morph-web-app.uat-ops.wmedia.tech

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0c:88:28:4f:c0:70:7e:9f:ae:c3:2f:3c:a9:5a:a6:c1 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=morph-web-app.uat-ops.wmedia.tech

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:88:28:4f:c0:70:7e:9f:ae:c3:2f:3c:a9:5a:a6:c1
Serial Number (int): 16657705937145831267322661882646144705
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 57:52:5f:9f:5c:9f:f5:19:5a:27:9e:6e:c9:22:9e:74:68:b6:3f:07
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): cf:c7:95:ba:8a:89:74:8b:67:a9:a2:3f:4b:c5:a0:aa:2d:20:03:cf
Fingerprint (sha256): 1d:d3:0b:69:e4:40:d5:2d:4a:d3:3a:47:c7:d1:57:8d:da:97:77:ba:b9:b1:78:5b:d8:59:a3:78:53:d1:de:61

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate morph-web-app.uat-ops.wmedia.tech

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for morph-web-app.uat-ops.wmedia.tech

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

morph-web-app.uat-ops.wmedia.tech
uat.morph.warnermedia.com

Other certificates including the domain name wmedia.tech

(limited to 100 certificates)
ecs-npm-mct.dev-ps.wmedia.tech
portal.dev-b2b.wmedia.tech
partnerhub.qa-b2b.wmedia.tech
blueprint.prod-ops.wmedia.tech
api-v2-http.poc-mediapoc.wmedia.tech
ecs-py-mct.dev-ps.wmedia.tech
portal.prod-b2b.wmedia.tech
morph-web-app.dev-ops.wmedia.tech
morph-job-definitions.qa-ops.wmedia.tech
api-ws.dev-ads.wmedia.tech
admin-deliver-portal.dev-b2b.wmedia.tech
admin-deliver-portal.qa-b2b.wmedia.tech
mstack.prod-ps.wmedia.tech
lasso-web-ui.prod-ops.wmedia.tech
*.qa-apptmwf.wmedia.tech
deliver-portal.dev-b2b.wmedia.tech
cmt.dev-esp.wmedia.tech
promowf.prod-apptmwf.int.wmedia.tech
morph-web-app.uat-ops.wmedia.tech
portal.uat-ops.wmedia.tech
greyhound-ecs-npm-mct.dev-ps.wmedia.tech
deliver-portal-api.dev-b2b.wmedia.tech
ecs-npm-mct.dev-ps.wmedia.tech
lasso-web-ui.dev-ops.wmedia.tech
auth.e1-esp.wmedia.tech
logs-preprod.wmedia.tech
logs.wmedia.tech
disco.qa-ops.wmedia.tech
blueprint.dev-ops.wmedia.tech
api-ws.uat-ads.wmedia.tech
lasso-web-ui.uat-ops.wmedia.tech
api.uat-ads.wmedia.tech
msc-common-docs.dev-ps.wmedia.tech
ecs-mvn-mct.dev-ps.wmedia.tech
morph.prod-ops.wmedia.tech
disco.uat-ops.wmedia.tech
ia-sdr.dev-vendor-iris.wmedia.tech
*.stg-apptmwf.int.wmedia.tech
disco.qa-ops.wmedia.tech
api.dev-esp.wmedia.tech
portal.prod-ops.wmedia.tech
morph-web-app.qa-ops.wmedia.tech
morph-job-definitions.dev-ops.wmedia.tech
admin-deliver-portal.qa-b2b.wmedia.tech
*.stg-apptmwf.wmedia.tech
polaris.uat-esp.wmedia.tech
*.dev-poc.wmedia.tech
deliver.prod-b2b.wmedia.tech
admin-deliver.prod-b2b.wmedia.tech
api.esp.wmedia.tech
lasso-web-ui.uat-ops.wmedia.tech
blueprint.prod-ops.wmedia.tech
api-ws.poc-mediapoc.wmedia.tech
ecs-npm-mct.dev-ps.wmedia.tech
mstack.dev-ps.wmedia.tech
aim.prod-esp.wmedia.tech
partnerhub.prod-b2b.wmedia.tech
lasso-web-ui.prod-ops.wmedia.tech
ecs-py-mct.dev-ps.wmedia.tech
portal.prod-ops.wmedia.tech
greyhound-ecs-mvn-mct.dev-ps.wmedia.tech
*.promowf.prod-apptmwf.wmedia.tech
greyhound-ecs-mvn-mct.dev-ps.wmedia.tech
greyhound-ecs-npm-mct.dev-ps.wmedia.tech
polaris.prod-esp.wmedia.tech
partnerhub.prod-b2b.wmedia.tech
cmt.prod-esp.wmedia.tech
lasso-web-ui.dev-ops.wmedia.tech
api.uat-esp.wmedia.tech
api-ws.dev-ads.wmedia.tech
portal.qa-b2b.wmedia.tech
pegasus-adhoc-workflow-ui.dev-apptmwf.wmedia.tech
admin-deliver-portal.dev-b2b.wmedia.tech
greyhound-ecs-npm-mct.dev-ps.wmedia.tech
disco.uat-ops.wmedia.tech
auth.qa-esp.wmedia.tech
api.prod-esp.wmedia.tech
api.poc-mediapoc.wmedia.tech
api.ads.wmedia.tech
advault-web.dev-ads.wmedia.tech
wm360.prod-b2b.wmedia.tech
api.int-ps.wmedia.tech
greyhound-ecs-mvn-mct.dev-ps.wmedia.tech
lasso-web-ui.prod-ops.wmedia.tech
blueprint.prod-ops.wmedia.tech
partnerhub.qa-b2b.wmedia.tech
api.poc-mediapoc.wmedia.tech
portal.prod-b2b.wmedia.tech
disco.dev-ops.wmedia.tech
auth.qa-esp.wmedia.tech
api.dev-ads.wmedia.tech
auth.base-esp.wmedia.tech
api.qa-ads.wmedia.tech
disco.dev-ops.wmedia.tech
greyhound-ecs-py-mct.dev-ps.wmedia.tech
deliver-admin-api.uat-b2b.wmedia.tech
api.qa-esp.wmedia.tech
portal.prod-ops.wmedia.tech
blueprint.prod-ops.wmedia.tech
auth.uat-esp.wmedia.tech

