wm-msi.twi.com

- Warner Bros. Discovery, Inc. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 1e:40:a1:e8:f7:3e:05:40:50:af:dc:3c was issued on by GlobalSign nv-sa.

With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Warner Bros. Discovery, Inc.

Organization: Warner Bros. Discovery, Inc.
State / Province: New York
Locality: New York
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 1e:40:a1:e8:f7:3e:05:40:50:af:dc:3c
Serial Number (int): 9362686145559738392134016060
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: f6:e1:43:e7:17:b5:16:99:50:f8:6a:80:99:16:f7:d1:6f:c6:84:db
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 43:38:79:09:87:1e:fd:f0:26:d9:a0:01:aa:ec:23:d6:ac:5c:57:c8
Fingerprint (sha256): 17:7a:a2:c6:e7:63:07:ad:c1:01:92:5e:19:d9:aa:f1:70:a0:d5:d9:71:b4:e5:ee:04:89:42:2b:8c:b4:a7:86

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate wm-msi.twi.com

48

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wm-msi.twi.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wm-msi.twi.com
hyta-1-msi1.twi.com
hyta-10-msi1.twi.com
hyta-10-msi2.twi.com
hyta-10-msi3.twi.com
hyta-11-msi1.twi.com
hyta-14-msi1.twi.com
hyta-16-msi1.twi.com
hyta-17-msi1.twi.com
hyta-18-msi1.twi.com
hyta-18-msi2.twi.com
hyta-19-msi1.twi.com
hyta-19-msi2.twi.com
hyta-20-msi1.twi.com
hyta-21-msi1.twi.com
hyta-21-msi2.twi.com
hyta-22-msi1.twi.com
hyta-22-msi2.twi.com
hyta-23-msi1.twi.com
hyta-24-msi1.twi.com
hyta-25-msi1.twi.com
hyta-35-msi1.twi.com
hyta-36-msi1.twi.com
hyta-37-msi1.twi.com
hyta-38-msi1.twi.com
hyta-38-msi2.twi.com
hyta-39-msi1.twi.com
hyta-40-msi1.twi.com
hyta-41-msi1.twi.com
hyta-42-msi1.twi.com
hyta-43-msi1.twi.com
hyta-44-msi1.twi.com
hyta-44-msi2.twi.com
hyta-45-msi1.twi.com
hyta-46-msi1.twi.com
hyta-47-msi1.twi.com
hyta-48-msi1.twi.com
hyta-49-msi1.twi.com
hyta-50-msi1.twi.com
hyta-51-msi1.twi.com
hyta-52-msi1.twi.com
hyta-6-msi1.twi.com
hyta-c1-msi1.twi.com
hyta-grnd-msi1.twi.com
hyta-m79-msi1.twi.com
wm-cpms1.twi.com
wm-cpms2.twi.com
wm-cpms3.twi.com

