devmfaappservice.wbd.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 08:19:ec:e3:7a:2c:b4:1a:a6:73:01:77:c7:b1:ac:38 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=devmfaappservice.wbd.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:19:ec:e3:7a:2c:b4:1a:a6:73:01:77:c7:b1:ac:38
Serial Number (int): 10768436059013264658011740543531461688
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0c:b6:67:74:25:b0:2a:8c:73:3a:f6:52:0d:2a:4f:3e:8e:47:67:76
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): b2:d2:75:51:b8:00:dd:94:ec:02:a5:38:b4:ae:7a:62:cb:da:e3:65
Fingerprint (sha256): 28:1c:f6:17:fd:fd:c7:11:e3:29:77:ad:8c:f3:22:9b:bd:25:cf:48:4a:16:52:00:b7:76:dd:b9:ff:28:0b:da

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate devmfaappservice.wbd.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for devmfaappservice.wbd.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

devmfaappservice.wbd.com

Other certificates including the domain name wbd.com

(limited to 100 certificates)
tars.wbd.com
ssobiz.wbd.com
thv.warnermedia.com
nms-test2.wbd.com
newsletter.wbd.com
neo-dev.wbd.com
cnn-datascience.wbd.com
san-005.ceros.com
clarityuat.wbd.com
pathfinder-dev.wbd.com
snapshot2.prod.bc.wbd.com
dev-tars.wbd.com
dev.lookercloud.wbd.com
san-005.ceros.com
t-rexstg.wbd.com
prodeastwbdappcentralappservice01.wbd.com
qaiamadminappservice02.wbd.com
snapshot1.dev.bc.wbd.com
clp-status2.prod.bc.wbd.com
niatest2.wbd.com
iamadmindev.warnermedia.com
ws.screentrack.wbd.com
*.tan-staging.wbd.com
san-005.ceros.com
jenkins.dev.dap.wbd.com
dev.msd-apps.wbd.com
pulse.wbd.com
dtag-api.wbd.com
pac.wbd.com
adsalesush.wbd.com
niatest2.wbd.com
dev.thumb.morty.wbd.com
ssobizqa.wbd.com
knowledgelibrary.wbd.com
prodeastaupappservice02.wbd.com
san-005.ceros.com
qaaupappservice2.wbd.com
airflow.dev.dap.wbd.com
snapshot2.dev.bc.wbd.com
tan-staging.wbd.com
san-005.ceros.com
pinky.dev.neo-dev.wbd.com
*.wbd.com
clp-status2.dev.bc.wbd.com
self-service-catalog.gics.wbd.com
SAPCitrix.WBD.com
ssobizqa.wbd.com
san-005.ceros.com
api.screentrack.wbd.com
prodeastwbdmfaappservice01.wbd.com
boprod.wbd.com
gethelp.wbd.com
spy-dev.wbd.com
san-005.ceros.com
san-005.ceros.com
*.wbd.com
san-005.ceros.com
vdiwest.wbd.com
cap.wbd.com
pac.wbd.com
*.wbd.com
dev-chatapp.wbd.com
tableau.wbd.com
warnerbros.com
*.atlas.wbd.com
2c2pevc01v.inf.wbd.com
*.wbd.com
san-005.ceros.com
san-006.ceros.com
oasis.gics.wbd.com
sit.api.p2.inventory.wbd.com
dtag-jsreport.wbd.com
qamfaappservice02.wbd.com
infadevpowercenter.wbd.com
qamfaappservice02.wbd.com
prodwestcapappservice01.wbd.com
t-rex.warnermediagroup.com
fluxcd-dashboard.beta.dap.wbd.com
creativeshop.warnermedia.com
provysweb.wbd.com
devmfaappservice.wbd.com
gethelp-dev.wbd.com
live-cf.wbd.com
brand.wbd.com
bi.discovery.com
fluxcd-notify.dap.wbd.com
clp-health-api.neo.wbd.com
cprhistory.dev.wbd.com
screeners.wbtvd.com
eshop.wbd.com
san-005.ceros.com
*.promo.bifrost.wbd.com
dev-wbr-api.wbd.com
ssobizqa.wbd.com
splint.us-east.prod.bc.wbd.com
san-006.ceros.com
clarity.wbd.com
*.wbd.com
accredible.irc.queensu.ca
eContracts.wbd.com

Certificate

The complete raw certificate details for devmfaappservice.wbd.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWHSjexJsW7YVv6vEgmW
iILZtkviin2jABzY0MFlnumwc8H3kh9gUk6o4+qnUM28zeL16PcQ4WE+D+x/dKmQ
JVvNf0Lv+28pjTYAGeZBDi+r4AcTqsrK1xQLTEYmD7WHmC5qMm2M+oBeuRJo2yiB
c+nDrbdFVQbXadr/7IUFDG8EoCHimuuqGT9UvdyaRvhltQV9pb8+nHEQNlEBZza3
heqGV1Ns3WcmHeBgP97AGe845k8c6UAqYkd4m6sx+lwVyzmMqIBa37jFKNYV8Dd7
7LuAC7tBybW9EnZKpD1ChQG1Z79yoryYioe4ANsIn5JdTVa2gBnx6Ikc+sSfeKJ4
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10768436059013264658011740543531461688
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'devmfaappservice.wbd.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25927090579837053088932401978967142855411605964601477952526810873711788040460476425119871185340051121205485565530048814017231608754171078371027960702419499254452028530274005314255603005273569913729247672009543589959024560497490119715334635292234107276831191066098265164148347195345763267798769819342521814529570957609940543483947704858973391787819075369566682569877122240509332170401737905711607639464789878118084660538992386462609130913522227721157448900638137017292589958452525823206358688566246493777264007544571258289136129514664462813270866356157053212549175890963528950259252576928872898233827372186047892060333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0cb6677425b02a8c733af6520d2a4f3e8e476776
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devmfaappservice.wbd.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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