api.hbo.com
- HOME BOX OFFICE, INC. -
Issued by GlobalSign RSA OV SSL CA 2018
About this certificate
This digital certificate with serial number 7c:0e:2c:ec:56:f4:d1:92:3f:de:8c:35 was issued on by GlobalSign nv-sa.
With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)
HOME BOX OFFICE, INC.
Organization:
HOME BOX OFFICE, INC.
State / Province:
New York
Locality: New York
Country: US
Locality: New York
Country: US
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 7c:0e:2c:ec:56:f4:d1:92:3f:de:8c:35Serial Number (int): 38393278323144104397808503861
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: f7:17:37:42:0f:6d:80:af:cb:c8:19:b9:9e:ab:62:20:5d:23:6e:69
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb
Fingerprint (sha1): c4:e3:6c:6f:37:e4:37:fa:35:53:43:f9:38:fe:d3:8f:2f:57:48:8d
Fingerprint (sha256): 05:87:28:fc:d8:b6:ae:66:4f:d7:f7:13:de:2f:ac:65:25:ee:4d:f2:f4:a7:9a:91:1c:53:b5:04:20:ff:63:a7
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt
Revocation information
OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018Check the revocation status for certificate api.hbo.com
29
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api.hbo.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api.hbo.com
art-gallery-latam.api.hbo.com
art-gallery-snp.development.hurley.hbo.com
art-gallery.api.hbo.com
comet-editorial.api.hbo.com
comet-latam.api.hbo.com
commerce-exp-latam.api.hbo.com
commerce-latam.api.hbo.com
devicecast.fly.cdn.hbogo.com
dynamic-content-frontdoor-latam.api.hbo.com
dynamic-content-frontdoor-snp.development.hurley.hbo.com
dynamic-content-frontdoor.api.hbo.com
gateway-latam.api.hbo.com
gateway-snp.development.hurley.hbo.com
gateway.api.hbo.com
mvpd-authn-manager-latam.api.hbo.com
mvpd-authn-manager-snp.development.hurley.hbo.com
mvpd-authn-manager-us.api.hbo.com
mvpd-authn-manager.staging.hurley.hbo.com
oauth-latam.api.hbo.com
oauth-snp.development.hurley.hbo.com
oauth-us.api.hbo.com
oauth.api.hbo.com
partner-latam.api.hbo.com
qa.devicecast.fly.cdn.hbogo.com
sessions-latam.api.hbo.com
sessions-snp.development.hurley.hbo.com
sessions-us.api.hbo.com
sessions.api.hbo.com
art-gallery-latam.api.hbo.com
art-gallery-snp.development.hurley.hbo.com
art-gallery.api.hbo.com
comet-editorial.api.hbo.com
comet-latam.api.hbo.com
commerce-exp-latam.api.hbo.com
commerce-latam.api.hbo.com
devicecast.fly.cdn.hbogo.com
dynamic-content-frontdoor-latam.api.hbo.com
dynamic-content-frontdoor-snp.development.hurley.hbo.com
dynamic-content-frontdoor.api.hbo.com
gateway-latam.api.hbo.com
gateway-snp.development.hurley.hbo.com
gateway.api.hbo.com
mvpd-authn-manager-latam.api.hbo.com
mvpd-authn-manager-snp.development.hurley.hbo.com
mvpd-authn-manager-us.api.hbo.com
mvpd-authn-manager.staging.hurley.hbo.com
oauth-latam.api.hbo.com
oauth-snp.development.hurley.hbo.com
oauth-us.api.hbo.com
oauth.api.hbo.com
partner-latam.api.hbo.com
qa.devicecast.fly.cdn.hbogo.com
sessions-latam.api.hbo.com
sessions-snp.development.hurley.hbo.com
sessions-us.api.hbo.com
sessions.api.hbo.com
Other certificates including the domain name hbo.com
(limited to 100 certificates)
