test.jirasylvester.warnerbros.com

- WARNER BROS. ENTERTAINMENT INC. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 25:41:f3:42:09:b1:b4:cd:37:44:cb:5e was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

WARNER BROS. ENTERTAINMENT INC.

Organization: WARNER BROS. ENTERTAINMENT INC.
State / Province: California
Locality: Burbank
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 25:41:f3:42:09:b1:b4:cd:37:44:cb:5e
Serial Number (int): 11530674294903702838497823582
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: f2:f3:be:8e:46:d1:18:1b:c9:0d:ad:29:35:f9:74:01:fe:76:32:76
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 68:cd:95:9b:d4:a3:71:10:27:45:83:0c:ae:ff:c8:c6:4e:a8:8a:67
Fingerprint (sha256): 02:7e:62:c8:fa:b7:21:d6:7d:e0:57:ae:c2:49:e0:2b:3d:2e:4a:75:71:ec:53:a5:93:1f:80:2c:ac:3c:7f:cb

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate test.jirasylvester.warnerbros.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test.jirasylvester.warnerbros.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test.jirasylvester.warnerbros.com

Other certificates including the domain name warnerbros.com

(limited to 100 certificates)
qa-topscas1.qa.tops.warnerbros.com
wpw-app001633.amer.warnerbros.com
archivetool.warnerbros.com
qa-topscas1.qa.tops.warnerbros.com
penny.warnerbros.com
wbeis3qa.warnerbros.com
carpet-dev.warnerbros.com
wpw-dbs-syldw.amer.warnerbros.com
sni.cloudflaressl.com
cmdwdclient.warnerbros.com
movies.powster.com
ssl435641.cloudflaressl.com
ssl435754.cloudflaressl.com
qa-topsml1-ilo.qa.util.warnerbros.com
qa.cdn.www.warnerbros.com
integration.ultraviolet.warnerbros.com
*.warnerbros.com
stage.franchise-service.warnerbros.com
wbwburprdcog.amer.warnerbros.com
qa.web.btsmobile.warnerbros.com
uat.franchisecalendar.warnerbros.com
vipstudiotour.warnerbros.com
movies.powster.com
bppqa.warnerbros.com
stg-gfish4.stage.mars.warnerbros.com
wbhabh2.warnerbros.com
wbwlonpvexsmtp2.intl.warnerbros.com
wbwbrzpvsaf01.amer.warnerbros.com
*.warnerbros.com
cloud.participations.warnerbros.com
*.lake.warnerbros.com
mars-hub2-ilo.prod.util.warnerbros.com
jet.warnerbros.com
movies.powster.com
wb-san04-sp.prod.dete.warnerbros.com
*.warnerbros.com
dev.sylvester.warnerbros.com
wbwlondm10prod3.intl.warnerbros.com
api.ctaaws.warnerbros.com
qa.content.privacycenter.wb.com
image.partnerapp1.myworld.com
services.tops.warnerbros.com
citrixeu2.warnerbros.com
preview.mediapassefd.warnerbros.com
mach-vcenter.warnerbros.com
mars-gfish2-ilo.prod.util.warnerbros.com
edm10uk.warnerbros.com
wpw-inf002311.amer.warnerbros.com
p0vclient.warnerbros.com
wdw-dbs004177.amer.warnerbros.com
myappsdev.warnerbros.com
wbwleadvsqlg7.intl.warnerbros.com
wpw-app006275.amer.warnerbros.com
qa.tops.warnerbros.com
test.jirasylvester.warnerbros.com
wagvpn.warnerbros.com
cartoonito.co.uk
stg-gfish4.stage.mars.warnerbros.com
hpwishlist.warnerbros.com
wbwburpppcivi.amer.warnerbros.com
bpp.warnerbros.com
televisionworkshop.warnerbros.com
*.warnerbros.com
easygaap.warnerbros.com
wbhaxrv.warnerbros.com
prod.toe.warnerbros.com
wbwlonpvnasav8.intl.warnerbros.com
theoracle.warnerbros.com
*.sandbox.woop.warnerbros.com
wbwburqvsylvutl.amer.warnerbros.com
wb-rpad01.amer.warnerbros.com
wbwburpvdm1.amer.warnerbros.com
wbwnyappc1n1.amer.warnerbros.com
commerce-privacy-api-staging.warnerbros.com
sodwdclient.warnerbros.com
wbwburpvsfrtpro.amer.warnerbros.com
wbwlonpvcc1.intl.warnerbros.com
stg-topsservice2.stage.dete.warnerbros.com
movies.powster.com
ukwbv79.intl.warnerbros.com
penny.warnerbros.com
warnermedia.com
*.cmdt.warnerbros.com
lacitrix.warnerbros.com
movies.powster.com
support.warnerbros.com
dmart.warnerbros.com
wbwburpv3sql.amer.warnerbros.com
dev.lasgw.warnerbros.com
wb411.warnerbros.com
qa-esx8-ilo.qa.util.warnerbros.com
eb2wdclient.warnerbros.com
rrts.warnerbros.com
digitalsupport.warnerbros.com
ssl447116.cloudflaressl.com
wbwburpvsmtpd.amer.warnerbros.com
edm10uk.warnerbros.com
static.dtss.warnerbros.com
dev.service.warnerbros.com
staging-mars-web.warnerbros.com

Certificate

The complete raw certificate details for test.jirasylvester.warnerbros.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoybJEr0a7B5A6iwmZiDz
dWrKnymzlrDpyAUbFzGZpC3v3+dqFGRo6q0vmvBA5B5p3uC6tj6EnLFHQHFALF05
RxjDb7WzTUVqd5OQABkv5QxCumDyHKk4cTMj5q1Pw/dKgq5G9YOOAj404P5FcTey
qYQPOFJ6BmG5svsg5+YEn+cMxhikpJZLYTH4Q9aSMPSeD1LiNOSRe3PnIdXj8oIq
vXbAmPAie0aHmc5FyBM2y67ba/sQnKUcZ4gFN0K61O7oldRZGmjzxrW6sCTVXGYZ
RbeBth2JbW8iqYu15XqjBYSOk2Y0vaq6E7NeVhfTw0RblM8wr02pzlTzU+AZmgYH
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11530674294903702838497823582
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 07:26:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-07 07:26:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Burbank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WARNER BROS. ENTERTAINMENT INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test.jirasylvester.warnerbros.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20595969523835253202088604579336741929463025057903496449443428796989136293074712056346631267730451642638600331412216954714855350697695724451869517218480898173514015006191684135478264260390133437165312226877129211843628525928485844551502537482838451927310618208831606556344762533974866871887876806647259875871851979716026364760992848662524627644947396911815252032032493244159766222681416299076022951291567831058560294156147938083529614575145532706762616212334749445361444733938753145954397924704030585775705025626396314690217636455707663634066924814201182690648300652570380477181353426867290637785613458882650790299639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.jirasylvester.warnerbros.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2f3be8e46d1181bc90dad2935f97401fe763276
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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