yb-bk-stg.ouryahoo.com

- Oath Inc -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 4d:56:ac:49:a9:bc:2e:27:ee:01:77:74 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oath Inc

Organization: Oath Inc
Organization unit: Information Technology
State / Province: Virginia
Locality: Sterling
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 4d:56:ac:49:a9:bc:2e:27:ee:01:77:74
Serial Number (int): 23935126982608500797669996404
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: dd:10:b9:30:29:2e:3a:3c:b5:25:6c:2c:ec:88:96:6a:65:4a:a2:a5
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 50:a0:d5:ea:e9:1e:96:a0:4b:c2:b5:48:eb:bf:fd:2d:65:2b:28:7e
Fingerprint (sha256): 14:7b:55:4f:b6:67:ca:e4:91:80:6a:8d:b2:ce:01:a5:6c:fe:26:06:d8:a3:16:3c:b2:1a:b6:44:07:99:8c:cd

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate yb-bk-stg.ouryahoo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yb-bk-stg.ouryahoo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

yb-bk-stg.ouryahoo.com

Other certificates including the domain name ouryahoo.com

(limited to 100 certificates)
dev.external.ouryahoo.com
cbhr-bk-dev.ouryahoo.com
dspskadpostback.aaca.yahooinc.com
notify.halo.vzbuilders.com
api.native.yahooinc.com
memberpulse.ouryahoo.com
console.vespa.vzbuilders.com
itportal.ouryahoo.com
api.tls.ouroath.com
src1.yahoo.com
src1.yahoo.com
src1.yahoo.com
ldap1.tp2.uat.sshca.vzbuilders.com
revsysdev.fin.ouryahoo.com
src1.yahoo.com
store.ouryahoo.com
kapa-map.fin.ouryahoo.com
api.native.yahooinc.com
mulesoft-rtf-bcp.ouryahoo.com
assurenet.fin.ouryahoo.com
dspskadpostback.aaca.yahooinc.com
src2.yahoo.com
src1.yahoo.com
src1.yahoo.com
go.ouryahoo.com
rc.pnr.ouryahoo.com
ecptest.ouryahoo.com
developer.ouroath.com
thestreet.ouryahoo.com
stage-api.tls.ouroath.com
notify.halo.vzbuilders.com
moog.vzbuilders.com
sshra.ops.yahoo.com
finbot-bk-stg.ouryahoo.com
kapabeta.fin.ouryahoo.com
src1.yahoo.com
git.ouroath.com
plus.digits.vzbuilders.com
suppliermergestagews.fin.ouryahoo.com
procportalstage.fin.ouryahoo.com
bf1-ubuland01.corp.bf1.yahoo.com
plus.digits.vzbuilders.com
api.native.yahooinc.com
yb-bk-stg.ouryahoo.com
tls.ouroath.com
stage-api.tls.ouroath.com
*.help.yahoo.com
store.ouryahoo.com
kapadev-map.fin.ouryahoo.com
*.vespa.corp.yahoo.com
src1.yahoo.com
hypprod.fin.ouryahoo.com
thestreet.ouryahoo.com
gvp-redis-beta.ouryahoo.com
cataract-ui.pcp-cataract-production-ui.aws.oath.cloud
notafiscaluat.corp.ouryahoo.com
notify.halo.vzbuilders.com
trap.paranoids.ouryahoo.com
stage.consent.oath.com
sshra.ops.yahoo.com
memberpulse.ouryahoo.com
*.prod1-gq1.media.corp.yahoo.com
techpulse.ouryahoo.com
src1.yahoo.com
tls-log.ouryahoo.com
dspskadpostback.aaca.yahooinc.com
grcdashboard.vzbuilders.com
dev.gvp.vzbuilders.com
src1.yahoo.com
stage.consent.oath.com
sshra.tp2.uat.sshca.vzbuilders.com
paxata.fin.ouryahoo.com
vertex.fin.ouryahoo.com
tool-dev.push.verizonmedia.com
src1.yahoo.com
dev.gsm.ouryahoo.com
src1.yahoo.com
real.qa.itportal.ouryahoo.com
ui-mgr-qa.halo.vzbuilders.com
rpadev.corp.ouryahoo.com
src1.yahoo.com
yamas.identity.verizonmedia.com
dev-plus.digits.ouryahoo.com
test.dma.ckms.ouryahoo.com
sharp-stage.ouryahoo.com
gvp.vzbuilders.com
api.native.yahooinc.com
*.preview.vespa.ouryahoo.com
erprev1.fin.ouryahoo.com
dev-ui.athenz.ouryahoo.com
src1.yahoo.com
apptio-connector-stage.ouryahoo.com
stage.consent.oath.com
store-qa.ouryahoo.com
src1.yahoo.com
stage-api.tls.ouroath.com
src1.yahoo.com
tsa.ouryahoo.com
api.native.yahooinc.com
stage-real.smp.verizonmedia.com

Certificate

The complete raw certificate details for yb-bk-stg.ouryahoo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEetEIJCGwVQf77Zb5iZ
PYSWpMtHhrbPBSAMPTXDznGXd6CN0SMbWAYnfokoR1m1hEOucBsFq53F8XP+/2+w
/4Ng6YkGkBAvxEjLnVFG+vV3nPcROXQ0tkKDT38U07mOvW25Gu4slAB+uZscrBx/
xKHA/VCGFaBaFvx5OJ8IPQuerMGQYnkoGitv00y1ropwvPnko9ROX274lMASvOYx
pbyc156b3MFqbs5a2RwIbmMYDrKWBhElFxKIUwjAQ1GbX6XC5I89gUeXhltr+sRg
b0hyjVBMvZYjBuD2K8h+pKlWTmzb8UgWGwXlRnriPfeL/NTX3mJcOFdYIn2//sJz
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 23935126982608500797669996404
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-27 16:33:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-08 07:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sterling'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oath Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yb-bk-stg.ouryahoo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20738426783699747942602661811640718021868264325150060043415529069272803332241420792562130800939745491246620628966725399962193783233889523710526738081890410456087734499453133185675009724921956040746760273824031638472849537631859223035800415606141168585368412858539163534793049232087499797096980719190055376579246470848511555580929941898697090403289810744303156597946760391707047676915612989266497029142107826094040026653903478228656076095879788724476683832409236738480057041864881539890055685974836179383255716551331877861427993355196674735109426701581369150908471457060862619264786076824565758374353728302029039891389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yb-bk-stg.ouryahoo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd10b930292e3a3cb5256c2cec88966a654aa2a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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