valuations.prod.netflixstudios.com

Issued by R3

About this certificate

This digital certificate with serial number 04:a9:8a:91:9a:f6:78:4e:90:ca:32:b6:76:83:eb:3c:6a:05 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=valuations.prod.netflixstudios.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a9:8a:91:9a:f6:78:4e:90:ca:32:b6:76:83:eb:3c:6a:05
Serial Number (int): 406141053226160832974282202722171868703237
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 41:26:6d:dd:70:2d:77:fb:50:ed:b6:f2:06:36:4e:7b:62:d7:a4:64
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1f:fe:57:9e:e0:fa:3e:00:47:7e:00:14:bc:02:63:2a:68:94:bb:fe
Fingerprint (sha256): 08:79:e5:dc:92:26:b0:6e:6a:ed:62:0e:51:cf:68:c2:b1:aa:8d:0e:8d:1e:94:13:ff:e5:22:c3:9b:dc:ca:c3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate valuations.prod.netflixstudios.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for valuations.prod.netflixstudios.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

valuations.prod.netflixstudios.com

Other certificates including the domain name netflixstudios.com

(limited to 100 certificates)
productionfinance-test.test.netflixstudios.com
gravity-api-uat2.test.finance.netflixstudios.com
mbgitaprod2-api.test.finance.netflixstudios.com
collectionscrudapi.test.netflix.net
npfp.netflixstudios.com
gravity-dev2.test.netflixstudios.com
newprequel.prod.netflixstudios.com
gravity-costcategorysvc-api-dr.prod.finance.netflixstudios.com
barb-uat.test.netflixstudios.com
*.originstory.prod.netflixstudios.com
ctech-flix6-02.prod.prodtech.netflixstudios.com
aryasamajthaltej.com
originstoryol-beta-alb.test.netflixstudios.com
finapp-dev2.test.netflixstudios.com
prodiclewta.test.netflixstudios.com
valuations.prod.netflixstudios.com
appmap.netflixstudios.com
admin.np3.netflixstudios.com
la4s1f1-ad01.nah.la4.netflixstudios.com
finapp-dev1.test.netflixstudios.com
mbjwhitney.test.finance.netflixstudios.com
npfp.prod.netflixstudios.com
np3.netflixstudios.com
SAN-originstoryol-dev-alb.test.netflixstudios.com
orionapi.itp.netflix.net
originstoryworkflowapi.prod.netflixstudios.com
partnerhelp.netflixstudios.com
mbgita5.test.finance.netflixstudios.com
originstoryworkflowapi.prod.netflixstudios.com
prodicle-assets.prod.netflixstudios.com
minerva-beta.itp.netflix.net
finapp-dev2.test.netflixstudios.com
*.prodicledistribution-sre.test.netflixstudios.com
oldprequel.prod.netflixstudios.com
creative-technology-tools.netflixstudios.com
gravity-int-api.prod.finance.netflixstudios.com
help.netflixstudios.com
prequel-beta.test.netflixstudios.com
hubble-staging.prod.netflixstudios.com
sidekiq.prodiclemove.prod.netflixstudios.com
prequel-beta.test.netflixstudios.com
mbdeletetest-int.test.finance.netflixstudios.com
gravity-batch-api-dev.test.finance.netflixstudios.com
gravity-calcservice-api.prod.finance.netflixstudios.com
pse-p4d-svr.prod.prodtech.netflixstudios.com
Ism.netflixstudios.com
sidekiq.prodiclecalendar.prod.netflixstudios.com
events.prodiclemessaging-dev.test.netflixstudios.com
partnerhelp.netflixstudios.com
orionapi-test.test.netflixstudios.com
npv.netflixstudios.com
*.test.netflixstudios.com
*.test.netflixstudios.com
*.originstory.test.netflixstudios.com
norwaysavings.wallit.app
prequel-beta.test.netflixstudios.com
originstoryol-prod-alb.prod.netflixstudios.com
gravity-api.prod.finance.netflixstudios.com
mbaniruddha4fxupdate-int.test.finance.netflixstudios.com
originstoryworkflowproxy-dev.test.netflixstudios.com
*.crossfire.test.finance.netflixstudios.com
ptap.netflixstudios.com
hubble-adhoc.test.netflixstudios.com
turbo.test.netflixstudios.com
gravity-costcategorysvc-api-dev4.test.finance.netflixstudios.com
prodiclewtb.prod.netflixstudios.com
mbgita4.test.finance.netflixstudios.com
finapp-dev-4.test.netflixstudios.com
releasehub.netflixstudios.com
watson-beta.itp.netflix.net
gravity-api-dev3.test.finance.netflixstudios.com
sherlock-test.netflix.com
sgactionpost.staging.netflixstudios.com
nptap.netflixstudios.com
originstory.prod.netflixstudios.com
mbgitaprod2.test.finance.netflixstudios.com
nomi.netflixstudios.com
gravity-batch-api.prod.finance.netflixstudios.com
*.originstory-dev.test.netflixstudios.com
productionfinance-test.test.netflixstudios.com
finapp-sandbox.test.netflixstudios.com
dr.gravity.prod.netflixstudios.com
originstory-stage.prod.netflixstudios.com
hubble-adhoc.test.netflixstudios.com
prequel-api.test.netflixstudios.com
npv.netflixstudios.com
npfp.test.netflixstudios.com
gravity-costcategorysvc-api.prod.finance.netflixstudios.com
meechum.prod.netflix.net
mb-api.test.finance.netflixstudios.com
gravity-api-dev1.test.finance.netflixstudios.com
siworkstation.int.stable.us-west-2.test.netflixstudios.com
ctech-flix6-04.prod.prodtech.netflixstudios.com
turbo.test.netflixstudios.com
oldprequel.prod.netflixstudios.com
orion-ldsa-api-uat2.test.netflixstudios.com
swordfish.prod.netflix.net
stash.netflixstudios.com
mbaniruddhad3344.test.finance.netflixstudios.com
npfp.test.netflixstudios.com

