hynpeh-00uag001.eng.homebox.com

- HOME BOX OFFICE, INC. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 7d:bc:63:dc:21:d4:9f:6a:43:61:4c:ce was issued on by GlobalSign nv-sa.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

HOME BOX OFFICE, INC.

Organization: HOME BOX OFFICE, INC.
State / Province: New York
Locality: New York
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 7d:bc:63:dc:21:d4:9f:6a:43:61:4c:ce
Serial Number (int): 38913375856758932763479985358
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: bf:e3:bb:d8:b3:6c:41:04:6a:48:69:b9:5b:e4:76:09:7a:a8:9f:d6
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): ce:74:c7:c3:8d:86:87:d0:1e:58:c3:56:bf:00:60:c6:8d:18:b8:57
Fingerprint (sha256): 18:67:aa:4a:f0:70:5c:88:aa:28:db:ce:54:d2:de:76:6b:05:6c:5e:08:09:8c:95:e0:8c:52:26:99:44:03:bb

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate hynpeh-00uag001.eng.homebox.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hynpeh-00uag001.eng.homebox.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hynpeh-00uag001.eng.homebox.com
hyspeh-00uag501.eng.homebox.com
hyvdiprodedit.hbo.homeboxoffice.com
mitvdi.hbo.homeboxoffice.com

Other certificates including the domain name homebox.com

(limited to 100 certificates)
finesseptch.homebox.com
w12nysp01devt.hbo.homebox.com
hpw-dbs014972.hbo.homebox.com
finessetest.homebox.com
HBODRA.hbo.homebox.com
uxtdlcmapp12b.homebox.com
hyndwv-00nxs001.eng.homebox.com
o365.hbo.com
tidalp.homebox.com
hpw-app007012.hbo.homebox.com
hpw-app003727.hbo.homebox.com
sonar.homebox.com
uxoemapp15p.homebox.com
hpw-app014941.hbo.homebox.com
oauth.homebox.com
operaprod.homebox.com
puma.homebox.com
max-airflow.homebox.com
finreportsdev.homebox.com
panorama.homebox.com
prestoofferingloader.homebox.com
dropbox.homeboxoffice.com
vhtad01.homebox.com
hbonet.homebox.com
hyndlv-00tsg001.eng.homebox.com
hyndl-vca01-01v.eng.homebox.com
uxddtapp01d.homebox.com
hynpl-nxu01-01v.eng.homebox.com
betadigitallibraryservices.homebox.com
hpl-app002365.homebox.com
vdesktop.homeboxoffice.com
documentmgrd.homebox.com
veadc01.homebox.com
vdesktop.homeboxoffice.com
splunk-dev.homebox.com
hqw-app003758.hbo.homebox.com
finesseptch.homebox.com
toscaserverdev.hbo.homebox.com
hpw-dbs002617.hbo.homebox.com
hqw-web007608.hbo.homebox.com
tss.homebox.com
betadigitallibraryservices.homebox.com
apibeta.homeboxoffice.com
siabeta-api.homebox.com
finprodobi.homebox.com
vera-fcdv.homebox.com
mobile.homeboxoffice.com
stgdigitallibraryservices.homebox.com
betadigitallibraryservices.homebox.com
hynplv-00acux.eng.homebox.com
cappmpfix.homebox.com
documentmgrb.homebox.com
midasprod.homebox.com
tidalp.homebox.com
itsecsearch.hbo.homebox.com
edsapps-dev.homebox.com
mobile.homeboxoffice.com
operabeta2.homebox.com
hynpeh-00uag001.eng.homebox.com
hpw-app007662.hbo.homebox.com
hynplv-00lcb001.eng.homebox.com
uxcygsvsapp01d.homebox.com
finessesand.homebox.com
qlikview.homebox.com
w8nycmg01p.hbo.homebox.com
nyctjbapp01p.homebox.com
workdaynewhire.homeboxoffice.com
ebsoamd.homebox.com
vetad01.homebox.com
splunk-beta.homebox.com
hqw-web014923.hbo.homebox.com
vefsc02.homebox.com
tamdev-api.homebox.com
infoblox.homebox.com
hpw-app007023.hbo.homebox.com
mongo.prod-espv4.hbo.com
pam-api.homebox.com
tam-api.homebox.com
dlsia.homebox.com
w8nymp01app.hbo.homebox.com
inventory.eng.homebox.com
ebsoamb.homebox.com
finpfixobi.homebox.com
iris-dev.homebox.com
mscQAServerDev.hbo.homebox.com
uxtdlmstrdb12t.homebox.com
hdw-dbs003316.hbo.homebox.com
vera-fsdv.homebox.com
presto.homebox.com
git.homebox.com
hqw-dbs007647.hbo.homebox.com
stgdlsia.homebox.com
siem.homebox.com
git-dev.homebox.com
hynpeh-00uag001.eng.homebox.com
phantom.hbo.homebox.com
uxcygsvsapp01d.homebox.com
mscQAAgentJenkins.hbo.homebox.com
uxcroapp11d.homebox.com
finessefunc.homebox.com

Certificate

The complete raw certificate details for hynpeh-00uag001.eng.homebox.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VNKCEaO2Lg8RCFtuQyV
WSqRKoDE9l0miup07S6udsdgyMaCJFfiUQj/+Ulkzk92FvIqU93IMU0OGZNydQdE
LP64mC3WE8I2CHakDMxvLEmOHNrn6y/qrwIEGoY/nU7sAQ7Bl08l9ZmR8RqNc9lu
572knqdQ8+bezdHrsdzzmi75/3honjveiDO02WrOC9K/yMdFU8yYVcagPdssbxpw
g73Y59pcs3acs2zm7F1l1c+v9FXaf91SiS6yXuJ2CoCWQ8de5pzi3kx35MN2F+w9
Mmr9ic+eScrWps1Ri+1pv0KLiuy39M9sb8Dn46Tsgb5qPgrgAGuO6SKqpQq8H6vm
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38913375856758932763479985358
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-08 21:21:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-11 21:21:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HOME BOX OFFICE, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hynpeh-00uag001.eng.homebox.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26929830387509030579572394301981508213083184201672676312991284561284023815378592694617130405431686266185305896992946489594313286618059974714564698259880839627582059175098115871886409092117206181436627914309111034730563001267963127918951797936935571024864381803435268842623195453747497187442538921324952461449401108655760447475551306312679470195087190227874032314778606351950705258289317281937916325403639557054430959621429312432401391170113472610576799105688400263517126487673520234545439695529063524509633063725095525036463911575304109968442119975425645804237114447210870834032713766420764092302809931183665854539431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (136 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hynpeh-00uag001.eng.homebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyspeh-00uag501.eng.homebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyvdiprodedit.hbo.homeboxoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitvdi.hbo.homeboxoffice.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bfe3bbd8b36c41046a4869b95be476097aa89fd6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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