hyspeh-00uag501.eng.homebox.com

- HOME BOX OFFICE, INC. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 14:5e:63:28:48:37:d0:e2:f5:c9:fa:02 was issued on by GlobalSign nv-sa.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

HOME BOX OFFICE, INC.

Organization: HOME BOX OFFICE, INC.
State / Province: New York
Locality: New York
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 14:5e:63:28:48:37:d0:e2:f5:c9:fa:02
Serial Number (int): 6303807480826101127830960642
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: f7:ac:e0:a6:c9:a9:d1:69:79:f2:00:e1:65:a9:8c:e0:60:b0:69:72
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 47:95:15:26:06:81:3d:94:c3:d2:4d:da:ce:49:86:fa:b3:04:2c:e8
Fingerprint (sha256): 20:b6:a5:ce:59:93:7a:df:80:d2:b9:16:f5:53:e7:4b:3e:3c:19:bf:86:cf:83:ea:4a:c4:20:bf:0b:e8:10:a8

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate hyspeh-00uag501.eng.homebox.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hyspeh-00uag501.eng.homebox.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hyspeh-00uag501.eng.homebox.com
hyvdiprodedit.hbo.homeboxoffice.com
mitvdi.hbo.homeboxoffice.com
hynpeh-00uag001.eng.homebox.com

Other certificates including the domain name homebox.com

(limited to 100 certificates)
finesseptch.homebox.com
w12nysp01devt.hbo.homebox.com
hpw-dbs014972.hbo.homebox.com
finessetest.homebox.com
HBODRA.hbo.homebox.com
uxtdlcmapp12b.homebox.com
hyndwv-00nxs001.eng.homebox.com
o365.hbo.com
tidalp.homebox.com
hpw-app007012.hbo.homebox.com
hpw-app003727.hbo.homebox.com
sonar.homebox.com
uxoemapp15p.homebox.com
hpw-app014941.hbo.homebox.com
oauth.homebox.com
operaprod.homebox.com
puma.homebox.com
max-airflow.homebox.com
finreportsdev.homebox.com
panorama.homebox.com
prestoofferingloader.homebox.com
dropbox.homeboxoffice.com
vhtad01.homebox.com
hbonet.homebox.com
hyndlv-00tsg001.eng.homebox.com
hyndl-vca01-01v.eng.homebox.com
uxddtapp01d.homebox.com
hynpl-nxu01-01v.eng.homebox.com
betadigitallibraryservices.homebox.com
hpl-app002365.homebox.com
vdesktop.homeboxoffice.com
documentmgrd.homebox.com
veadc01.homebox.com
vdesktop.homeboxoffice.com
splunk-dev.homebox.com
hqw-app003758.hbo.homebox.com
finesseptch.homebox.com
toscaserverdev.hbo.homebox.com
hpw-dbs002617.hbo.homebox.com
hqw-web007608.hbo.homebox.com
tss.homebox.com
betadigitallibraryservices.homebox.com
apibeta.homeboxoffice.com
siabeta-api.homebox.com
finprodobi.homebox.com
vera-fcdv.homebox.com
mobile.homeboxoffice.com
stgdigitallibraryservices.homebox.com
betadigitallibraryservices.homebox.com
hynplv-00acux.eng.homebox.com
cappmpfix.homebox.com
documentmgrb.homebox.com
midasprod.homebox.com
tidalp.homebox.com
itsecsearch.hbo.homebox.com
edsapps-dev.homebox.com
mobile.homeboxoffice.com
operabeta2.homebox.com
hynpeh-00uag001.eng.homebox.com
hpw-app007662.hbo.homebox.com
hynplv-00lcb001.eng.homebox.com
uxcygsvsapp01d.homebox.com
finessesand.homebox.com
qlikview.homebox.com
w8nycmg01p.hbo.homebox.com
nyctjbapp01p.homebox.com
workdaynewhire.homeboxoffice.com
ebsoamd.homebox.com
vetad01.homebox.com
splunk-beta.homebox.com
hqw-web014923.hbo.homebox.com
vefsc02.homebox.com
tamdev-api.homebox.com
infoblox.homebox.com
hpw-app007023.hbo.homebox.com
mongo.prod-espv4.hbo.com
pam-api.homebox.com
tam-api.homebox.com
dlsia.homebox.com
w8nymp01app.hbo.homebox.com
inventory.eng.homebox.com
ebsoamb.homebox.com
finpfixobi.homebox.com
iris-dev.homebox.com
mscQAServerDev.hbo.homebox.com
uxtdlmstrdb12t.homebox.com
hdw-dbs003316.hbo.homebox.com
vera-fsdv.homebox.com
presto.homebox.com
git.homebox.com
hqw-dbs007647.hbo.homebox.com
stgdlsia.homebox.com
siem.homebox.com
git-dev.homebox.com
hynpeh-00uag001.eng.homebox.com
phantom.hbo.homebox.com
uxcygsvsapp01d.homebox.com
mscQAAgentJenkins.hbo.homebox.com
uxcroapp11d.homebox.com
finessefunc.homebox.com

Certificate

The complete raw certificate details for hyspeh-00uag501.eng.homebox.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9VgwOBWML5VdTaRkZN7
TfHxkXc6Iy2ZeM0PO2Bymp22f4BhbKbyDMQVdzemHu+KkwHmLyJ2T0GT6FXgp+1m
ukMWkfT+KtuHyusKiNIB2MwwNa0z3dtBlfb7fx/BHdKOqmLtUhHgRSeCfd8f0s5S
N+ZJUzWjFLSRu0wnE3xV7/re+2bKPweKmzkJSZCuh1+ATAZe25evEDhdnQkiat7C
twwNQFwMaX3m+moqJz/S/Oqdn9gIpmx4FZz3EVCBHktwI0uF42FiqC6JBrCLsHrf
j7hAgPuJ8j8lJkOpC178qBmY1wm2Fp936KWL/9uZRqTciERtGU/PhkRP+Vp7IaO4
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6303807480826101127830960642
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-06 03:31:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-07 03:31:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HOME BOX OFFICE, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hyspeh-00uag501.eng.homebox.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26236549713321452654890706582664874916760472515895585045199676023019671155464937980613748383054184161865139922340806539958411005066871147207826148985349685818353192072895645539112528748530816043387301722479779356919558055449850053416678997044014874564877553375977865958769291637982564570934776211474871343772256167869867779139025509962658504881022613595910686402244829595125133166879369267604234161463137522043424172569793046259804773919187148500171431526749235059793741483638607216919179783112257558568509602832514179204832744576591438541848792819525884819647756087171251518920232169777390963028769502670777330415667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (136 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyspeh-00uag501.eng.homebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyvdiprodedit.hbo.homeboxoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitvdi.hbo.homeboxoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hynpeh-00uag001.eng.homebox.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7ace0a6c9a9d16979f200e165a98ce060b06972
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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