flash.sonypictures.com

- Sony Pictures Entertainment, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 09:81:2b:b1:1f:e7:70:87:8f:18:7d:92:e3:54:4e:21 was issued on by DigiCert Inc.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sony Pictures Entertainment, Inc.

Organization: Sony Pictures Entertainment, Inc.
State / Province: California
Locality: Culver City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:81:2b:b1:1f:e7:70:87:8f:18:7d:92:e3:54:4e:21
Serial Number (int): 12633744433686786241291018595653144097
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 10:8d:5d:58:c0:3c:f3:9e:1a:2a:af:10:38:1d:9e:5e:a4:e8:a4:dd
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 49:63:be:6e:d0:b4:2b:88:ff:e8:8b:d9:fa:38:e5:09:f9:bb:10:e2
Fingerprint (sha256): d2:3b:5d:4c:55:54:6a:f2:f8:23:e8:7a:bb:98:da:57:a5:6f:29:85:dc:2d:76:14:f5:d0:13:f4:8f:d6:cb:36

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate flash.sonypictures.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for flash.sonypictures.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

flash.sonypictures.com
benefits.sonypictures.com
brand.sonypictures.com
cdn.playshow.io
cdn.sonypicturestelevisiongames.com
dev.brand.sonypictures.com
dev.formats.sonypictures.com
dev.fyc.sonypictures.com
dev.globalassethub.sonypictures.com
dev.media.sonypictures.com
dev.presskits.sonypictures.com
dev.preview.sonypictures.com
dev.qa-admin.wheeloffortune.com
dev.qa-games.wheeloffortune.com
dev.qa-giveaways.wheeloffortune.com
dev.qa.wheeloffortune.com
dev.sonypicturesmuseum.com
dev.wwtbam.com
fb-stage.wheelpop.com
fb.wheelpop.com
formats.sonypictures.com
fyc.sonypictures.com
gam-dev.sonypictures.com
gam.sonypictures.com
globalassethub.sonypictures.com
gum-dev.sonypictures.com
gum.sonypictures.com
lt.wheeloffortune.com
media.sonypictures.com
prd.sonypicturestelevision.com
presskits.sonypictures.com
preview.sonypictures.com
prod-gum.sonypictures.com
prod.sonypicturesmuseum.com
prod.wheeloffortune.com
qa-admin.wheeloffortune.com
qa-games.wheeloffortune.com
qa-giveaways.wheeloffortune.com
qa.wheeloffortune.com
secure-dev.sonypictures.com
secure-prod.sonypictures.com
secure.sonypictures.com
sonypictures.com
sonypicturesmuseum.com
stg.brand.sonypictures.com
stg.formats.sonypictures.com
stg.fyc.sonypictures.com
stg.globalassethub.sonypictures.com
stg.imageworks.com
stg.media.sonypictures.com
stg.presskits.sonypictures.com
stg.preview.sonypictures.com
stg.sonypictures.com
stg.sonypictures.es
stg.sonypicturesanimation.com
stg.wwtbam.com
wwtbam.com
www.cdn.playshow.io
www.imageworks.com
www.PlayShowTV.com
www.sonypictures.be
www.sonypictures.com
www.sonypictures.es
www.sonypictures.fr
www.sonypicturesanimation.com
www.sonypicturesmuseum.com
www.wheelpop.com
www.wwtbam.com
www.sonypictures.ie
www.sonypictures.co.uk
www.sonypictures.ca
chameleon.spe.sony.com
sonypictures.jp
stage.sonypictures.jp
www.sonypictures.jp
qa-games.spe.wheeloffortune.com
qa-giveaways.spe.wheeloffortune.com
qa.spe.wheeloffortune.com
stg.stage6films.com
stg.thedailybugle.net
www.thedailybugle.net
stg-benefits.sonypictures.com
www.sonypictures.de
www.sonypictures.at
www.sonypictures.com.br
impossiblescience.com
www.impossiblescience.com
www2.impossiblescience.com
dev.impossiblescience.com
stg.impossiblescience.com
www.sonypictures.it
globalassethub-dev.sonypictures.com
stage-productionservices.sonypictures.com
www2.stage-productionservices.sonypictures.com
stg-stage-productionservices.sonypictures.com

Other certificates including the domain name sonypictures.com

(limited to 100 certificates)
conectados.sonypictures.com
*.sonypictures.com
redeem.sonypictures.com
origin-flash.sonypictures.com
edge-micros1.sonypictures.com
