qa-tips-1.timeinc.net

- Time Inc. -

Issued by AOL Member CA

About this certificate

This digital certificate with serial number 70:00:11:52 was issued on by America Online Inc..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Time Inc.

Organization: Time Inc.
Organization unit: Time Inc. Interactive
State / Province: New York
Locality: New York
Country: US

America Online Inc.

Organization: America Online Inc.
State / Province: Virginia
Locality: Dulles
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 70:00:11:52
Serial Number (int): 1879052626
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: c9:f6:16:f5:07:63:af:60:e3:b4:11:62:2b:d3:89:b7:a9:f6:91:23
AuthorityKeyId: 61:a6:99:6d:24:9f:0e:11:88:e6:39:e0:fe:74:d1:05:69:52:a9:43

Fingerprint (sha1): 1c:6c:8e:0c:dc:99:68:88:c3:f1:cf:c9:70:ab:a5:20:ce:af:ab:57
Fingerprint (sha256): 0a:ff:a9:e9:93:72:7b:b7:4d:d0:17:ea:5e:1a:c3:fb:9f:e3:27:a6:ea:8c:9e:b6:29:8d:6d:6b:e8:cf:ba:ce


Revocation information

OCSP Server: http://ocsp.web.aol.com/ocsp
CRL Distribution Point: http://crl.aol.com/AOLMSPKI/aolServerCert.crl

Check the revocation status for certificate qa-tips-1.timeinc.net

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qa-tips-1.timeinc.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qa-tips-1.timeinc.net
qa-tips-2.timeinc.net
qa-tips-3.timeinc.net
qa-tips-4.timeinc.net
qa-tips-5.timeinc.net

Other certificates including the domain name timeinc.net

(limited to 100 certificates)
coredev-i4.timeinc.net
*.allyou.com
app.dreader.timeinc.net
office.timeinc.com
tools.timeinc.net
editor.timeinc.com
www.oxmoorhouse.com
www.timeinclistrental.com
cgi.pathfinder.com
office.timeinc.com
tia.timeinc.net
dev-dcms.www.timeinc.net
prod-dcms.www.timeinc.net
www5.timeinc.net
dev-wpcom.timeinc.net
app.dreader.timeinc.net
www.meredith.com
qa-tips-1.timeinc.net
content-api.timeinc.net
dev-wpcom.timeinc.net
cgi.timeinc.net
tmpldev-tips-1.timeinc.net
myrecipes-mobile.timeinc.net
tools.timeinc.net
www.reference.dcms-sa.timeinc.net
qa-profiles-uat.timeinc.net
qa-profiles.timeinc.net
www.reference.dcms-sa.timeinc.net
tmpcaa.enterprise.corpad.timeinc.com
csp-endpoint.timeinc.net
profiles.timeinc.net
dev-profiles.timeinc.net
timeinc.net
csp-endpoint.timeinc.net
www.timeinclistrental.com
staging.timeinc.net
rails.timeinc.net
prod-dcms.www.timeinc.net
www.reference.dcms-sa.timeinc.net
timeinc.net
office.timeinc.com
www.oxmoorhouse.com
prod-dcms.www.timeinc.net
dev-subs.timeinc.net
npd.timeinc.net
www.timeinclistrental.com
prod-dcms.www.timeinc.net
www.meredith.com
dev-dcms.www.timeinc.net
tia.timeinc.net
editor.timeinc.com
qa-profiles.timeinc.net
applenews.meredithcorp.io
www.timeinclistrental.com
www.oxmoorhouse.com
*.shinken.eces.timeinc.net
editor.timeinc.com
qa-ucs.timeinc.net
adbyline.timeinc.net
railsdeployprod.timeinc.net
omns.timeinc.net
content-api.timeinc.net
dev-ucs.timeinc.net
www.oxmoorhouse.com
*.allyou.com
adops-static.timeinc.net
i4.timeinc.net
www.reference.dcms-sa.timeinc.net
www.oxmoorhouse.com
applenews.meredithcorp.io
cp.timeinc.net
dev-app.dreader.timeinc.net
rails.timeinc.net
*.dcms-test.timeinc.net
rails.timeinc.net
editor.timeinc.com
amp.timeinc.net
*.timeinc.net
railsadmin.timeinc.net
*.timeinc.net
fb.ipsoft.timeinc.net
www.timeinclistrental.com
content-api.timeinc.net
office.timeinc.com
spare-tips-4.timeinc.net
dev-app.dreader.timeinc.net
ucs.timeinc.net
tia.timeinc.net
www.timeinclistrental.com
test-editor.dcms-ioe.timeinc.net
tips-1.timeinc.net
cmdb.timeinc.net
amp.timeinc.net
www.timeinc.net
cp.timeinc.net
editor.timeinc.com
www.oxmoorhouse.com
www.timeinclistrental.com
shinken.timeinc.net
railsdeploy.timeinc.net

