flash.sonypictures.com

- Sony Pictures Entertainment -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0d:84:c2:07:a9:c5:9a:f6:40:1d:a0:4b:55:8a:03:fb was issued on by DigiCert Inc.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sony Pictures Entertainment

Organization: Sony Pictures Entertainment
State / Province: California
Locality: Culver City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:84:c2:07:a9:c5:9a:f6:40:1d:a0:4b:55:8a:03:fb
Serial Number (int): 17969282525132606451856953878646490107
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 92:13:f2:a8:8c:95:83:39:d3:3a:77:1b:d2:d1:22:37:a6:d0:63:d5
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 6f:4b:8c:0c:25:42:48:80:4f:24:95:a3:b1:4e:bc:f4:d9:26:7e:d4
Fingerprint (sha256): 9e:e5:ac:6a:9b:b7:08:23:36:59:10:4d:df:b9:dc:da:18:05:e6:c2:ba:50:57:a0:b4:18:e8:eb:5d:47:26:77

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate flash.sonypictures.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for flash.sonypictures.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

flash.sonypictures.com
benefits.sonypictures.com
brand.sonypictures.com
cdn.playshow.io
cdn.sonypicturestelevisiongames.com
dev.brand.sonypictures.com
dev.formats.sonypictures.com
dev.fyc.sonypictures.com
dev.globalassethub.sonypictures.com
dev.media.sonypictures.com
dev.presskits.sonypictures.com
dev.preview.sonypictures.com
dev.qa-admin.wheeloffortune.com
dev.qa-games.wheeloffortune.com
dev.qa-giveaways.wheeloffortune.com
dev.qa.wheeloffortune.com
dev.sonypicturesmuseum.com
dev.wwtbam.com
fb-stage.wheelpop.com
fb.wheelpop.com
formats.sonypictures.com
fyc.sonypictures.com
gam-dev.sonypictures.com
gam.sonypictures.com
globalassethub.sonypictures.com
gum-dev.sonypictures.com
gum.sonypictures.com
lt.wheeloffortune.com
media.sonypictures.com
prd.sonypicturestelevision.com
presskits.sonypictures.com
preview.sonypictures.com
prod-gum.sonypictures.com
prod.sonypicturesmuseum.com
prod.wheeloffortune.com
qa-admin.wheeloffortune.com
qa-games.wheeloffortune.com
qa-giveaways.wheeloffortune.com
qa.wheeloffortune.com
secure-dev.sonypictures.com
secure-prod.sonypictures.com
secure.sonypictures.com
sonypictures.com
sonypicturesmuseum.com
stg.brand.sonypictures.com
stg.formats.sonypictures.com
stg.fyc.sonypictures.com
stg.globalassethub.sonypictures.com
stg.imageworks.com
stg.media.sonypictures.com
stg.presskits.sonypictures.com
stg.preview.sonypictures.com
stg.sonypictures.com
stg.sonypictures.es
stg.sonypicturesanimation.com
stg.wwtbam.com
wwtbam.com
www.cdn.playshow.io
www.imageworks.com
www.PlayShowTV.com
www.sonypictures.be
www.sonypictures.com
www.sonypictures.es
www.sonypictures.fr
www.sonypicturesanimation.com
www.sonypicturesmuseum.com
www.wheelpop.com
www.wwtbam.com
www.sonypictures.ie
www.sonypictures.co.uk
www.sonypictures.ca
chameleon.spe.sony.com
sonypictures.jp
stage.sonypictures.jp
www.sonypictures.jp
qa-games.spe.wheeloffortune.com
qa-giveaways.spe.wheeloffortune.com
qa.spe.wheeloffortune.com
stg.stage6films.com
stg.thedailybugle.net
www.stage6films.com
www.thedailybugle.net
stg-benefits.sonypictures.com
www.sonypictures.de
www2.sonypictures.de
www.sonypictures.at
www2.sonypictures.at
www.sonypictures.com.br
impossiblescience.com
www.impossiblescience.com
www2.impossiblescience.com
dev.impossiblescience.com
stg.impossiblescience.com
www.sonypictures.it
www2.sonypictures.it
globalassethub-dev.sonypictures.com
stage-productionservices.sonypictures.com
www2.stage-productionservices.sonypictures.com
stg-stage-productionservices.sonypictures.com