dash.pro42.akm.cdn.hbogo.com
enseo-stg.play.codex-int.hbo.com
commerce-emea.api.hbo.com
cyberducktest.microsites.hbo.com
customer-test.ssl.fastly.net
lightning-web.play.codex-int.hbo.com
secure06.lithium.com
test-cert.sandbox.wmdtc.tech
concierge.api.hbo.com
turner.com
www.shop.hbo.com
jira.dp.hbo.com
dmx-web.play.codex-int.hbo.com
origin.mvpdstreaming.hbo.com
secure06.lithium.com
testing.dp.hbo.com
*.lightning-web.apps-dev.codex-int.hbo.com
testing.dp.hbo.com
*.kpn.lightning.codex-int.hbo.com
device-update.api.hbo.com
kpn.play.codex-int.hbo.com
vip.hbo.com
o365.hbo.com
ssodev.homeboxoffice.com
comet-eu-1-eu-central-1.api.hbo.com
dns-vetting1k.map.fastly.net
*.dp.hbo.com
*.dev.security.hbo.com
castle-1-us-west-2-int.staging.staging-api.hbo.com
u2.shared.global.fastly.net
user-comet-1-snp-us-west-2.development.hurley.hbo.com
groot-1-us-east-1-int.latam.api.hbo.com
jenkins.k8s.hurley.hbo.com
youtrack.hbo.com
testing.dp.hbo.com
privacy-processor-latam-1-us-east-1.api.hbo.com
dns-vetting1k.map.fastly.net
*.dev.security.hbo.com
mvpd-authn-manager-eu-1-eu-central-1.api.hbo.com
customer-test.ssl.fastly.net
hbo.map.fastly.net
secure02.stage.lithium.com
b2bmicrositesadmin.hbo.com
u2.shared.global.fastly.net
netbox.development.datacenter.hbo.com
testing.dp.hbo.com
secure06.lithium.com
customer-test.ssl.fastly.net
customer-test.ssl.fastly.net
dash.pro42.akm.cdn.hbogo.com
login-us-1-us-west-2.api.hbo.com
api.hbo.com
screendiff.hadron.hbo.com
alb-redirector-production-us-east-1.api.hbo.com
profiles-eu-1-eu-central-1.api.hbo.com
hurley.hbo.com
mongo.prod-espv4.hbo.com
dns-vetting1k.map.fastly.net
f2.shared.global.fastly.net
concierge.api.hbo.com
hbo.map.fastly.net
fromthevault.hbo.com
drm-proxy-us-1-us-east-1-1.api.hbo.com
jenkins-pi3.mgmt.wmdtc.tech
cdn.hbo.com
profiles-us-1-us-east-2.api.hbo.com
messaging-api-test.micro.hbo.com
alertmanager.staging.datacenter.hbo.com
art-gallery.akm.cdn.hbo.com
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
smatrix.hbo.com
u2.shared.global.fastly.net
andreas.caps.codex-int.hbo.com
vizio.play.codex-int.hbo.com
lightning.play.codex-int.hbo.com
testing.dp.hbo.com
dns-vetting1k.map.fastly.net
www.fromthevault.hbo.com
hotd-character-guide.micro.hbo.com
shop.hbo.com
testing.dp.hbo.com
drm-proxy-latam-1-us-east-1.api.hbo.com
dns-vetting1k.map.fastly.net
customer-test.ssl.fastly.net
customer-test.ssl.fastly.net
u2.shared.global.fastly.net
profiles-1-us-east-1-int.latam.api.hbo.com
customer-test.ssl.fastly.net
customer-test.ssl.fastly.net
jenkins.k8s.hurley.hbo.com
customer-test.ssl.fastly.net
splunk.hbo.com
shop.hbo.com
www.fromthevault.hbo.com
eks-service-alb-tftest-1.sandbox.wmdtc.tech
concierge.api.hbo.com
secure02.stage.lithium.com
shared-ingress-public-prod-us-1-us-east-1.api.hbo.com
weichi.caps.codex-int.hbo.com
enseo-stg.play.codex-int.hbo.com
commerce-emea.api.hbo.com
cyberducktest.microsites.hbo.com
customer-test.ssl.fastly.net
lightning-web.play.codex-int.hbo.com
secure06.lithium.com
test-cert.sandbox.wmdtc.tech
concierge.api.hbo.com
turner.com
www.shop.hbo.com
jira.dp.hbo.com
dmx-web.play.codex-int.hbo.com
origin.mvpdstreaming.hbo.com
