cinesony.com

- Sony Pictures Entertainment -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 0c:b8:88:23:f8:64:de:8c:9a:27:73:3c:2f:2c:98:cb was issued on by DigiCert Inc.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sony Pictures Entertainment

Organization: Sony Pictures Entertainment
Organization unit: IST
State / Province: California
Locality: Culver City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:b8:88:23:f8:64:de:8c:9a:27:73:3c:2f:2c:98:cb
Serial Number (int): 16908879828955409361591149698204080331
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b8:99:39:7f:fe:b4:58:6b:a8:0e:cd:a6:23:6a:bb:7d:19:5e:fd:44
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 53:31:9f:2d:3f:11:95:d6:14:3d:cd:af:ca:24:ef:12:74:6c:e6:5c
Fingerprint (sha256): ac:00:ef:f8:8b:bf:0b:44:8f:70:fb:af:cb:74:8f:36:3f:d0:6f:cb:52:b8:ae:d2:b1:6e:cf:04:bd:54:56:b2

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate cinesony.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cinesony.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cinesony.com
advertising.crackle.com
affiliates.get.tv
affiliates.sonymoviechannel.com
prod.advertising.crackle.com
prod.affiliates.get.tv
prod.affiliates.sonymoviechannel.com
prod.cinesony.com
prod.madisongaterecords.com
madisongaterecords.com
www.madisongaterecords.com
prod.advertising.sonycrackle.com
advertising.sonycrackle.com
affiliates.cinesony.com
prod.affiliates.cinesony.com

Other certificates including the domain name cinesony.com

(limited to 100 certificates)
la.axn.com
staging.cinesony.com
la.axn.com
la.axn.com
la.axn.com
la.axn.com
la.axn.com
la.axn.com
la.axn.com
staging.cinesony.com
www.sonymoviechannel.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
cinesony.com
staging.cinesony.com
affiliates.cinesony.com
staging.cinesony.com
edge-affiliates.cinesony.com
affiliates.cinesony.com
la.axn.com
staging.cinesony.com
affiliates.cinesony.com
www.sonytv.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
la.axn.com
staging.cinesony.com
affiliates.cinesony.com
la.axn.com
affiliates.cinesony.com
staging.cinesony.com
staging.cinesony.com
la.axn.com
cinesony.com
staging.cinesony.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
affiliates.cinesony.com
la.axn.com
www.sonytv.com
la.axn.com
edge-affiliates.cinesony.com
www.sonytv.com
affiliates.cinesony.com
edge-affiliates.cinesony.com
www.sonytv.com
cinesony.com
staging.cinesony.com
edge-affiliates.cinesony.com
la.axn.com
staging.cinesony.com
edge-affiliates.cinesony.com
www.cinesony.com
la.axn.com
la.axn.com
edge-affiliates.cinesony.com
cinesony.com
edge-affiliates.cinesony.com
la.axn.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
la.axn.com
edge-affiliates.cinesony.com
staging.cinesony.com
www.sonytv.com
la.axn.com
affiliates.cinesony.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com
la.axn.com
staging.cinesony.com
la.axn.com
edge-affiliates.cinesony.com
affiliates.cinesony.com
la.axn.com
edge-affiliates.cinesony.com
staging.cinesony.com
cinesony.com
edge-affiliates.cinesony.com
cinesony.com
la.axn.com
affiliates.cinesony.com
cinesony.com
la.axn.com
affiliates.cinesony.com
la.axn.com
edge-affiliates.cinesony.com
www.cinesony.com
staging.cinesony.com
staging.cinesony.com
staging.cinesony.com
edge-affiliates.cinesony.com
affiliates.cinesony.com
www.sonytv.com
www.sonytv.com
edge-affiliates.cinesony.com
edge-affiliates.cinesony.com

