*.dev.galileo.warnermedia.com

- Warner Media, LLC -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 54:ba:f2:44:50:7f:98:ec:c7:45:4d:cc was issued on by GlobalSign nv-sa.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Warner Media, LLC

Organization: Warner Media, LLC
State / Province: New York
Locality: New York
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 54:ba:f2:44:50:7f:98:ec:c7:45:4d:cc
Serial Number (int): 26222745100309281253567581644
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 15:a0:b1:9b:4d:d4:93:fd:58:ad:a8:2f:6e:42:14:cd:38:98:ec:f3
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 2b:c0:8a:91:46:4c:3b:82:64:20:ce:5d:9c:ae:a1:06:86:04:22:03
Fingerprint (sha256): 0a:33:33:e8:b2:65:9f:00:a9:09:5f:fd:ef:0e:1b:3c:e6:e1:9e:68:0f:5f:f3:70:36:19:9b:ea:58:d4:53:bb

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate *.dev.galileo.warnermedia.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.dev.galileo.warnermedia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.dev.galileo.warnermedia.com
experimentation.galileo.dev.warnermedia.com
expmgmt.api.dev.galileo.warnermedia.com
expmgmt.svc.dev.galileo.warnermedia.com
dev.galileo.warnermedia.com

Other certificates including the domain name warnermedia.com

(limited to 100 certificates)
portal.dev-b2b.wmedia.tech
api.registration.content.warnermedia.com
catman.warnermedia.com
thv.warnermedia.com
tableau.east.warnermedia.com
partnerhub.qa-b2b.wmedia.tech
brian.warnermedia.com
turner.com
creativeshop-staging.warnermedia.com
briandev.warnermedia.com
neo-dev.wbd.com
wmosccmcmg.warnermedia.com
submitmobile-auth.dope.warnermedia.com
blueprint.prod-ops.wmedia.tech
uar.appsec-nonprod.cso.warnermedia.com
warnermedia.com
lactnfm03.wmad.warnermedia.com
cdn-hbomax.warnermedia.com
sni.cloudflaressl.com
image.20210419.200345.s6.et.yellsatcloud.com
qa.wmswagstore.warnermedia.com
atom-qa.warnermedia.com
*.warnermedia.com
spy-staging.warnermedia.com
tapkit.warnermedia.com
pages.onefifty.warnermedia.com
qaappcentralappservice1.warnermedia.com
catmanqa.warnermedia.com
*.css.cso.warnermedia.com
access.warnermedia.com
smee.appsec-nonprod.cso.warnermedia.com
tenableio.cso.warnermedia.com
qa.grafana.prism.warnermedia.com
testkitshop-staging.warnermedia.com
heimdall-old.appsec.cso.warnermedia.com
screentrack.warnermedia.com
CloudVDI.Warnermedia.com
wmosccmcmg.warnermedia.com
morph-web-app.dev-ops.wmedia.tech
epg.tapkit.warnermedia.com
turner.com
atom-git.reverse-proxy.appsec.cso.warnermedia.com
contentsecurity.warnermedia.com
*.dev.galileo.warnermedia.com
turner.com
qaiamservicesappservice1.warnermedia.com
iamadmindev.warnermedia.com
shazam-dev.warnermedia.com
feast.beta.dap.warnermedia.com
dsb.warnermedia.com
*.warnermedia.com
dev.wmswagstore.warnermedia.com
turner.com
devloginappservice.warnermedia.com
twd-vdi-pri.warnermedia.com
qaappcentralappservice1.warnermedia.com
api.registration.content.warnermedia.com
artemis.appsec-nonprod.cso.warnermedia.com
submitmobile.warnermedia.com
switchboard.cso.warnermedia.com
*.brandcenter.warnermedia.com
image.20210419.200345.s6.et.yellsatcloud.com
*.cso.warnermedia.com
milestone0.cso.warnermedia.com
admin-deliver-portal.dev-b2b.wmedia.tech
*.warnermedia.com
turner.com
catmanqaoffice.warnermedia.com
thv.warnermedia.com
ADMS.WMAD.WarnerMedia.com
admin-deliver-portal.qa-b2b.wmedia.tech
radiantldap.warnermedia.com
*.warnermedia.com
sni.cloudflaressl.com
sni.cloudflaressl.com
prodwestaupappservice1.warnermedia.com
kubeflow.beta.dap.warnermedia.com
thv.warnermedia.com
mstack.prod-ps.wmedia.tech
atom.warnermedia.com
lasso-web-ui.prod-ops.wmedia.tech
contentsecurity.warnermedia.com
dsb-dev.warnermedia.com
batmanapp.wcet-aio.warnermedia.com
msctoscalicensedr.wmad.warnermedia.com
sni.cloudflaressl.com
desktop.timewarner.com
maxdev-airflow.warnermedia.com
github.appsec.cso.warnermedia.com
prodwestiamadminappservice2.warnermedia.com
xytechatlantatest.warnermedia.com
deliver-portal.dev-b2b.wmedia.tech
prodlearning.warnermedia.com
edsapps-dev.warnermedia.com
return-dev.warnermedia.com
spy-dev.wbd.com
concertdatatest.warnermedia.com
ablink.mail.hbomax.com
prodeasticopappservice2.warnermedia.com
dev.thv.warnermedia.com