secure06.lithium.com
testing.dp.hbo.com
*.lightning-web.apps-dev.codex-int.hbo.com
testing.dp.hbo.com
*.kpn.lightning.codex-int.hbo.com
device-update.api.hbo.com
kpn.play.codex-int.hbo.com
vip.hbo.com
o365.hbo.com
ssodev.homeboxoffice.com
comet-eu-1-eu-central-1.api.hbo.com
dns-vetting1k.map.fastly.net
*.dp.hbo.com
*.dev.security.hbo.com
castle-1-us-west-2-int.staging.staging-api.hbo.com
u2.shared.global.fastly.net
user-comet-1-snp-us-west-2.development.hurley.hbo.com
groot-1-us-east-1-int.latam.api.hbo.com
jenkins.k8s.hurley.hbo.com
youtrack.hbo.com
testing.dp.hbo.com
privacy-processor-latam-1-us-east-1.api.hbo.com
dns-vetting1k.map.fastly.net
*.dev.security.hbo.com
mvpd-authn-manager-eu-1-eu-central-1.api.hbo.com
customer-test.ssl.fastly.net
hbo.map.fastly.net
secure02.stage.lithium.com
b2bmicrositesadmin.hbo.com
u2.shared.global.fastly.net
netbox.development.datacenter.hbo.com
testing.dp.hbo.com
secure06.lithium.com
customer-test.ssl.fastly.net
customer-test.ssl.fastly.net
dash.pro42.akm.cdn.hbogo.com
login-us-1-us-west-2.api.hbo.com
api.hbo.com
screendiff.hadron.hbo.com
alb-redirector-production-us-east-1.api.hbo.com
profiles-eu-1-eu-central-1.api.hbo.com
hurley.hbo.com
mongo.prod-espv4.hbo.com
dns-vetting1k.map.fastly.net
f2.shared.global.fastly.net
concierge.api.hbo.com
hbo.map.fastly.net
fromthevault.hbo.com
drm-proxy-us-1-us-east-1-1.api.hbo.com
jenkins-pi3.mgmt.wmdtc.tech
cdn.hbo.com
profiles-us-1-us-east-2.api.hbo.com
messaging-api-test.micro.hbo.com
alertmanager.staging.datacenter.hbo.com
art-gallery.akm.cdn.hbo.com
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
smatrix.hbo.com
u2.shared.global.fastly.net
andreas.caps.codex-int.hbo.com
vizio.play.codex-int.hbo.com
lightning.play.codex-int.hbo.com
testing.dp.hbo.com
dns-vetting1k.map.fastly.net
www.fromthevault.hbo.com
hotd-character-guide.micro.hbo.com
shop.hbo.com
testing.dp.hbo.com
drm-proxy-latam-1-us-east-1.api.hbo.com
dns-vetting1k.map.fastly.net
customer-test.ssl.fastly.net
customer-test.ssl.fastly.net
u2.shared.global.fastly.net
profiles-1-us-east-1-int.latam.api.hbo.com
customer-test.ssl.fastly.net
customer-test.ssl.fastly.net
jenkins.k8s.hurley.hbo.com
customer-test.ssl.fastly.net
splunk.hbo.com
shop.hbo.com
www.fromthevault.hbo.com
eks-service-alb-tftest-1.sandbox.wmdtc.tech
concierge.api.hbo.com
secure02.stage.lithium.com
shared-ingress-public-prod-us-1-us-east-1.api.hbo.com
weichi.caps.codex-int.hbo.com
Certificate
The complete raw certificate details for api.hbo.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIdDCCB1ygAwIBAgIMfA4s7Fb00ZI/3ow1MA0GCSqGSIb3DQEBCwUAMFAxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMTA2MTYyMjQxMDdaFw0y MjA3MTgyMjQxMDdaMGkxCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhOZXcgWW9yazER MA8GA1UEBxMITmV3IFlvcmsxHjAcBgNVBAoTFUhPTUUgQk9YIE9GRklDRSwgSU5D LjEUMBIGA1UEAxMLYXBpLmhiby5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQC3WUK4IH8Y6zyaqvgohOu9IMmgEY/cvmRaMIoVNas3KwI9UieK+unh glh+rlv8A7koeGnYAL6SsGT4vrjWwRRGDKpajJ6iprFat8aLhDm7zKI8QF4+b/d1 dXG0lLpJXCX98qCcpKnDcAZuAj9vnU8YI5Xw2RBeBzb6yyuuvD+2HsmPDVcSm2Dt dlHK5fDLnkpY0hbKJo6goVInsUPC4URLDw4m+V2WH98ItF3R0takWVY7bdsPpBuI /KmPo99yDX+0QfUz1FjeweQJ7O5vIfxy4zU0Qa4pvZbRU5WUUzU3nA33Be1GzyMk ISyW2j0cTwWvjmc7zesN/QEt+M+egYLZAgMBAAGjggUzMIIFLzAOBgNVHQ8BAf8E BAMCBaAwgY4GCCsGAQUFBwEBBIGBMH8wRAYIKwYBBQUHMAKGOGh0dHA6Ly9zZWN1 cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzcnNhb3Zzc2xjYTIwMTguY3J0MDcG CCsGAQUFBzABhitodHRwOi8vb2NzcC5nbG9iYWxzaWduLmNvbS9nc3JzYW92c3Ns Y2EyMDE4MFYGA1UdIARPME0wQQYJKwYBBAGgMgEUMDQwMgYIKwYBBQUHAgEWJmh0 dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECAjAJ BgNVHRMEAjAAMIIDswYDVR0RBIIDqjCCA6aCC2FwaS5oYm8uY29tgh1hcnQtZ2Fs bGVyeS1sYXRhbS5hcGkuaGJvLmNvbYIqYXJ0LWdhbGxlcnktc25wLmRldmVsb3Bt ZW50Lmh1cmxleS5oYm8uY29tghdhcnQtZ2FsbGVyeS5hcGkuaGJvLmNvbYIbY29t ZXQtZWRpdG9yaWFsLmFwaS5oYm8uY29tghdjb21ldC1sYXRhbS5hcGkuaGJvLmNv bYIeY29tbWVyY2UtZXhwLWxhdGFtLmFwaS5oYm8uY29tghpjb21tZXJjZS1sYXRh bS5hcGkuaGJvLmNvbYIcZGV2aWNlY2FzdC5mbHkuY2RuLmhib2dvLmNvbYIrZHlu YW1pYy1jb250ZW50LWZyb250ZG9vci1sYXRhbS5hcGkuaGJvLmNvbYI4ZHluYW1p Yy1jb250ZW50LWZyb250ZG9vci1zbnAuZGV2ZWxvcG1lbnQuaHVybGV5Lmhiby5j b22CJWR5bmFtaWMtY29udGVudC1mcm9udGRvb3IuYXBpLmhiby5jb22CGWdhdGV3 YXktbGF0YW0uYXBpLmhiby5jb22CJmdhdGV3YXktc25wLmRldmVsb3BtZW50Lmh1 cmxleS5oYm8uY29tghNnYXRld2F5LmFwaS5oYm8uY29tgiRtdnBkLWF1dGhuLW1h bmFnZXItbGF0YW0uYXBpLmhiby5jb22CMW12cGQtYXV0aG4tbWFuYWdlci1zbnAu ZGV2ZWxvcG1lbnQuaHVybGV5Lmhiby5jb22CIW12cGQtYXV0aG4tbWFuYWdlci11 cy5hcGkuaGJvLmNvbYIpbXZwZC1hdXRobi1tYW5hZ2VyLnN0YWdpbmcuaHVybGV5 Lmhiby5jb22CF29hdXRoLWxhdGFtLmFwaS5oYm8uY29tgiRvYXV0aC1zbnAuZGV2 ZWxvcG1lbnQuaHVybGV5Lmhiby5jb22CFG9hdXRoLXVzLmFwaS5oYm8uY29tghFv YXV0aC5hcGkuaGJvLmNvbYIZcGFydG5lci1sYXRhbS5hcGkuaGJvLmNvbYIfcWEu ZGV2aWNlY2FzdC5mbHkuY2RuLmhib2dvLmNvbYIac2Vzc2lvbnMtbGF0YW0uYXBp Lmhiby5jb22CJ3Nlc3Npb25zLXNucC5kZXZlbG9wbWVudC5odXJsZXkuaGJvLmNv bYIXc2Vzc2lvbnMtdXMuYXBpLmhiby5jb22CFHNlc3Npb25zLmFwaS5oYm8uY29t MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBT473/y zXhnqN5vjySNiPGHAwKz6zAdBgNVHQ4EFgQU9xc3Qg9tgK/LyBm5nqtiIF0jbmkw EwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAG8v7AaDOge9 Y7+acDYF/wPmAXOs+29O2wblIL80RZaFWYameQiMb0Ab+9SyBOAhv/FCPSOnnFkA z/iCHS4TWTGlXvuyrGa+aFbDFB+dIBvTMltwq6iqV1IIXKvSr7gmEyeRb2FNWiIR I0MRaIVK5NzB+2wc7AbV5P1LfDI8N5StkopBYFFSeN02nUFFsRIoSk0ifEF6SbRW 0Ab1ZkMLgxbRX47ks+/3Kjv+2ASlZVZWs+aZd5JLoJUr7XZd/+uPi7NcEzoPmGMf 6qBE3LPTn/0c1TXlUvAR70W5/DZEXc4WaFvygqSXbD6+0Fsqupn43XO7Y6inqDTG 4dHQOtoa0OU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1lCuCB/GOs8mqr4KITr vSDJoBGP3L5kWjCKFTWrNysCPVInivrp4YJYfq5b/AO5KHhp2AC+krBk+L641sEU RgyqWoyeoqaxWrfGi4Q5u8yiPEBePm/3dXVxtJS6SVwl/fKgnKSpw3AGbgI/b51P GCOV8NkQXgc2+ssrrrw/th7Jjw1XEptg7XZRyuXwy55KWNIWyiaOoKFSJ7FDwuFE Sw8OJvldlh/fCLRd0dLWpFlWO23bD6QbiPypj6Pfcg1/tEH1M9RY3sHkCezubyH8 cuM1NEGuKb2W0VOVlFM1N5wN9wXtRs8jJCEslto9HE8Fr45nO83rDf0BLfjPnoGC 2QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 38393278323144104397808503861 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-16 22:41:07 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-18 22:41:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HOME BOX OFFICE, INC.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.hbo.