Certificate

The complete raw certificate details for cinesony.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGxjCCBa6gAwIBAgIQDLiII/hk3oyaJ3M8LyyYyzANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE
aWdpQ2VydCBHbG9iYWwgQ0EgRzIwHhcNMTkwNDA1MDAwMDAwWhcNMjAwNDA0MTIw
MDAwWjCBgzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExFDASBgNV
BAcTC0N1bHZlciBDaXR5MSQwIgYDVQQKExtTb255IFBpY3R1cmVzIEVudGVydGFp
bm1lbnQxDDAKBgNVBAsTA0lTVDEVMBMGA1UEAxMMY2luZXNvbnkuY29tMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxKKNJpNclfbCZHOgVw5QsASVAOU
7vHW2mp/dwsbDO4bbscUkT4xgsbTkoZfWbe7Zb1nwXclSC8NM+5SLQa7DUDrqV9f
zIlrmbQE02wu/oOQAQkZANV41Rk1bE1K5CMzxrFQJKsamZv4ZKzMEvGUEHuo87+l
i6XOu1Gc0j3+dJYPPgHsZvBM9fnqXUxYMM8YJp+FQQ3CcKK6Tc7lY2AAdBa/pYhH
I+ZFbUArtuu6c8qmzFj1nGXkqt2saz3BIY7n/mAtxmYb78CO7VqR3dIwR3gDpofY
gSHUebke45FPmeiMDJo0Lha5oYgY08TS5JfEl0ry9hLqmzbLOYgwqA1luwIDAQAB
o4IDcjCCA24wHwYDVR0jBBgwFoAUJG4rLdBqklFRJWkBqppHponnQCAwHQYDVR0O
BBYEFLiZOX/+tFhrqA7NpiNqu30ZXv1EMIIBngYDVR0RBIIBlTCCAZGCDGNpbmVz
b255LmNvbYIXYWR2ZXJ0aXNpbmcuY3JhY2tsZS5jb22CEWFmZmlsaWF0ZXMuZ2V0
LnR2gh9hZmZpbGlhdGVzLnNvbnltb3ZpZWNoYW5uZWwuY29tghxwcm9kLmFkdmVy
dGlzaW5nLmNyYWNrbGUuY29tghZwcm9kLmFmZmlsaWF0ZXMuZ2V0LnR2giRwcm9k
LmFmZmlsaWF0ZXMuc29ueW1vdmllY2hhbm5lbC5jb22CEXByb2QuY2luZXNvbnku
Y29tghtwcm9kLm1hZGlzb25nYXRlcmVjb3Jkcy5jb22CFm1hZGlzb25nYXRlcmVj
b3Jkcy5jb22CGnd3dy5tYWRpc29uZ2F0ZXJlY29yZHMuY29tgiBwcm9kLmFkdmVy
dGlzaW5nLnNvbnljcmFja2xlLmNvbYIbYWR2ZXJ0aXNpbmcuc29ueWNyYWNrbGUu
Y29tghdhZmZpbGlhdGVzLmNpbmVzb255LmNvbYIccHJvZC5hZmZpbGlhdGVzLmNp
bmVzb255LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMHcGA1UdHwRwMG4wNaAzoDGGL2h0dHA6Ly9jcmwzLmRpZ2ljZXJ0
LmNvbS9EaWdpQ2VydEdsb2JhbENBRzIuY3JsMDWgM6Axhi9odHRwOi8vY3JsNC5k
aWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxDQUcyLmNybDBMBgNVHSAERTBDMDcG
CWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5j
b20vQ1BTMAgGBmeBDAECAjB0BggrBgEFBQcBAQRoMGYwJAYIKwYBBQUHMAGGGGh0
dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTA+BggrBgEFBQcwAoYyaHR0cDovL2NhY2Vy
dHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsQ0FHMi5jcnQwCQYDVR0TBAIw
ADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwnuUM4I3
X1HVFr2Mx3VNYgblZjtyZdYHELxExbYkq+ZtMdMfHv+Hacw2nlt6eK67MOj40aXe
dI/yAa6jbvoaTygYUEBHg/ompKQlz9hEkmChx4qguTY1+yCiKtRrNKA9aEI9iqxC
bn1icJ5UwlQ3Fy6RFw3B3U+iiBnF814N01ro3yFsHqjHs/y54TDUupDX+EkkEbwZ
iUbgPIHlun4+5N+CM5akcFrnyRv45VmD6nab6six++J5U41u3/6H8Fvzvb67mMMg
LD9xy6W6tmOsn/kmwG76kmeHsH/N9wIJ9dzOfO3wMi5CNOWu6k54J2e7uT0OVwtW
okWfCPeBFPiR+w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxKKNJpNclfbCZHOgVw5
QsASVAOU7vHW2mp/dwsbDO4bbscUkT4xgsbTkoZfWbe7Zb1nwXclSC8NM+5SLQa7
DUDrqV9fzIlrmbQE02wu/oOQAQkZANV41Rk1bE1K5CMzxrFQJKsamZv4ZKzMEvGU
EHuo87+li6XOu1Gc0j3+dJYPPgHsZvBM9fnqXUxYMM8YJp+FQQ3CcKK6Tc7lY2AA
dBa/pYhHI+ZFbUArtuu6c8qmzFj1nGXkqt2saz3BIY7n/mAtxmYb78CO7VqR3dIw
R3gDpofYgSHUebke45FPmeiMDJo0Lha5oYgY08TS5JfEl0ry9hLqmzbLOYgwqA1l
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16908879828955409361591149698204080331
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Culver City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sony Pictures Entertainment'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IST'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cinesony.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23615705376900473258245606688940780728335094356698694249548488272156066801999397742318114363979064515564180071765934222927065318790113869631338227945139010386884927899868849722700842170656498529267148273657450548800055506184781485816955748710784734096688098423193211741046233227546005301198730155775048399898442482784989597669762782470027818471952948622825280663758655005742844535958243605421501887873886292815040561751990310728598927382652329799537466051017884833877613594582236733372076579072933335720991606386462972489219034236754602586922672299069086259137712922354697781049538423282680568986578601474363937875387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b899397ffeb4586ba80ecda6236abb7d195efd44
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (405 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinesony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advertising.crackle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliates.get.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliates.sonymoviechannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.advertising.crackle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.affiliates.get.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.affiliates.sonymoviechannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.cinesony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.madisongaterecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madisongaterecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madisongaterecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.advertising.sonycrackle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advertising.sonycrackle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliates.cinesony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.affiliates.cinesony.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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