appviewx-test3.twi.com

- Warner Media, LLC -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 5d:85:f4:07:15:f3:5e:7f:b1:0d:a8:f9 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Warner Media, LLC

Organization: Warner Media, LLC
State / Province: New York
Locality: New York
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 5d:85:f4:07:15:f3:5e:7f:b1:0d:a8:f9
Serial Number (int): 28944045435524577577701058809
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 92:af:04:45:7c:b9:5d:18:27:61:4e:03:d5:85:62:83:89:fa:cd:78
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 94:2d:04:9d:0c:41:e6:23:c6:54:7f:73:fc:e9:30:72:c4:d2:f4:ab
Fingerprint (sha256): 1a:3f:3a:ad:5c:26:5a:ca:4b:0f:35:d0:7b:4e:ad:c7:79:e8:03:b6:af:d0:23:6e:4e:09:89:ff:39:1d:ea:e7

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate appviewx-test3.twi.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for appviewx-test3.twi.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

appviewx-test3.twi.com

Other certificates including the domain name twi.com

(limited to 100 certificates)
twsaml.stage.twi.com
desktop.timewarner.com
touchpoint.twi.com
hipaa.dev.twi.com
appdef.stage.twi.com
crestronfusion.stage.twi.com
warnermedia.com
ars.twi.com
intpostings.twi.com
appdef.stage.twi.com
twinfamm.twi.com
cprhistory.dev.twi.com
compplanning.stage.twi.com
test09.twi.com
twec.dev.twi.com
touchpoint.stage.twi.com
twia.stage.twi.com
warnermediagroup.com
hyvcenterdr.twi.com
tableau-saml.dev.twi.com
timewarner.com
wmbi.stage.twi.com
timewarnerfitnation.com
twservices.timewarner.com
diversityadmin.dev.twi.com
webtms.stage.twi.com
spdc.twi.com
webtms.timewarner.com
twia.twi.com
touchpoint.twi.com
eisna.ad.corp.aoltw.net
hrdcservices.twi.com
iowa.timewarner.com
rmis.dev.twi.com
appcentral.dev.twi.com
lxonline.stage.twi.com
rmis.dev.twi.com
webtms.timewarner.com
appsmtp.twi.com
wm-msi.twi.com
financeportal.twi.com
*.wbd.com
hyta-18-msi1.twi.com
twauthservice.dev.twi.com
twec.dev.twi.com
claimstracking.twi.com
dxprocessingdr.twi.com
appviewx-test3.twi.com
mtk.twi.com
longviewact.twi.com
ad-ldap.twi.com
scom-twprod.twi.com
warnerbros.com
eisna.dev.twi.com
appdef.stage.twi.com
ars.twi.com
hrdc.twi.com
bmt.stage.twi.com
oneworld.twi.com
touchpoint.twi.com
twequity.dev.twi.com
cprhistory.dev.twi.com
twinfaics1.twi.com
login.timewarner.com
hrdc.twi.com
knoahsoftrecording.twi.com
twbotraining.twi.com
grc.twi.com
hrdcservicescorpclient.stage.twi.com
twlogin.twi.com
ad-ldap.dev.twi.com
webtms.dev.twi.com
hyvcenterprod.twi.com
twxea.stage.twi.com
cqw-dbs001518.stage.twi.com
twxea.dev.twi.com
wbbsp.dev.twi.com
hrdcservices.twi.com
CPW-DBS012273.twi.com
twsaml.stage.twi.com
deferredcomp.twi.com
vcenter.twi.com
certprint.twi.com
cqw-dbs001518.stage.twi.com
tableau-saml.twi.com
eastgate.twi.com
webtms.stage.twi.com
support.twi.com
ars.stage.twi.com
spw-app000019.twi.com
southgate.twi.com
longviewact.twi.com
twsecurity.stage.twi.com
warnermediagroup.com
touchpoint.dev.twi.com
twsaml.stage.twi.com
servicesqa.warnermediagroup.com
appdef.twi.com
twcptools.twi.com
warnermediagroup.com

Certificate

The complete raw certificate details for appviewx-test3.twi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaIiv1sCImMKyWD1OuZ+
JU029PSJXlnbjeiNTvA25R3HAXVGuX2ydwxyMolJ0LOjQOlY7Y5pKFHI0zSLW1Z7
jefg9lxtjZAiBd0wntvpk3rYymw7XZ2Z1nZVuovNbKdl9smdDO5fv+bwD2QOdsxA
rtEAvKZ1hwPCAewbN6IGpyYl/ascXa7lK++yEmwrjR+xeqpsFVKCndUrNxQqv2rT
uKWIei75DsCYu7YKb76ivgypx2MxVPcg5CDfbacxpY4hOOfipQBNvJderaFw07K5
t/ejuuv158kd7qL0VYH15LVSW+EPYTRcs0AxYqZOne4OOswC/Jw8fdFCeleqtpm/
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28944045435524577577701058809
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-04 02:00:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-05 02:00:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Warner Media, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'appviewx-test3.twi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23938991748064385763116475380590234933900177664861713966493548245461332459078925043396492104896182864045165637676493394607160352006371669025883664382988358773147184723538899867533654913834845720087569780052666697769184358721072018483748912351090442969845024559564039833652174031599435546225409892283373340363128904743271585904304276811931901719852263246369100741940024712397768175806603286887700727577026225189714055786309181162603339760503899978772236679661168136856892132493827516639194409908458785070101778607757816922813026439895645748594341626922029743813225475303085330531642573400556053249051543561073556307963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appviewx-test3.twi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							92af04457cb95d1827614e03d585628389facd78
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0077699512f00dfead5a042b036b9aed937b608c8979f3ce6211c5f3beda6b8c8a971c3c8c93b9dfe816abec1ee98e03d5a29745908f7ba35d4c16afd5d505c33ea9969ef8f373cc0c4980b5f9a2a3a7e8342725108d83694e3fcc5b0f8262594e0210cb517aa2fb30a4dc5c7e03350fc3b521ba073344c89b6a02b3cd8650f82e5b20738e9d481ad7de0b51cc6ff8b09d04835db41d8f19d2646ac6c0a1277f54afe651fab5a45233c50b594aa82f7c91c7ca090b44acc1991d95c9950dcda48e0fbd758b4c95389bec49a6514ee8207747586c1c3be3392e4ea9b096c3653de1280dcd313fdc6b11fd1e6775bf74580adeee7ac8c349f8423bc05fba318fb916