morph-web-app.qa-ops.wmedia.tech

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 07:b2:89:68:c0:3c:b8:e3:c3:d2:23:7d:05:19:3f:19 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=morph-web-app.qa-ops.wmedia.tech

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:b2:89:68:c0:3c:b8:e3:c3:d2:23:7d:05:19:3f:19
Serial Number (int): 10231611800652742742373531565357088537
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 4d:c1:e2:71:11:ba:b2:db:ac:92:15:b6:07:8d:73:b6:bf:cd:49:d7
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 64:14:d6:b2:7d:bb:4c:d4:f9:e2:e4:35:37:24:80:ac:4d:63:03:23
Fingerprint (sha256): 40:c2:4f:8f:43:13:12:63:60:df:55:47:8a:a1:e8:32:d2:33:d8:54:45:d7:b1:47:e6:d2:7c:7a:86:0d:d5:54

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate morph-web-app.qa-ops.wmedia.tech

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for morph-web-app.qa-ops.wmedia.tech

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

morph-web-app.qa-ops.wmedia.tech
qa.morph.warnermedia.com

Other certificates including the domain name wmedia.tech

(limited to 100 certificates)
ecs-npm-mct.dev-ps.wmedia.tech
portal.dev-b2b.wmedia.tech
partnerhub.qa-b2b.wmedia.tech
blueprint.prod-ops.wmedia.tech
api-v2-http.poc-mediapoc.wmedia.tech
ecs-py-mct.dev-ps.wmedia.tech
portal.prod-b2b.wmedia.tech
morph-web-app.dev-ops.wmedia.tech
morph-job-definitions.qa-ops.wmedia.tech
api-ws.dev-ads.wmedia.tech
admin-deliver-portal.dev-b2b.wmedia.tech
admin-deliver-portal.qa-b2b.wmedia.tech
mstack.prod-ps.wmedia.tech
lasso-web-ui.prod-ops.wmedia.tech
*.qa-apptmwf.wmedia.tech
deliver-portal.dev-b2b.wmedia.tech
cmt.dev-esp.wmedia.tech
promowf.prod-apptmwf.int.wmedia.tech
morph-web-app.uat-ops.wmedia.tech
portal.uat-ops.wmedia.tech
greyhound-ecs-npm-mct.dev-ps.wmedia.tech
deliver-portal-api.dev-b2b.wmedia.tech
ecs-npm-mct.dev-ps.wmedia.tech
lasso-web-ui.dev-ops.wmedia.tech
auth.e1-esp.wmedia.tech
logs-preprod.wmedia.tech
logs.wmedia.tech
disco.qa-ops.wmedia.tech
blueprint.dev-ops.wmedia.tech
api-ws.uat-ads.wmedia.tech
lasso-web-ui.uat-ops.wmedia.tech
api.uat-ads.wmedia.tech
msc-common-docs.dev-ps.wmedia.tech
ecs-mvn-mct.dev-ps.wmedia.tech
morph.prod-ops.wmedia.tech
disco.uat-ops.wmedia.tech
ia-sdr.dev-vendor-iris.wmedia.tech
*.stg-apptmwf.int.wmedia.tech
disco.qa-ops.wmedia.tech
api.dev-esp.wmedia.tech
portal.prod-ops.wmedia.tech
morph-web-app.qa-ops.wmedia.tech
morph-job-definitions.dev-ops.wmedia.tech
admin-deliver-portal.qa-b2b.wmedia.tech
*.stg-apptmwf.wmedia.tech
polaris.uat-esp.wmedia.tech
*.dev-poc.wmedia.tech
deliver.prod-b2b.wmedia.tech
admin-deliver.prod-b2b.wmedia.tech
api.esp.wmedia.tech
lasso-web-ui.uat-ops.wmedia.tech
blueprint.prod-ops.wmedia.tech
api-ws.poc-mediapoc.wmedia.tech
ecs-npm-mct.dev-ps.wmedia.tech
mstack.dev-ps.wmedia.tech
aim.prod-esp.wmedia.tech
partnerhub.prod-b2b.wmedia.tech
lasso-web-ui.prod-ops.wmedia.tech
ecs-py-mct.dev-ps.wmedia.tech
portal.prod-ops.wmedia.tech
greyhound-ecs-mvn-mct.dev-ps.wmedia.tech
*.promowf.prod-apptmwf.wmedia.tech
greyhound-ecs-mvn-mct.dev-ps.wmedia.tech
greyhound-ecs-npm-mct.dev-ps.wmedia.tech
polaris.prod-esp.wmedia.tech
partnerhub.prod-b2b.wmedia.tech
cmt.prod-esp.wmedia.tech
lasso-web-ui.dev-ops.wmedia.tech
api.uat-esp.wmedia.tech
api-ws.dev-ads.wmedia.tech
portal.qa-b2b.wmedia.tech
pegasus-adhoc-workflow-ui.dev-apptmwf.wmedia.tech
admin-deliver-portal.dev-b2b.wmedia.tech
greyhound-ecs-npm-mct.dev-ps.wmedia.tech
disco.uat-ops.wmedia.tech
auth.qa-esp.wmedia.tech
api.prod-esp.wmedia.tech
api.poc-mediapoc.wmedia.tech
api.ads.wmedia.tech
advault-web.dev-ads.wmedia.tech
wm360.prod-b2b.wmedia.tech
api.int-ps.wmedia.tech
greyhound-ecs-mvn-mct.dev-ps.wmedia.tech
lasso-web-ui.prod-ops.wmedia.tech
blueprint.prod-ops.wmedia.tech
partnerhub.qa-b2b.wmedia.tech
api.poc-mediapoc.wmedia.tech
portal.prod-b2b.wmedia.tech
disco.dev-ops.wmedia.tech
auth.qa-esp.wmedia.tech
api.dev-ads.wmedia.tech
auth.base-esp.wmedia.tech
api.qa-ads.wmedia.tech
disco.dev-ops.wmedia.tech
greyhound-ecs-py-mct.dev-ps.wmedia.tech
deliver-admin-api.uat-b2b.wmedia.tech
api.qa-esp.wmedia.tech
portal.prod-ops.wmedia.tech
blueprint.prod-ops.wmedia.tech
auth.uat-esp.wmedia.tech