Certificate

The complete raw certificate details for morph-web-app.uat-ops.wmedia.tech in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumv3epfFP88sKPrk/iVL
4auQzSBBkWPSf6O2vJ1eujZXuFepePyxAdVLyURQpBt7DniD4BfEYD2/MvDDvu9N
9nyfvCT3oS0D77ACYDGd97jGw2uqVLT8uIbtVCYP8bmMtMhOpxhkqtc1jcwA3zJe
BOLqIG1RofPC9Pw2yFzuq7pxUr9aWa0qhbOs6JvyVfqgbitB3DTi2y9geL37roG7
94XZoVjEBK1tgEMlA2+VgPTuKeC+hne9TRatSf7LjFov0qWq3opuFpQ20Y3kH/Ih
m1M7BNz0Bx3tx333GXW0hq90jLktLAL2XliBRrsObGIDbyyFYjh6t8SrZp9byc7Z
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16657705937145831267322661882646144705
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'morph-web-app.uat-ops.wmedia.tech'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23533565094837814364578866923483298226846189425034647256419886696129259751045066012039859392061756996129833466166867843855822229238833613218056572891910483552539545543763590784999990037799961436291226267711507227630382908420422156088644139643612258093285723651736843373834131752167552306042045943404258257979797165093175919091107726077269800602572432017284347143254395468891032034545760068929175761653214465022258045096111703489893330708234001721455720408576900431674684197100569461475005880489967589414837123956069080871431367249987422924708016868253845987626724185350448648067999876026974647727660259269265320761763
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							57525f9f5c9ff5195a279e6ec9229e7468b63f07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morph-web-app.uat-ops.wmedia.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.morph.warnermedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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