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23145625862024388597229545750548317484373649353431211810932830878550285034425253752933688423886684164687406038043600047105040908330636738521702495932401425827335955623295038750543965698467573657394732228636268379351343943433436830223396771915195695685008872508708690710692068640148250189535074788961471000375681776481912305532921291402908165672940903462451780415433685262773254029291055506527037887685573823207643641338465944614699520681371571382563719366447075325118102177591395818328111630152014954779508885857531051380757721309672324984896550546703863538769770839303691895926190905171118506919458141425361915839193 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (938 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.hbo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'art-gallery-latam.api.hbo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'art-gallery-snp.development.hurley.hbo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'art-gallery.api.hbo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comet-editorial.api.hbo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comet-latam.api.hbo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerce-exp-latam.api.hbo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerce-latam.api.hbo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devicecast.fly.cdn.hbogo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamic-content-frontdoor-latam.api.hbo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamic-content-frontdoor-snp.development.hurley.hbo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamic-content-frontdoor.api.hbo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway-latam.api.hbo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway-snp.development.hurley.hbo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway.api.hbo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvpd-authn-manager-latam.api.hbo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvpd-authn-manager-snp.development.hurley.hbo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvpd-authn-manager-us.api.hbo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvpd-authn-manager.staging.hurley.hbo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oauth-latam.api.hbo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oauth-snp.development.hurley.hbo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oauth-us.api.hbo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oauth.api.hbo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-latam.api.hbo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.devicecast.fly.cdn.hbogo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sessions-latam.api.hbo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sessions-snp.development.hurley.hbo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sessions-us.api.hbo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sessions.api.hbo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f71737420f6d80afcbc819b99eab62205d236e69 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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