623391952189164355585525902965734837115366709251330690545567213514996654611153615209813496271673808454755641536449456390964916060403814738089200877313673676119088603147233988708050983564090508010265130303175444252506717958368653152427979504496440646676326636560590380100836263582374357772343382007163968861837346835259344870280672862559421752960656860005074671788504876865423456042108184004972302457780682395038565634840475230723701528709372230468950809948876603748718288064094725592892894148298662827548451233253178321376709373442588781398707646400921422952045933183892105867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc3d331e4a37ddedafa04012cbd6380b08a93d8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2239 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flash.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefits.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brand.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.playshow.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.sonypicturestelevisiongames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.brand.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.formats.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.fyc.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.globalassethub.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.media.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.motionpictureser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.presskits.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.preview.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.qa-admin.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.qa-games.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.qa-giveaways.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.qa.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.sonypicturesmuseum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.wwtbam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.yourfantasybeginsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fb-stage.wheelpop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fb.wheelpop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formats.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fyc.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gam-dev.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gam.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalassethub.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gum-dev.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gum.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lt.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prd.sonypicturestelevision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presskits.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-gum.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.sonypicturesmuseum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.yourfantasybeginsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-admin.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-games.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-giveaways.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-dev.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-prod.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonypicturesmuseum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.motionpictureser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.brand.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.formats.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.fyc.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.globalassethub.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.imageworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.media.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.motionpictureser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.presskits.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.preview.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.sonypictures.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.sonypicturesanimation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.wwtbam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg2.sonypictures.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg2.sonypictures.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg2.sonypicturesanimation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwtbam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdn.playshow.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imageworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.PlayShowTV.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypicturesanimation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypicturesmuseum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wheelpop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wwtbam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourfantasybeginsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.sonypictures.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.sonypicturesanimation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourfantasybeginsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chameleon.spe.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonypictures.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.sonypictures.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001771da9582d000004030047304502204a658577ef6ec290653fa0b2422a0ee4cb7be14a60d6d197b896ba5ebc87f22c022100a869ee71656a54fa138d59a90d534766b67c7f230a9f13469dc9d4c14d96ba750076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001771da9588000000403004730450221009590c837738d30b93e9a61b62b570f5b658debfabdcce50860caa15d0b96e59802200512e03840cf5d9c492888c725d12a1be552b0759492419fd32b3d3b1fc6319c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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