secure.sonypictures.com
origin-flash.sonypictures.com
edge-micros2.sonypictures.com
brand.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
extaz-qa.spe.sony.com
edge-micros2.sonypictures.com
edge-micros2.sonypictures.com
sites.sonypictures.com
sites.sonypictures.com
secure.sonypictures.com
globalassethub.sonypictures.com
www.stage6films.com
api.stg-stage-productionservices.sonypictures.com
pub.email.sonypictures.com
connect.sonypictures.com
sites.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
stage-microsites.sonypictures.com
portals.sonypictures.com
microsites.sonypictures.com
image.20210419.200345.s6.et.yellsatcloud.com
globalassethub.sonypictures.com
portals.sonypictures.com
portals.sonypictures.com
conectados.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
sites.sonypictures.com
edge-portals.sonypictures.com
edge-micros1.sonypictures.com
globalassethub.sonypictures.com
edge-micros2.sonypictures.com
flash.sonypictures.com
pub.email.sonypictures.com
griffin.sonypictures.com
view.email.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
flash.sonypictures.com
microsites.sonypictures.com
sites.sonypictures.com
audiolibrary.sonypictures.com
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
akamai-san77.exacttarget.com
stage-microsites.sonypictures.com
www.sonypictures.co.uk
edge-portals.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
viewer.sonypictures.com
secure.sonypictures.com
edge-portals.sonypictures.com
sites2.sonypictures.com
edge-micros2.sonypictures.com
test.rewards.sonypictures.com
www.stage6films.com
test.rewards.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
gam.sonypictures.com
microsites.sonypictures.com
flash.sonypictures.com
view.email.games.sonypictures.com
rewards.sonypictures.com
test.redeem.sonypictures.com
edge-micros1.sonypictures.com
brand.sonypictures.com
gam.sonypictures.com
stage-microsites.sonypictures.com
perc.sonypictures.com
sony-prod.actioniq.mr-in.com
click.email.sonypictures.com
stage-edge-portals.sonypictures.com
stage-microsites.sonypictures.com
tweets.sonypictures.com
flash.sonypictures.com
rewards.sonypictures.com
pages.email.games.sonypictures.com
view.email.sonypictures.com
rewards.sonypictures.com
redeem.sonypictures.com
microsites.sonypictures.com
redeem.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
origin-flash.sonypictures.com

Certificate

The complete raw certificate details for flash.sonypictures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQiDCCD3CgAwIBAgIQCYErsR/ncIePGH2S41ROITANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMjA4MjYwMDAwMDBa
Fw0yMzA5MjIyMzU5NTlaMIGFMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZv
cm5pYTEUMBIGA1UEBxMLQ3VsdmVyIENpdHkxKjAoBgNVBAoTIVNvbnkgUGljdHVy
ZXMgRW50ZXJ0YWlubWVudCwgSW5jLjEfMB0GA1UEAxMWZmxhc2guc29ueXBpY3R1
cmVzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL0w2gS7oGmL
q2Zs7xoInnJWgIo3V9k//Xm7VUOd04HjXowRXluJlrMyK5fC9CQrLj+mdbdA9X71
X8lbdU57g74WBZ7AJZIuzW0A6JPXoHZz87S/sykUA0U4yu0L36/pbj0jFZcfoJbJ
aLomtbo+57UaVNDHEEbEzIR7BLsFZnc/qs8x2vX7LxV8DPPQiSDUhyXq7fdXVRY0
9LPdb5/o6x9ON3HtFmEEU0SfGvjVA8tXd3z1PLRgUNUqEYZx/TdcO7QW5wG3lyH2
BIWXUv3P/qko4xvxZQTVaBXdi8ChWlWqryE3Tc6liV1puvQPnau6A6jEFtWwIHYU
1WufQUHXiRcCAwEAAaOCDScwgg0jMB8GA1UdIwQYMBaAFLdrouqoqoSMeeq02g+Y
ssWVdrn0MB0GA1UdDgQWBBQQjV1YwDzznhoqrxA4HZ5epOik3TCCCc8GA1UdEQSC
CcYwggnCghZmbGFzaC5zb255cGljdHVyZXMuY29tghliZW5lZml0cy5zb255cGlj
dHVyZXMuY29tghZicmFuZC5zb255cGljdHVyZXMuY29tgg9jZG4ucGxheXNob3cu
aW+CI2Nkbi5zb255cGljdHVyZXN0ZWxldmlzaW9uZ2FtZXMuY29tghpkZXYuYnJh
bmQuc29ueXBpY3R1cmVzLmNvbYIcZGV2LmZvcm1hdHMuc29ueXBpY3R1cmVzLmNv
bYIYZGV2LmZ5Yy5zb255cGljdHVyZXMuY29tgiNkZXYuZ2xvYmFsYXNzZXRodWIu
c29ueXBpY3R1cmVzLmNvbYIaZGV2Lm1lZGlhLnNvbnlwaWN0dXJlcy5jb22CHmRl
