spw-app000019.twi.com

- Warner Media, LLC -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 3a:fa:1e:ee:9e:91:f6:41:09:9f:0a:8b was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Warner Media, LLC

Organization: Warner Media, LLC
State / Province: New York
Locality: New York
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 3a:fa:1e:ee:9e:91:f6:41:09:9f:0a:8b
Serial Number (int): 18252508097287431400753924747
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: f0:ff:cf:b2:12:6d:d5:3c:9a:3e:be:f0:52:e7:8f:48:c2:67:5c:d3
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 59:13:37:ea:20:5f:c4:8e:51:75:a1:92:b2:39:68:a4:09:ba:83:a9
Fingerprint (sha256): 34:c0:0f:a2:21:42:f2:09:7b:f9:e0:4f:c3:e9:26:4c:cd:62:45:0d:12:24:d0:33:41:85:aa:3e:9a:9a:32:2e

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate spw-app000019.twi.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spw-app000019.twi.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

spw-app000019.twi.com

Other certificates including the domain name twi.com

(limited to 100 certificates)
twsaml.stage.twi.com
desktop.timewarner.com
touchpoint.twi.com
hipaa.dev.twi.com
appdef.stage.twi.com
crestronfusion.stage.twi.com
warnermedia.com
ars.twi.com
intpostings.twi.com
appdef.stage.twi.com
twinfamm.twi.com
cprhistory.dev.twi.com
compplanning.stage.twi.com
test09.twi.com
twec.dev.twi.com
touchpoint.stage.twi.com
twia.stage.twi.com
warnermediagroup.com
hyvcenterdr.twi.com
tableau-saml.dev.twi.com
timewarner.com
wmbi.stage.twi.com
timewarnerfitnation.com
twservices.timewarner.com
diversityadmin.dev.twi.com
webtms.stage.twi.com
spdc.twi.com
webtms.timewarner.com
twia.twi.com
touchpoint.twi.com
eisna.ad.corp.aoltw.net
hrdcservices.twi.com
iowa.timewarner.com
rmis.dev.twi.com
appcentral.dev.twi.com
lxonline.stage.twi.com
rmis.dev.twi.com
webtms.timewarner.com
appsmtp.twi.com
wm-msi.twi.com
financeportal.twi.com
*.wbd.com
hyta-18-msi1.twi.com
twauthservice.dev.twi.com
twec.dev.twi.com
claimstracking.twi.com
dxprocessingdr.twi.com
appviewx-test3.twi.com
mtk.twi.com
longviewact.twi.com
ad-ldap.twi.com
scom-twprod.twi.com
warnerbros.com
eisna.dev.twi.com
appdef.stage.twi.com
ars.twi.com
hrdc.twi.com
bmt.stage.twi.com
oneworld.twi.com
touchpoint.twi.com
twequity.dev.twi.com
cprhistory.dev.twi.com
twinfaics1.twi.com
login.timewarner.com
hrdc.twi.com
knoahsoftrecording.twi.com
twbotraining.twi.com
grc.twi.com
hrdcservicescorpclient.stage.twi.com
twlogin.twi.com
ad-ldap.dev.twi.com
webtms.dev.twi.com
hyvcenterprod.twi.com
twxea.stage.twi.com
cqw-dbs001518.stage.twi.com
twxea.dev.twi.com
wbbsp.dev.twi.com
hrdcservices.twi.com
CPW-DBS012273.twi.com
twsaml.stage.twi.com
deferredcomp.twi.com
vcenter.twi.com
certprint.twi.com
cqw-dbs001518.stage.twi.com
tableau-saml.twi.com
eastgate.twi.com
webtms.stage.twi.com
support.twi.com
ars.stage.twi.com
spw-app000019.twi.com
southgate.twi.com
longviewact.twi.com
twsecurity.stage.twi.com
warnermediagroup.com
touchpoint.dev.twi.com
twsaml.stage.twi.com
servicesqa.warnermediagroup.com
appdef.twi.com
twcptools.twi.com
warnermediagroup.com

Certificate

The complete raw certificate details for spw-app000019.twi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LZpgs5oshXWu8qE0LtT
a9rfy0wH19JkZcQpFFkZVjr73lJ0bhkoB00IZwuiTsW164TtsUpZBqj5YVC6yiel
oh6r9hcQU3nzyI1jlU2xkVPCNbtWMu6qyp+j5I3LTo3Rf7qk17YaPszy7+X303+7
kFWvd8aGOvPbBrD7OBXCJjyaBH3nhob0h0XPCCMsqRjORhIG6hVlLa5Er0+skoen
z2RUpdMybjXnCkuz5+vnD0M15TFGiHf3sq9m/5UiKzvZfn43jJuKwLGi6pKo1CIl
vOwiEo+qzE6d6Vu0XUHeXg1cfWvYrkyuiviuEAkxbUabEhmbWXMMF13gZb8Mods7
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18252508097287431400753924747
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-28 19:36:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-28 19:36:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Warner Media, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spw-app000019.twi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28367331097156397231009314253894656474343239557089170176552611951624403889984113668874009008848939809368304356441911595812349291421087175731694812869728672953159508935319547044990335336790592072822451323788534128722966692168511237040103752882333213603266842591304878774089425130128727842203871645282118320436121794575471858923719926544406491283717638251414513333469924131369828290925304013172269860674877134046952802186931416568518620041852917561252242344008279890258872431612065062703987706348968057131692435363376918297857519406495375598615487767010428649812085454347259101827696060827376827600269683278664963931011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spw-app000019.twi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f0ffcfb2126dd53c9a3ebef052e78f48c2675cd3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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