edge-micros2.sonypictures.com

- Sony Pictures Entertainment, Inc. -

Issued by DigiCert Global G3 TLS ECC SHA384 2020 CA1

About this certificate

This digital certificate with serial number 05:7f:d5:40:f7:22:a3:f2:d3:0b:27:12:88:65:06:68 was issued on by DigiCert Inc.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Sony Pictures Entertainment, Inc.

Organization: Sony Pictures Entertainment, Inc.
State / Province: California
Locality: Culver City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:7f:d5:40:f7:22:a3:f2:d3:0b:27:12:88:65:06:68
Serial Number (int): 7309886980291156320855509570689500776
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 9f:8a:05:60:2a:17:a3:05:0f:9c:b1:25:4a:b9:26:fb:bb:97:23:c1
AuthorityKeyId: 8a:23:eb:9e:6b:d7:f9:37:5d:f9:6d:21:39:76:9a:a1:67:de:10:a8

Fingerprint (sha1): 86:8d:41:06:b0:98:5b:fe:9c:e0:9e:e9:f4:20:f1:f0:00:10:48:2d
Fingerprint (sha256): a5:68:d9:8b:68:af:6c:db:a3:01:b0:4b:83:54:b4:53:90:e1:44:96:b6:7c:b1:8e:83:a3:41:2b:2e:fe:63:92

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl

Check the revocation status for certificate edge-micros2.sonypictures.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for edge-micros2.sonypictures.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA384

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

edge-micros2.sonypictures.com
ghostbusters.com
watch.sonypictures.ca
www.biomovie.jp
www.ghostbusters.com
www.paulmovie.com
www.peterrabbitmovie.ca
www.spiderman-movie.jp
www.spiderversemovie.ca
www.thestarmovie.com
www.uncharted-movie.jp
www.venom-movie.jp
www.helldogs.jp
www.catchuponspidey.com
www.spider-verse.jp
app.spidermannowayhome.movie
www.vatican-exorcist.jp
www.spider-verse-tix.ca
www.spider-verse-billets.ca
tickets.acrossthespiderverse.movie
www.haroldandthepurplecrayon.movie
www.haroldspurplecrayon.com
www.kravenmovie.com
www.kraven-movie.jp
tickets.miracleclubmovie.com
www.kraventhehuntermovie.com.au
www.napoleon-movie.jp
www.columbiapictures100.com
www.diymovienightathome.com
www.journeytobethlehemmovie.com
www.justicier-billets.ca
tickets.carlosfilm.com
buy.equalizer.movie
www.n-importe-qui-sauf-toi-billets.ca
www.anyone-but-you-tix.ca
www.anyonebutyoumovie.com.au
anyonebutyou.sonypictures.co.uk
www.anyonebutyoumovie.co.nz
www.garfield-movie.jp
www.the-book-of-clarence-tix.ca
www.ghostbustersar.com
www.cultkillermovie.com
www.madamewebmovie.com.au
www.madamewebmovie.co.nz
madameweb.sonypictures.com.sg
madameweb.sonypictures.com.tw
madameweb.sonypictures.co.uk
tickets.peasantsmovie.com
tickets.ameliemovie.com
www.tarotmovie.com
www.takarajima-movie.jp
madameweb.sonypictures.es
www.demon-slayer-movie-tix.ca
thepersianversion.sonypictures.co.uk
www.ghostbustersmovie.net
www.ghostbustersfrozenempire.com.au
ghostbusters.sonypictures.be
www.ghostbusters-movie-tix.ca
www.sos-fantomes-lefilm-billets.ca
ghostbusters.sonypictures.fr
ghostbusters.sonypictures.in
www.ghostbusters.my
ghostbusters.sonypictures.com.mx
ghostbusters.sonypictures.com.sg
ghostbusters.sonypictures.com.tw
ghostbusters.sonypictures.co.uk
www.gbsapocalipsedegelo.com.br
www.ghostbustersmovie.co.nz
ghostbusters.sonypictures.es
www.yolo.movie
www.flymetothemoon.movie
www.koipuri-movie.jp
sale.ghostbusters.com
www.garfield-movie.net
www.garfieldmovie.com.au
garfield.sonypictures.be
www.garfieldforadecasa.com.br
www.garfield-movie-tix.ca
www.garfield-lefilm-billets.ca
garfield.sonypictures.fr
garfield.sonypictures.in
www.garfieldmovie.my
garfield.sonypictures.com.mx
www.garfieldmovie.co.nz
garfield.sonypictures.com.sg
garfield.sonypictures.es
garfield.sonypictures.co.uk
bookofclarence.sonypictures.co.uk
tickets.daddiofilm.com
www.must-watchmovies.com
jcvd.sonypictures.com
venom.movie
wolfsmovie.com
unlockthemoon.com
paddingtonmovie.com
wolfs-movie.jp
takarajima-movie.jp