Certificate

The complete raw certificate details for qa-tips-1.timeinc.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbWcLAZp30EJHIwPJemU
l0NDfQAK7V4r+9sd+NujUPMl05qoA8pX6rGX1F8gSxZ6uMhYE2xHwlDGE87Nzi4B
mllQBOfki0nsARPP2tpL10KQNLcIR8xI1DGA1x5qXZSeON0KrgiqKqRkrWmbl21z
zXRIpaNmA8BCrf9kFJ92FxBKG2l80Kp2DcIWJZBL1R1LkdVkGPqoT7bWo29DnINL
aG5F/j95q/Cx+B9juttLjlYelmLk6FT7Yxq56DimpPnpyEa//C5oHVYBzAtRgD30
pY01+pUyO7eeHkGY+O6zjRUbbtL6+0n3ay6wyvkRaTfpWA0GH4h2h2Q8n8DxKD4t
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1879052626
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dulles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'America Online Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AOL Member CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2009-08-18 20:43:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-08-18 20:43:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Time Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Time Inc. Interactive'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa-tips-1.timeinc.net'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22938688450688348123028382796163046020995122142624619649215060359511396305410089070839560152514974042784897168429072055023961038457862507618666015770280508087532114373961068286977318598371438324702050649357788766533949447549036024448963765574866296602882714179768405387661341911001667877526035360772863532397077603235974886321135862678279790660282505699323351456236006161807981311818796200933953409338904125176774821410610266688800603609443985620762287379398393033477765018529691424168412687748955600646847107866617268274827595390417742627968163720317946264206447649675168923655973874112523552131932925768869259128227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-tips-1.timeinc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-tips-2.timeinc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-tips-3.timeinc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-tips-4.timeinc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-tips-5.timeinc.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 61a6996d249f0e1188e639e0fe74d1056952a943
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.aol.com/AOLMSPKI/aolServerCert.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.web.aol.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.1066.1.1000.1.0.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://pki-info.aol.com/AOLMSPKI/index.html'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c9f616f50763af60e3b411622bd389b7a9f69123
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00e40370bcf4a2866867088c1a4e61b26f3923860748786c1f42e2767ff53ae025033d95ab775a37e37128479e639e09f360d2992ab0038e03d2c9c291233d2b1d13e13dee38899028fdd3b388cd7310f26e1e67998fd10fcf681e3a2992e34ae61d4dcfc5b75c475c5457e878dc1802d39a8a9998219465935786053519db8cf653f067a85b6218bc7e1800931a86920337754303ae5d5270e3a09c1d75d9682cb81e60d3187bd375916dff9e24ca8c6d13bd8f92f76a228cccf51472834550d1e6e8b57332a531b9cf2f96608aca6f8157faad0c83b25dfd7d9c78b31fdca8c7b00834fae0f20b0c85e66e1781a551b566c64c0591821802700f124fe7613996