qa.brandcentral.warnermediagroup.com

Issued by Amazon

About this certificate

This digital certificate with serial number 03:df:9d:df:9c:8d:86:f7:ff:58:2e:d7:f6:7a:81:22 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=qa.brandcentral.warnermediagroup.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:df:9d:df:9c:8d:86:f7:ff:58:2e:d7:f6:7a:81:22
Serial Number (int): 5148768241446785617627056897137475874
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: d7:f5:a4:fe:e7:c1:5f:95:54:00:38:57:0a:fb:38:02:fa:d3:71:e8
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): a6:67:a7:c4:72:34:0b:39:66:fb:8f:1d:5f:08:6d:35:dc:6b:2f:cf
Fingerprint (sha256): 2d:f1:32:4c:ab:57:b7:42:2d:30:30:95:9c:ba:6e:4b:4b:d8:47:0b:74:76:80:0f:e0:28:d8:e2:d9:ac:13:d6

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate qa.brandcentral.warnermediagroup.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qa.brandcentral.warnermediagroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qa.brandcentral.warnermediagroup.com
qa.deliver.brandcentral.warnermediagroup.com
qa.download.brandcentral.warnermediagroup.com
www.qa.brandcentral.warnermediagroup.com

Other certificates including the domain name warnermediagroup.com

(limited to 100 certificates)
partnerhub.qa-b2b.wmedia.tech
turner.com
touchpoint.twi.com
www.warnermediagroup.com
turner.com
*.brandcenter.warnermediagroup.com
warnermedia.com
*.warnermedia.com
touchpoint.warnermediagroup.com
t-rexstg.warnermediagroup.com
t-rexstg.wbd.com
t-rexdev.warnermediagroup.com
turner.com
warnermediagroup.com
*.deliver.warnermediagroup.com
pressroom.warnermediagroup.com
turner.com
ref.deliver.warnermediagroup.com
t-rex.warnermediagroup.com
*.warnermedia.com
wmgp-expc3-p.warnerbros.com
turner.com
wmgp-expe3-p.warnerbros.com
careers.warnermediagroup.com
turner.com
turner.com
*.cso.warnermedia.com
admin-deliver-portal.dev-b2b.wmedia.tech
*.warnermedia.com
turner.com
touchpoint.twi.com
admin-deliver-portal.qa-b2b.wmedia.tech
*.warnermedia.com
sspm.warnermediagroup.com
admin.cartoonnetwork.asia
admin.cartoonnetwork.asia
deliver.brandcenter.warnermediagroup.com
t-rexstg.warnermediagroup.com
hboassets.warnermediagroup.com
touchpoint.warnermediagroup.com
*.wbd.com
deliver.brandcenter.warnermediagroup.com
brandcenter.warnermediagroup.com
www.warnermediagroup.com
*.warnermedia.com
turner.com
warnerbros.com
turner.com
pressroom.warnermediagroup.com
*.wbd.com
turner.com
besafe.warnermediagroup.com
touchpoint.twi.com
admin.cartoonnetwork.asia
test.aws-splunk.cso.warnermediagroup.com
t-rex.warnermediagroup.com
touchpoint.warnermediagroup.com
admin.cartoonnetwork.asia
adminqa.timewarner.com
turner.com
appcentral.warnermediagroup.com
*.aws-splunk.cso.warnermediagroup.com
ablink.mktgmail.warnermediagroup.com
splunk-hec-prod.splunk-hec.aws-splunk.cso.warnermediagroup.com
disco.qa-ops.wmedia.tech
admin.cartoonnetwork.asia
warnermediagroup.tech
turner.com
qa.brandcentral.warnermediagroup.com
*.brandcenter.warnermediagroup.com
bulkingest.dev-fuse.deliver.warnermediagroup.com
turner.com
*.cso.warnermedia.com
hannibal-fe.warnermediagroup.com
turner.com
turner.com
admin.cartoonnetwork.asia
admin.cartoonnetwork.asia
*.warnermedia.com
warnermediagroup.com
turner.com
careers.warnermediagroup.com
turner.com
besafe.warnermedia.com
aws-splunk.cso.warnermediagroup.com
pressroom.warnermediagroup.com
servicesqa.warnermediagroup.com
brandcentral.warnermediagroup.com
*.doc.warnermediagroup.com
bulkingest.ref-assess.deliver.warnermediagroup.com
warnermediagroup.com
appcentral.warnermediagroup.com
disco.uat-ops.wmedia.tech
warnermedia.com
music.warnermediagroup.com
warnerbros.com
qa.brandcentral.warnermediagroup.com
disco.qa-ops.wmedia.tech
www.warnermediagroup.com
*.warnermedia.com

Certificate

The complete raw certificate details for qa.brandcentral.warnermediagroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgSxf7kJm0TUv6+e7Gh8
Gv8IecweR7MGDoOK41T43uspqPsYTXN4q1V9W3BQHyZ3xLvnQ488cBM3bqpBTUa6
cLt3MeuB/wLlEGELRuhw8tpxz0+FXp/plXxvBcp+7BxquCXh1V39BZGhJfzfyk3H
1hiveOOep6diMrjRY/kK4BbXoUqEBXh3IBmthnP6aXQA06RhmPBpNyyaVRuIEV+S
l+JHMyeqbbdIiIulyF0yqQirVwPE63y+RObwCexJbI7vvxAkS3qhtaluPmdHCZDY
Kui4w0RtJicZlAJedLCEcIKWT5Z58YCHAKvPkeE6Tf6sOHcGOnYVxZVfDADzinJD
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5148768241446785617627056897137475874
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa.brandcentral.warnermediagroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23987592323231401021845122514522204510526291410706984543665432266761991027668420901312795837876060801526086341241125575288740875697577308150905487218981744953273032397774964143474420001700160341863154739947641216092438561631169830206611191526285068412527631149763202998703464541335507441951975920838343908598007744225571991281816502855975136404295926036681316224948593807069569343818524660304342192091005860795685437510519163319052578480546630325895732298372674429034991335599916419951389306267398273691325599182444464667234913201205144681578163851934779513964762170296601475270396306098365515179051643213805587153841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d7f5a4fee7c15f95540038570afb3802fad371e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (176 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.brandcentral.warnermediagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.deliver.brandcentral.warnermediagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.download.brandcentral.warnermediagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa.brandcentral.warnermediagroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016b705ac28e0000040300473045022100a883e5c5407079adcd4473fb25b017e51fc06556a9eed02d0e0b8e19001fce4002206ad3f15b04324264e2d94420444f3a0c80e4f53a256b97a98fa58e17c1f59f2a0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016b705ac2e20000040300473045022100db990815649a699dffd904992ef749914fe7d8081d7521f2d012315db7bd2bc7022018ff4b090410f52d7d902d7d4b41277d39184774303b27076d95a99563aa3e68
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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