Other certificates including the domain name sonypictures.com

(limited to 100 certificates)
conectados.sonypictures.com
*.sonypictures.com
redeem.sonypictures.com
origin-flash.sonypictures.com
edge-micros1.sonypictures.com
secure.sonypictures.com
origin-flash.sonypictures.com
edge-micros2.sonypictures.com
brand.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
extaz-qa.spe.sony.com
edge-micros2.sonypictures.com
edge-micros2.sonypictures.com
sites.sonypictures.com
sites.sonypictures.com
secure.sonypictures.com
globalassethub.sonypictures.com
www.stage6films.com
api.stg-stage-productionservices.sonypictures.com
pub.email.sonypictures.com
connect.sonypictures.com
sites.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
stage-microsites.sonypictures.com
portals.sonypictures.com
microsites.sonypictures.com
image.20210419.200345.s6.et.yellsatcloud.com
globalassethub.sonypictures.com
portals.sonypictures.com
portals.sonypictures.com
conectados.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
sites.sonypictures.com
edge-portals.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
edge-micros2.sonypictures.com
flash.sonypictures.com
pub.email.sonypictures.com
griffin.sonypictures.com
view.email.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
sites.sonypictures.com
audiolibrary.sonypictures.com
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
akamai-san77.exacttarget.com
stage-microsites.sonypictures.com
www.sonypictures.co.uk
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
viewer.sonypictures.com
secure.sonypictures.com
edge-portals.sonypictures.com
sites2.sonypictures.com
edge-micros2.sonypictures.com
test.rewards.sonypictures.com
www.stage6films.com
test.rewards.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
gam.sonypictures.com
microsites.sonypictures.com
flash.sonypictures.com
view.email.games.sonypictures.com
rewards.sonypictures.com
test.redeem.sonypictures.com
edge-micros1.sonypictures.com
brand.sonypictures.com
gam.sonypictures.com
stage-microsites.sonypictures.com
perc.sonypictures.com
sony-prod.actioniq.mr-in.com
click.email.sonypictures.com
stage-edge-portals.sonypictures.com
stage-microsites.sonypictures.com
tweets.sonypictures.com
flash.sonypictures.com
rewards.sonypictures.com
pages.email.games.sonypictures.com
view.email.sonypictures.com
rewards.sonypictures.com
redeem.sonypictures.com
microsites.sonypictures.com
redeem.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
origin-flash.sonypictures.com

Certificate

The complete raw certificate details for edge-micros2.sonypictures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE0Y71lM1UusZYbobsalyJcG7m19tc
Q+VfHa/f6YwLRKesP4Rq0b8PI59bZa7MrPeG49vD1i9zTEdLuuSfOXkHFQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7309886980291156320855509570689500776
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G3 TLS ECC SHA384 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Culver City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sony Pictures Entertainment, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'edge-micros2.sonypictures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004d18ef594cd54bac6586e86ec6a5c89706ee6d7db5c43e55f1dafdfe98c0b44a7ac3f846ad1bf0f239f5b65aeccacf786e3dbc3d62f734c474bbae49f39790715
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8a23eb9e6bd7f9375df96d2139769aa167de10a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f8a05602a17a3050f9cb1254ab926fbbb9723c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2587 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge-micros2.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghostbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.sonypictures.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biomovie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paulmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterrabbitmovie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiderman-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiderversemovie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thestarmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uncharted-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venom-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helldogs.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catchuponspidey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spider-verse.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.spidermannowayhome.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vatican-exorcist.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spider-verse-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spider-verse-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.acrossthespiderverse.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haroldandthepurplecrayon.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haroldspurplecrayon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kravenmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kraven-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.miracleclubmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kraventhehuntermovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napoleon-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiapictures100.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diymovienightathome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journeytobethlehemmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.justicier-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.carlosfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.equalizer.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.n-importe-qui-sauf-toi-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anyone-but-you-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anyonebutyoumovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anyonebutyou.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anyonebutyoumovie.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garfield-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.the-book-of-clarence-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbustersar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cultkillermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madamewebmovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madamewebmovie.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madameweb.sonypictures.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madameweb.sonypictures.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madameweb.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.peasantsmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.ameliemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tarotmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.takarajima-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madameweb.sonypictures.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demon-slayer-movie-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepersianversion.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbustersmovie.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbustersfrozenempire.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghostbusters.sonypictures.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbusters-movie-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-fantomes-lefilm-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghostbusters.sonypictures.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghostbusters.sonypictures.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbusters.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghostbusters.sonypictures.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghostbusters.sonypictures.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghostbusters.sonypictures.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghostbusters.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gbsapocalipsedegelo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghostbustersmovie.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghostbusters.sonypictures.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yolo.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flymetothemoon.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.koipuri-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sale.ghostbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garfield-movie.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garfieldmovie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garfield.sonypictures.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garfieldforadecasa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garfield-movie-tix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garfield-lefilm-billets.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garfield.sonypictures.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garfield.sonypictures.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garfieldmovie.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garfield.sonypictures.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garfieldmovie.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garfield.sonypictures.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garfield.sonypictures.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garfield.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookofclarence.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.daddiofilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.must-watchmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcvd.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolfsmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unlockthemoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paddingtonmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolfs-movie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takarajima-movie.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . [c:0|t:3|false] BIT STRING (824 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 35485110049413108778422048024903606445462236276547225640312849667048166191923512355850935927939098881638041137618626
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 13404366367155646605200017529304460533587078646345098937575535467215726867699041745244217869201567073893429250506557