Certificate

The complete raw certificate details for valuations.prod.netflixstudios.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tiSb4EzPIg6bo4VlvCT
3pxeyoT3peDitkujZ2ZxcwnAgP1J2sfebvOyNreI9bx1zNkFOQM/h80NbeWrV62i
C/N0wCYv5uzrKQC+3AH2j9nydkKitArU7rhB/8U3FVywyMXviC0knoMcFBALKaoR
xPnxgWCUQ4Incd+HCt8z5D4Tina9bv2ImXWWBCoRtRWbGgPE3VaUzKrgXYl3KdBj
PQox+rMjsqSVJmK/s3L7di56wguoqW+HDDam1S5GqPXgMrqUSnXveTSzdKZff514
B8ac67RQuMHal0LVGOexiVwVcjaEfxuWLzkuXw5rzTwUQrYjoVvg6SLvgffLSgXV
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 406141053226160832974282202722171868703237
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-25 12:53:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-24 12:53:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'valuations.prod.netflixstudios.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29141605782588673888517450022751601572435113703932626770832883305484791416455517173772217124817716408582005498803769674317438920708944903803733466950946889802333362072035157945916061650762411980377265645279385287179199871448383408498483665275274080325511331151243596447210109923042006349350621598304869320070857265029230978263058131206420991971070251201357473557834803973899195992120576788878177675808010644779181031468047848108069182485891400050539687091731919819411913334878564706774976798988586881895178018530460164435491469135021814286974635221211851491127651192234963402716722740982482821727139450188406867744081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							41266ddd702d77fb50edb6f206364e7b62d7a464
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valuations.prod.netflixstudios.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187b8b119b100000403004830460221008ffc4fecaf5a38b7a6b738ee8e62a991a40b20ef37aa7774ad760dc728867726022100f08aeb047138329652bed80f989435dd4bb22073325ed8efdad8cf13e76412e7007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000187b8b119d500000403004730450220413d8d8e144bb93dd814d5d451988453f0cf831d4f175709ca549f0a9dd83ffa022100c62f4330be7db97687140983d618a5e6f71d2347914da09db30db8ce5396bf16
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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