di5wcmVzc2tpdHMuc29ueXBpY3R1cmVzLmNvbYIcZGV2LnByZXZpZXcuc29ueXBp
Y3R1cmVzLmNvbYIfZGV2LnFhLWFkbWluLndoZWVsb2Zmb3J0dW5lLmNvbYIfZGV2
LnFhLWdhbWVzLndoZWVsb2Zmb3J0dW5lLmNvbYIjZGV2LnFhLWdpdmVhd2F5cy53
aGVlbG9mZm9ydHVuZS5jb22CGWRldi5xYS53aGVlbG9mZm9ydHVuZS5jb22CGmRl
di5zb255cGljdHVyZXNtdXNldW0uY29tgg5kZXYud3d0YmFtLmNvbYIVZmItc3Rh
Z2Uud2hlZWxwb3AuY29tgg9mYi53aGVlbHBvcC5jb22CGGZvcm1hdHMuc29ueXBp
Y3R1cmVzLmNvbYIUZnljLnNvbnlwaWN0dXJlcy5jb22CGGdhbS1kZXYuc29ueXBp
Y3R1cmVzLmNvbYIUZ2FtLnNvbnlwaWN0dXJlcy5jb22CH2dsb2JhbGFzc2V0aHVi
LnNvbnlwaWN0dXJlcy5jb22CGGd1bS1kZXYuc29ueXBpY3R1cmVzLmNvbYIUZ3Vt
LnNvbnlwaWN0dXJlcy5jb22CFWx0LndoZWVsb2Zmb3J0dW5lLmNvbYIWbWVkaWEu
c29ueXBpY3R1cmVzLmNvbYIecHJkLnNvbnlwaWN0dXJlc3RlbGV2aXNpb24uY29t
ghpwcmVzc2tpdHMuc29ueXBpY3R1cmVzLmNvbYIYcHJldmlldy5zb255cGljdHVy
ZXMuY29tghlwcm9kLWd1bS5zb255cGljdHVyZXMuY29tghtwcm9kLnNvbnlwaWN0
dXJlc211c2V1bS5jb22CF3Byb2Qud2hlZWxvZmZvcnR1bmUuY29tghtxYS1hZG1p
bi53aGVlbG9mZm9ydHVuZS5jb22CG3FhLWdhbWVzLndoZWVsb2Zmb3J0dW5lLmNv
bYIfcWEtZ2l2ZWF3YXlzLndoZWVsb2Zmb3J0dW5lLmNvbYIVcWEud2hlZWxvZmZv
cnR1bmUuY29tghtzZWN1cmUtZGV2LnNvbnlwaWN0dXJlcy5jb22CHHNlY3VyZS1w
cm9kLnNvbnlwaWN0dXJlcy5jb22CF3NlY3VyZS5zb255cGljdHVyZXMuY29tghBz
b255cGljdHVyZXMuY29tghZzb255cGljdHVyZXNtdXNldW0uY29tghpzdGcuYnJh
bmQuc29ueXBpY3R1cmVzLmNvbYIcc3RnLmZvcm1hdHMuc29ueXBpY3R1cmVzLmNv
bYIYc3RnLmZ5Yy5zb255cGljdHVyZXMuY29tgiNzdGcuZ2xvYmFsYXNzZXRodWIu
c29ueXBpY3R1cmVzLmNvbYISc3RnLmltYWdld29ya3MuY29tghpzdGcubWVkaWEu
c29ueXBpY3R1cmVzLmNvbYIec3RnLnByZXNza2l0cy5zb255cGljdHVyZXMuY29t
ghxzdGcucHJldmlldy5zb255cGljdHVyZXMuY29tghRzdGcuc29ueXBpY3R1cmVz
LmNvbYITc3RnLnNvbnlwaWN0dXJlcy5lc4Idc3RnLnNvbnlwaWN0dXJlc2FuaW1h
dGlvbi5jb22CDnN0Zy53d3RiYW0uY29tggp3d3RiYW0uY29tghN3d3cuY2RuLnBs
YXlzaG93LmlvghJ3d3cuaW1hZ2V3b3Jrcy5jb22CEnd3dy5QbGF5U2hvd1RWLmNv
bYITd3d3LnNvbnlwaWN0dXJlcy5iZYIUd3d3LnNvbnlwaWN0dXJlcy5jb22CE3d3
dy5zb255cGljdHVyZXMuZXOCE3d3dy5zb255cGljdHVyZXMuZnKCHXd3dy5zb255
cGljdHVyZXNhbmltYXRpb24uY29tghp3d3cuc29ueXBpY3R1cmVzbXVzZXVtLmNv
bYIQd3d3LndoZWVscG9wLmNvbYIOd3d3Lnd3dGJhbS5jb22CE3d3dy5zb255cGlj
dHVyZXMuaWWCFnd3dy5zb255cGljdHVyZXMuY28udWuCE3d3dy5zb255cGljdHVy
ZXMuY2GCFmNoYW1lbGVvbi5zcGUuc29ueS5jb22CD3NvbnlwaWN0dXJlcy5qcIIV
c3RhZ2Uuc29ueXBpY3R1cmVzLmpwghN3d3cuc29ueXBpY3R1cmVzLmpwgh9xYS1n
YW1lcy5zcGUud2hlZWxvZmZvcnR1bmUuY29tgiNxYS1naXZlYXdheXMuc3BlLndo
ZWVsb2Zmb3J0dW5lLmNvbYIZcWEuc3BlLndoZWVsb2Zmb3J0dW5lLmNvbYITc3Rn
LnN0YWdlNmZpbG1zLmNvbYIVc3RnLnRoZWRhaWx5YnVnbGUubmV0ghV3d3cudGhl
ZGFpbHlidWdsZS5uZXSCHXN0Zy1iZW5lZml0cy5zb255cGljdHVyZXMuY29tghN3
d3cuc29ueXBpY3R1cmVzLmRlghN3d3cuc29ueXBpY3R1cmVzLmF0ghd3d3cuc29u
eXBpY3R1cmVzLmNvbS5icoIVaW1wb3NzaWJsZXNjaWVuY2UuY29tghl3d3cuaW1w
b3NzaWJsZXNjaWVuY2UuY29tghp3d3cyLmltcG9zc2libGVzY2llbmNlLmNvbYIZ
ZGV2LmltcG9zc2libGVzY2llbmNlLmNvbYIZc3RnLmltcG9zc2libGVzY2llbmNl
LmNvbYITd3d3LnNvbnlwaWN0dXJlcy5pdIIjZ2xvYmFsYXNzZXRodWItZGV2LnNv
bnlwaWN0dXJlcy5jb22CKXN0YWdlLXByb2R1Y3Rpb25zZXJ2aWNlcy5zb255cGlj
dHVyZXMuY29tgi53d3cyLnN0YWdlLXByb2R1Y3Rpb25zZXJ2aWNlcy5zb255cGlj
dHVyZXMuY29tgi1zdGctc3RhZ2UtcHJvZHVjdGlvbnNlcnZpY2VzLnNvbnlwaWN0
dXJlcy5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjCBjwYDVR0fBIGHMIGEMECgPqA8hjpodHRwOi8vY3JsMy5kaWdpY2Vy
dC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3JsMECgPqA8hjpo
dHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIw
Q0ExLTQuY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0
dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB/BggrBgEFBQcBAQRzMHEwJAYIKwYB
BQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBJBggrBgEFBQcwAoY9aHR0
cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAy
MENBMS0xLmNydDAJBgNVHRMEAjAAMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkA
dgDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYLcFtSyAAAEAwBH
MEUCIQCeegc0ax5mMYfNHdtbhIpcMSpj8MVSdv9soK9pOZy4WgIgZgA1MQR5N4/v
QK90+6HdNMav1NOs1jTX1NbFuutqpYMAdgA1zxkbv7FsV78PrUxtQsu7ticgJlHq
P+Eq76gDwzvWTAAAAYLcFtTlAAAEAwBHMEUCIGgNXPPEH7uZ5LHaqhF4CY22/Bcj
1BZiL17IzODqMe0tAiEAhcWegL+nS36+QcR6QB1LfegwtdAc7QxamIijVIH03wMA
dwCzc3cH4YRQ+GOG1gWp3BEJSnktsWcMC4fc8AMOeTalmgAAAYLcFtUrAAAEAwBI
MEYCIQDZZ/mwFYHsbkp8sFte9aO+0930GMU0tHT6ezx2QjBuWwIhAJKjH8gafaX3
N/+rpczo9Mc5oerGv3XHA98RyR3kEYg+MA0GCSqGSIb3DQEBCwUAA4IBAQCHrZm6
2ZCY/mp8PU83YqC7h5nY5Upzq9znc+LG+UE3hsGB0ANtGvTsUKTYIvvK5HgpLokV
HPr7wDYbKUIIQjxW7xuAH1LXMYEiWQFecYSVWX/YZE4l1QhEZKx9icCKcVcdEga1
8qyPnPhoRNRTK2f5851YI4gCgn8ZS6dDkDp7dFnKx5e0GU5MHmlB7WBxG0sWe70t
OWSgKmacEhwS2GTcFdtEbItFCMoYabcOf5tz9YniTJv0pcUNbBQeoavjjTtzIHHR
95Ay2iIFBO9aRBsaCDRYC59stw1KpW6a4WevpHJ8F9yhKRlFE21JqsA65uhDLBmv
XKCMtXp+Jl+iCCO8
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTDaBLugaYurZmzvGgie
claAijdX2T/9ebtVQ53TgeNejBFeW4mWszIrl8L0JCsuP6Z1t0D1fvVfyVt1TnuD
vhYFnsAlki7NbQDok9egdnPztL+zKRQDRTjK7Qvfr+luPSMVlx+glslouia1uj7n
tRpU0McQRsTMhHsEuwVmdz+qzzHa9fsvFXwM89CJINSHJert91dVFjT0s91vn+jr
H043ce0WYQRTRJ8a+NUDy1d3fPU8tGBQ1SoRhnH9N1w7tBbnAbeXIfYEhZdS/c/+
qSjjG/FlBNVoFd2LwKFaVaqvITdNzqWJXWm69A+dq7oDqMQW1bAgdhTVa59BQdeJ
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12633744433686786241291018595653144097
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Culver City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sony Pictures Entertainment, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flash.sonypictures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23883129277497946040504372144544271542485612026866467487309422846308555133385455877127708704844097545075026141750441221047416643010342996525274054113113231210659005336862232402920741512494232327756240379266813842512756787782569182278236716235891231298925362491100997472412846503877589164983313147934183772818856890100481971599240928951610995550936583321502193613712000575923247386501086338673317302644384129435470811747165972197027023800179285676919831585672276379729998128665756261619635943190763684751733054654764893200573161676745364616919199557875877643087971284212229575197000122919569555253914275849381967530263
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							108d5d58c03cf39e1a2aaf10381d9e5ea4e8a4dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2502 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flash.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefits.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brand.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.playshow.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.sonypicturestelevisiongames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.brand.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.formats.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.fyc.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.globalassethub.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.media.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.presskits.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.preview.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.qa-admin.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.qa-games.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.qa-giveaways.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.qa.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.sonypicturesmuseum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.wwtbam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fb-stage.wheelpop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fb.wheelpop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formats.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fyc.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gam-dev.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gam.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalassethub.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gum-dev.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gum.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lt.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prd.sonypicturestelevision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presskits.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-gum.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.sonypicturesmuseum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-admin.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-games.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-giveaways.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-dev.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-prod.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonypicturesmuseum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.brand.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.formats.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.fyc.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.globalassethub.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.imageworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.media.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.presskits.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.preview.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.sonypictures.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.sonypicturesanimation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.wwtbam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwtbam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdn.playshow.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imageworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.PlayShowTV.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypicturesanimation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypicturesmuseum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wheelpop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wwtbam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chameleon.spe.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonypictures.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.sonypictures.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-games.spe.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-giveaways.spe.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.spe.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.stage6films.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.thedailybugle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thedailybugle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-benefits.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impossiblescience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.impossiblescience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.impossiblescience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.impossiblescience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.impossiblescience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonypictures.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalassethub-dev.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-productionservices.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.stage-productionservices.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-stage-productionservices.sonypictures.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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