Other certificates including the domain name twi.com

(limited to 100 certificates)
twsaml.stage.twi.com
desktop.timewarner.com
touchpoint.twi.com
hipaa.dev.twi.com
appdef.stage.twi.com
crestronfusion.stage.twi.com
warnermedia.com
ars.twi.com
intpostings.twi.com
appdef.stage.twi.com
twinfamm.twi.com
cprhistory.dev.twi.com
compplanning.stage.twi.com
test09.twi.com
twec.dev.twi.com
touchpoint.stage.twi.com
twia.stage.twi.com
warnermediagroup.com
hyvcenterdr.twi.com
tableau-saml.dev.twi.com
timewarner.com
wmbi.stage.twi.com
timewarnerfitnation.com
twservices.timewarner.com
diversityadmin.dev.twi.com
webtms.stage.twi.com
spdc.twi.com
webtms.timewarner.com
twia.twi.com
touchpoint.twi.com
eisna.ad.corp.aoltw.net
hrdcservices.twi.com
iowa.timewarner.com
rmis.dev.twi.com
appcentral.dev.twi.com
lxonline.stage.twi.com
rmis.dev.twi.com
webtms.timewarner.com
appsmtp.twi.com
wm-msi.twi.com
financeportal.twi.com
*.wbd.com
hyta-18-msi1.twi.com
twauthservice.dev.twi.com
twec.dev.twi.com
claimstracking.twi.com
dxprocessingdr.twi.com
appviewx-test3.twi.com
mtk.twi.com
longviewact.twi.com
ad-ldap.twi.com
scom-twprod.twi.com
warnerbros.com
eisna.dev.twi.com
appdef.stage.twi.com
ars.twi.com
hrdc.twi.com
bmt.stage.twi.com
oneworld.twi.com
touchpoint.twi.com
twequity.dev.twi.com
cprhistory.dev.twi.com
twinfaics1.twi.com
login.timewarner.com
hrdc.twi.com
knoahsoftrecording.twi.com
twbotraining.twi.com
grc.twi.com
hrdcservicescorpclient.stage.twi.com
twlogin.twi.com
ad-ldap.dev.twi.com
webtms.dev.twi.com
hyvcenterprod.twi.com
twxea.stage.twi.com
cqw-dbs001518.stage.twi.com
twxea.dev.twi.com
wbbsp.dev.twi.com
hrdcservices.twi.com
CPW-DBS012273.twi.com
twsaml.stage.twi.com
deferredcomp.twi.com
vcenter.twi.com
certprint.twi.com
cqw-dbs001518.stage.twi.com
tableau-saml.twi.com
eastgate.twi.com
webtms.stage.twi.com
support.twi.com
ars.stage.twi.com
spw-app000019.twi.com
southgate.twi.com
longviewact.twi.com
twsecurity.stage.twi.com
warnermediagroup.com
touchpoint.dev.twi.com
twsaml.stage.twi.com
servicesqa.warnermediagroup.com
appdef.twi.com
twcptools.twi.com
warnermediagroup.com

Certificate

The complete raw certificate details for wm-msi.twi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfy9L3bmfWMdfdxWMsk+
RAFbPzUoSOPPwxetVUp6P3oe8ws+18Lo7T39LNyLBaUjlUrRRfR3aUljkPUNNsVs
3thHYiFjLP6Ls1fLmaaHbyP2CngPwqJ5vy9WUsm1Jz8nld4B1jWkqumWZpZJnlUt
gPulNMdi+5NSQ6MTFk7DIZ2VQ0Ggx3zeW4nO1WMdQNmRMdEeEW5E64kL8kO1+wSM
VXAcCHUBdGIKD+w+bQbRoYphu5L/R8yZ8Rcou3CnTeeV4uDg8H+YS2ql6Yb9E61T
b9EID74NdmCSnhvLOw6394RXqaJ1VXX2RvPfMyiajR5HzHt3KdKYWj3lib6qWiKH
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9362686145559738392134016060
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-22 19:11:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-23 19:11:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Warner Bros. Discovery, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wm-msi.twi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19944044128316281347208024014390685403847130611293044731826309375872232486294320056573543745063016458918839348521672164297409285159368817898350095290900053918553704396400155433354393915192875282473373364300244456257700949647945682725601571262204523734071089839927337117734182472270198534649826425153605927714199263394012156235840679585998477567585379920268119866289281545877224786084494718668500375488051049020472031418384076927812966622977752616434473909403702402590160102566412968119922420857201822463511904868774092531332925190684061112455653765765362732900873126588388514672318223911712180894076651904477111158603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1043 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wm-msi.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-1-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-10-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-10-msi2.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-10-msi3.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-11-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-14-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-16-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-17-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-18-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-18-msi2.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-19-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-19-msi2.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-20-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-21-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-21-msi2.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-22-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-22-msi2.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-23-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-24-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-25-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-35-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-36-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-37-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-38-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-38-msi2.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-39-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-40-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-41-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-42-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-43-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-44-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-44-msi2.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-45-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-46-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-47-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-48-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-49-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-50-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-51-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-52-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-6-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-c1-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-grnd-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyta-m79-msi1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wm-cpms1.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wm-cpms2.twi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wm-cpms3.twi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6e143e717b5169950f86a809916f7d16fc684db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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