enseo-stg.play.codex-int.hbo.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0e:d6:83:d6:78:4d:df:dc:c7:95:cb:80:8c:86:0f:fa was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=enseo-stg.play.codex-int.hbo.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:d6:83:d6:78:4d:df:dc:c7:95:cb:80:8c:86:0f:fa
Serial Number (int): 19723017456432477381615342745163272186
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f6:fd:00:40:19:fc:f9:29:4a:d6:c9:49:9e:9e:3a:f1:1d:8e:26:53
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): e9:3d:6b:f2:be:ed:80:fc:12:c3:dd:77:6f:69:08:c1:56:31:ea:84
Fingerprint (sha256): 00:31:76:90:89:6b:4d:47:70:5c:54:8c:c8:3c:c8:e8:53:43:ed:04:1f:f7:c9:4b:e4:c7:ac:9d:6e:ba:59:73

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate enseo-stg.play.codex-int.hbo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for enseo-stg.play.codex-int.hbo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

enseo-stg.play.codex-int.hbo.com

Other certificates including the domain name hbo.com

(limited to 100 certificates)
dash.pro42.akm.cdn.hbogo.com
enseo-stg.play.codex-int.hbo.com
commerce-emea.api.hbo.com
cyberducktest.microsites.hbo.com
customer-test.ssl.fastly.net
lightning-web.play.codex-int.hbo.com
secure06.lithium.com
test-cert.sandbox.wmdtc.tech
concierge.api.hbo.com
turner.com
www.shop.hbo.com
jira.dp.hbo.com
dmx-web.play.codex-int.hbo.com
origin.mvpdstreaming.hbo.com
secure06.lithium.com
testing.dp.hbo.com
*.lightning-web.apps-dev.codex-int.hbo.com
testing.dp.hbo.com
*.kpn.lightning.codex-int.hbo.com
device-update.api.hbo.com
kpn.play.codex-int.hbo.com
vip.hbo.com
o365.hbo.com
ssodev.homeboxoffice.com
comet-eu-1-eu-central-1.api.hbo.com
dns-vetting1k.map.fastly.net
*.dp.hbo.com
*.dev.security.hbo.com
castle-1-us-west-2-int.staging.staging-api.hbo.com
u2.shared.global.fastly.net
user-comet-1-snp-us-west-2.development.hurley.hbo.com
groot-1-us-east-1-int.latam.api.hbo.com
jenkins.k8s.hurley.hbo.com
youtrack.hbo.com
testing.dp.hbo.com
privacy-processor-latam-1-us-east-1.api.hbo.com
dns-vetting1k.map.fastly.net
*.dev.security.hbo.com
mvpd-authn-manager-eu-1-eu-central-1.api.hbo.com
customer-test.ssl.fastly.net
hbo.map.fastly.net
secure02.stage.lithium.com
b2bmicrositesadmin.hbo.com
u2.shared.global.fastly.net
netbox.development.datacenter.hbo.com
testing.dp.hbo.com
secure06.lithium.com
customer-test.ssl.fastly.net
customer-test.ssl.fastly.net
dash.pro42.akm.cdn.hbogo.com
login-us-1-us-west-2.api.hbo.com
api.hbo.com
screendiff.hadron.hbo.com
alb-redirector-production-us-east-1.api.hbo.com
profiles-eu-1-eu-central-1.api.hbo.com
hurley.hbo.com
mongo.prod-espv4.hbo.com
dns-vetting1k.map.fastly.net
f2.shared.global.fastly.net
concierge.api.hbo.com
hbo.map.fastly.net
fromthevault.hbo.com
drm-proxy-us-1-us-east-1-1.api.hbo.com
jenkins-pi3.mgmt.wmdtc.tech
cdn.hbo.com
profiles-us-1-us-east-2.api.hbo.com
messaging-api-test.micro.hbo.com
alertmanager.staging.datacenter.hbo.com
art-gallery.akm.cdn.hbo.com
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
smatrix.hbo.com
u2.shared.global.fastly.net
andreas.caps.codex-int.hbo.com
vizio.play.codex-int.hbo.com
lightning.play.codex-int.hbo.com
testing.dp.hbo.com
dns-vetting1k.map.fastly.net
www.fromthevault.hbo.com
hotd-character-guide.micro.hbo.com
shop.hbo.com
testing.dp.hbo.com
drm-proxy-latam-1-us-east-1.api.hbo.com
dns-vetting1k.map.fastly.net
customer-test.ssl.fastly.net
customer-test.ssl.fastly.net
u2.shared.global.fastly.net
profiles-1-us-east-1-int.latam.api.hbo.com
customer-test.ssl.fastly.net
customer-test.ssl.fastly.net
jenkins.k8s.hurley.hbo.com
customer-test.ssl.fastly.net
splunk.hbo.com
shop.hbo.com
www.fromthevault.hbo.com
eks-service-alb-tftest-1.sandbox.wmdtc.tech
concierge.api.hbo.com
secure02.stage.lithium.com
shared-ingress-public-prod-us-1-us-east-1.api.hbo.com
weichi.caps.codex-int.hbo.com

Certificate

The complete raw certificate details for enseo-stg.play.codex-int.hbo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nNPs6uwDMJGprTvzjNI
wqVdYt8m8UIwTKZZVbC6lqRO4O1pbUHVObtMOwopDT9q0uYISuLS0Cip0rZJcPpx
XWTlOUzNgvIKzoihK6gfuSxgEQwmztN7IweACDFUnjq2lNF1OaHGJD5rGy11Aqir
Q/DDGV+oOwhcjNqtC0XYmMucO06uDdSck44ie9IR99P3ZJ8xvdGwpbaHgph7oWJ2
FtfrdyzUaUg3qSynauhdVys9AN9ucKVvqQiYKKku6FUcY0d92asnZdWdaQ2Kp2o8
y8n1Tyx7EgnsoOI4gUhDa0LGU/gCKosSHsYhYTivizqryknxPMdTwK+syNJLC4CT
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19723017456432477381615342745163272186
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'enseo-stg.play.codex-int.hbo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29596625500778347792096439136935987253896860824864367606265945441959131301586547823477068849936858056521056073601178628409363277226372228407532109433777872990946139572537665971163158288669682189720837087800452845633026913475376207759253853153928942456961564309563508497282836106247468079279087210314590667973356596684640709607242993443528150804975821991846673424572023500570042042890457831672332843377572665096290443592805974322713447768453736700133953839080224770763056003539729391559795912905276275195058728264268800078405562309940255256135740061911812747590955409061132579475355436239042313100643908612018004857647
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6fd004019fcf9294ad6c9499e9e3af11d8e2653
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enseo-stg.play.codex-int.hbo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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