pathfinder-dev.wbd.com

- Warner Media, LLC -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 23:71:87:1b:85:61:3a:f5:22:e0:fc:5f was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Warner Media, LLC

Organization: Warner Media, LLC
State / Province: New York
Locality: New York
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 23:71:87:1b:85:61:3a:f5:22:e0:fc:5f
Serial Number (int): 10969221988511835798682795103
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 0f:33:82:43:a6:42:c2:2f:eb:fa:aa:6e:32:ab:d0:92:a1:25:8d:6a
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): bb:a0:a1:64:53:75:36:90:59:38:13:21:1a:1f:61:9a:55:bb:b5:3c
Fingerprint (sha256): 03:f2:c8:d4:17:82:c6:8b:00:3e:2a:7e:f3:47:ce:73:71:78:4b:5f:79:9f:20:6f:a6:23:92:b3:2c:12:18:06

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate pathfinder-dev.wbd.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pathfinder-dev.wbd.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pathfinder-dev.wbd.com

Other certificates including the domain name wbd.com

(limited to 100 certificates)
tars.wbd.com
ssobiz.wbd.com
thv.warnermedia.com
nms-test2.wbd.com
newsletter.wbd.com
neo-dev.wbd.com
cnn-datascience.wbd.com
san-005.ceros.com
clarityuat.wbd.com
pathfinder-dev.wbd.com
snapshot2.prod.bc.wbd.com
dev-tars.wbd.com
dev.lookercloud.wbd.com
san-005.ceros.com
t-rexstg.wbd.com
prodeastwbdappcentralappservice01.wbd.com
qaiamadminappservice02.wbd.com
snapshot1.dev.bc.wbd.com
clp-status2.prod.bc.wbd.com
niatest2.wbd.com
iamadmindev.warnermedia.com
ws.screentrack.wbd.com
*.tan-staging.wbd.com
san-005.ceros.com
jenkins.dev.dap.wbd.com
dev.msd-apps.wbd.com
pulse.wbd.com
dtag-api.wbd.com
pac.wbd.com
adsalesush.wbd.com
niatest2.wbd.com
dev.thumb.morty.wbd.com
ssobizqa.wbd.com
knowledgelibrary.wbd.com
prodeastaupappservice02.wbd.com
san-005.ceros.com
qaaupappservice2.wbd.com
airflow.dev.dap.wbd.com
snapshot2.dev.bc.wbd.com
tan-staging.wbd.com
san-005.ceros.com
pinky.dev.neo-dev.wbd.com
*.wbd.com
clp-status2.dev.bc.wbd.com
self-service-catalog.gics.wbd.com
SAPCitrix.WBD.com
ssobizqa.wbd.com
san-005.ceros.com
api.screentrack.wbd.com
prodeastwbdmfaappservice01.wbd.com
boprod.wbd.com
gethelp.wbd.com
spy-dev.wbd.com
san-005.ceros.com
san-005.ceros.com
*.wbd.com
san-005.ceros.com
vdiwest.wbd.com
cap.wbd.com
pac.wbd.com
*.wbd.com
dev-chatapp.wbd.com
tableau.wbd.com
warnerbros.com
*.atlas.wbd.com
2c2pevc01v.inf.wbd.com
*.wbd.com
san-005.ceros.com
san-006.ceros.com
oasis.gics.wbd.com
sit.api.p2.inventory.wbd.com
dtag-jsreport.wbd.com
qamfaappservice02.wbd.com
infadevpowercenter.wbd.com
qamfaappservice02.wbd.com
prodwestcapappservice01.wbd.com
t-rex.warnermediagroup.com
fluxcd-dashboard.beta.dap.wbd.com
creativeshop.warnermedia.com
provysweb.wbd.com
devmfaappservice.wbd.com
gethelp-dev.wbd.com
live-cf.wbd.com
brand.wbd.com
bi.discovery.com
fluxcd-notify.dap.wbd.com
clp-health-api.neo.wbd.com
cprhistory.dev.wbd.com
screeners.wbtvd.com
eshop.wbd.com
san-005.ceros.com
*.promo.bifrost.wbd.com
dev-wbr-api.wbd.com
ssobizqa.wbd.com
splint.us-east.prod.bc.wbd.com
san-006.ceros.com
clarity.wbd.com
*.wbd.com
accredible.irc.queensu.ca
eContracts.wbd.com

Certificate

The complete raw certificate details for pathfinder-dev.wbd.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7htekiEwgh4/eFM/y7no
FhhUyuVNQaQZQkf/15nglq5VghVtBaH9Y9cvPL7ld2CVDqKZD1FYQHNUwxwNOWqV
cXI4whislcXBnfAs+ZbGjs7agTrJLbafgb6e+u86z8pr6KvPvD0YN0SjUBGiALSr
jwoF7p6KAc42LGsgmHaWPFef/dnduri5Hg0VIFyaeBkq4EtQPLbUEeZtE6I6F1OS
KKnKD4LL3k2T+fIydmHsY+VKhspXHPPWR7P6ebYfngtFMjIG1OE/FYPWKDnXDqqI
RDKT1xsMszb+RNb2SP4lxc7B4x2EquVqlVZUzV+3l+j+i2D+16iQxkfTiOsF/sRs
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10969221988511835798682795103
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-02 23:46:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-05 23:46:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Warner Media, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pathfinder-dev.wbd.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30058212944589898630280447444957539573840972639599461363448119358665466918108109327151239601003494603578188800744281655637731904451764554831749066162047277438506483312362141327395379699937075257336042177545244174536895024341946538403027709469030286893966521226004020187814036258449956540449621438551173598165311566989421606851431338143292801926925993987899023377185859472272937895945063198421266020562947747120950102932018215288587798200317199296883994562368397922004269552733197598963688037296723871321684776583271990327150788397869781899477604549401598588807809807236606726867030263778747035955441283506473317723259
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathfinder-dev.wbd.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0f338243a642c22febfaaa6e32abd092a1258d6a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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