Certificate

The complete raw certificate details for *.dev.galileo.warnermedia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+zyVJTOtmIza6IyVtCD
JURw89ruy7cryKhG8GJPVG8ggUZi8AKofZ6oG87rDQJxuODUhp9P3R/RpEP0CHoA
6WulhZusZVCiN/3/7Sh8gAi7fp/V7RBuo/J5djsAWzZjTKziY17HJeZpqmzaiFb4
YlPaXoC+WDdpeMYYixiyLLyMQz0MA616elTRJp2gvcZJ9ZBp07H1msr1yROBio+9
h4uQMl2MkdDnadOTMuKWrgsSHGzfX6STYJ3s0pvUFtyYbu9pLEoSL55orxWhdDy5
WTrJ9fWO+RFTRBaKXzTSN0mHSwJ85CVuzipBYQ1IVIZ6WPgBR0yO9DgoL31MSd2b
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 26222745100309281253567581644
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-13 12:38:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 12:38:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Warner Media, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.dev.galileo.warnermedia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23218452533569221778810035204296551570541246746260682193062302356620559237776176639078910317438284727725004343281216521119763697926936007593754115632711650749098521216516747359949567197767293448666283114683521937810161343036136541780972118487572450212413185471838323155081673760203465416988163287049791861932555062957716467495005270457821836330372242510959798803762640971465014016548025887952679137647936124374609666006664590316540368046099259475713399575953534450714523608222044356843730308912548948161128136495597092621736010749404695460768259742989971554557184757006945162725100707529414561198900750763033689430837
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (190 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.galileo.warnermedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experimentation.galileo.dev.warnermedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expmgmt.api.dev.galileo.warnermedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expmgmt.svc.dev.galileo.warnermedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.galileo.warnermedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							15a0b19b4dd493fd58ada82f6e4214cd3898ecf3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							016900770073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b5000001877aa020960000040300483046022100f08d52b8971dd6381f9a01ba830d4ca617e2b82c8ffbc43c7feb17e58f1e4a32022100be51d8ad49e858aab7f02ff6d16ecd58a92c84a6159b411c9b98a53ed36984e6007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001877aa020660000040300473045022100ab26ec3f8d89c50e5d10277f4bd754a7029b8664bfc17574883c7028f6f0a3a502203f3d2bc92b776c078f0c70f556058d3358981d4a67f7c5626c50630d2c43f34e00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001877aa0207a000004030047304502210097c0f8d5ddab8cece8818ac18985aa07dda23348cf82e2fe6437e46ac808702c02207ec92f379525a89235c8ed645550d6e6da7dca1718850b252207be974341da0d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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