Other certificates including the domain name sonypictures.com

(limited to 100 certificates)
conectados.sonypictures.com
*.sonypictures.com
redeem.sonypictures.com
origin-flash.sonypictures.com
edge-micros1.sonypictures.com
secure.sonypictures.com
origin-flash.sonypictures.com
edge-micros2.sonypictures.com
brand.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
extaz-qa.spe.sony.com
edge-micros2.sonypictures.com
edge-micros2.sonypictures.com
sites.sonypictures.com
sites.sonypictures.com
secure.sonypictures.com
globalassethub.sonypictures.com
www.stage6films.com
api.stg-stage-productionservices.sonypictures.com
pub.email.sonypictures.com
connect.sonypictures.com
sites.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
stage-microsites.sonypictures.com
portals.sonypictures.com
microsites.sonypictures.com
image.20210419.200345.s6.et.yellsatcloud.com
globalassethub.sonypictures.com
portals.sonypictures.com
portals.sonypictures.com
conectados.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
sites.sonypictures.com
edge-portals.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
edge-micros2.sonypictures.com
flash.sonypictures.com
pub.email.sonypictures.com
griffin.sonypictures.com
view.email.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
sites.sonypictures.com
audiolibrary.sonypictures.com
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
akamai-san77.exacttarget.com
stage-microsites.sonypictures.com
www.sonypictures.co.uk
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
viewer.sonypictures.com
secure.sonypictures.com
edge-portals.sonypictures.com
sites2.sonypictures.com
edge-micros2.sonypictures.com
test.rewards.sonypictures.com
www.stage6films.com
test.rewards.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
gam.sonypictures.com
microsites.sonypictures.com
flash.sonypictures.com
view.email.games.sonypictures.com
rewards.sonypictures.com
test.redeem.sonypictures.com
edge-micros1.sonypictures.com
brand.sonypictures.com
gam.sonypictures.com
stage-microsites.sonypictures.com
perc.sonypictures.com
sony-prod.actioniq.mr-in.com
click.email.sonypictures.com
stage-edge-portals.sonypictures.com
stage-microsites.sonypictures.com
tweets.sonypictures.com
flash.sonypictures.com
rewards.sonypictures.com
pages.email.games.sonypictures.com
view.email.sonypictures.com
rewards.sonypictures.com
redeem.sonypictures.com
microsites.sonypictures.com
redeem.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
origin-flash.sonypictures.com

Certificate

The complete raw certificate details for flash.sonypictures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteC5htzw/hNHWECuR8k/
uT53FRpQDp/XAHzuNs9czW0Pz40Ofeq0ERMZ96Mlt5g8b/po+L4CKizAOTw6jKO3
7ugAGhL+auwSHey1G7nURtwE/MoKmEli7VBUNC0UVJ4NPsluvU3ozb0Glii0vfBl
6H/gpQgwghoQImUzDU45aqvSUgZT+Epeoqrhj3fM851R+8kti8IEWgGjxYVEjUNr
GReHKGsBWqbc5+bht2ubSLsvMipy/FGKWPRPQVsQ0/HNfgVZPzc+XWZvlt9xXfGZ
PswMhTD3gZ62wcw1W6j594qZsSqMGapdHI/dnrcNnSMXA5O/bwuf4a1P4GQq+Ec/
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17969282525132606451856953878646490107
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Culver City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sony Pictures Entertainment'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flash.sonypictures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22959949085542433234446784474769722838759383602773867698168075147592494947297722039681421194932722461214910865606126488211667491162082186577590976446341046856088342018172684469693429067497621644937079363259200816757692538118408099963558584278238481557796504622262039427402816278729154160674545683240577817960760643003482218171335900018217573219054534112261006241227932859271534900910644744074880796179077490547355116709704809274070338908671506676407721257759522110206421766979182950502688949055255654861774789825360067601858884071053727725461436165683622062490232797030319211237041689202055750582253750197549825212363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9213f2a88c958339d33a771bd2d12237a6d063d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2589 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flash.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefits.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brand.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.playshow.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.sonypicturestelevisiongames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.brand.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.formats.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.fyc.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.globalassethub.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.media.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.presskits.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.preview.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.qa-admin.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.qa-games.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.qa-giveaways.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.qa.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.sonypicturesmuseum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.wwtbam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fb-stage.wheelpop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fb.wheelpop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formats.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fyc.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gam-dev.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gam.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalassethub.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gum-dev.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gum.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lt.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prd.sonypicturestelevision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presskits.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-gum.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.sonypicturesmuseum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-admin.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-games.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-giveaways.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-dev.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-prod.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonypicturesmuseum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.brand.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.formats.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.fyc.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.globalassethub.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.imageworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.media.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.presskits.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.preview.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.sonypictures.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.sonypicturesanimation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.wwtbam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwtbam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdn.playshow.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imageworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.PlayShowTV.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypicturesanimation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypicturesmuseum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wheelpop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wwtbam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chameleon.spe.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonypictures.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.sonypictures.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-games.spe.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-giveaways.spe.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.spe.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.stage6films.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.thedailybugle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage6films.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thedailybugle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-benefits.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.sonypictures.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.sonypictures.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impossiblescience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.impossiblescience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.impossiblescience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.impossiblescience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.impossiblescience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.sonypictures.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalassethub-dev.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-productionservices.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.stage-productionservices.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-stage-productionservices.sonypictures.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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