Certificate

The complete raw certificate details for morph-web-app.qa-ops.wmedia.tech in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVhduPsc4hXliR9JtcMO
FaKpoojMxAiX64XVXmGtM1GrpYHVXoUozcq2+R/SNpGYY5qzrzLfz6UlzcXRooR+
mS0pKb1pWe3/INjv1Ws8P4Ei/3gN0k1oQJgpO9RX4ljqd8gXuJ+TLbRi0lvWifaG
znJ7eQEaiDvK8lii9uZn/l7w0YWif7P4BLXIBIu9eSY3H0CcnPG8zal5u3a2rlrN
sx3MZnAycqjFXgFtRwqJq26HaxHMW2jruXFeWulG2R40Wcb5NICg/p1hknHfL5fo
LT87F+VIcqJoQRcZpaDWof+CPOFbKLNvICMUT70lniSe1G2aKBqyV9PyfywJWLd7
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10231611800652742742373531565357088537
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'morph-web-app.qa-ops.wmedia.tech'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22387754928853878139301467351575750125964818574850496191330059905582445802911120849124872633434687363201867465990278761361582470093110277537474295514614373514425317911437506098787559645660643742535798054876085685532466415033707005787970100786218850435826280298049295485427350930897737938854660297345126285480569305426306613788065013400302695309747483356678671608207236606716961429160169804278972645480111080835336835399875606156433050198026152027590516616202252398653278901895266570554332986059891336931891601935213014112475576055934138985666593679345587978585148198782171335031578741555369951771278639270413485964143
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4dc1e27111bab2dbac9215b6078d73b6bfcd49d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morph-web-app.qa-ops.wmedia.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.morph.warnermedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018456ebf2bf000004030046304402202be6924e71d21e275a2cd06dee46bba6e36ea7a19612511a4d6b481314cfdc7b0220554f2b3c720ac58c96158368b28ac3a344c0d51ed834e2743742e6e548f60f27007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000018456ebf2b00000040300473045022100d4d6cf0e34cb6ae42d32d4e6648ec4b1aa6066d475b1c4d3a4a10e19d3e2cc2102202b672bce03dbf100756f0138b2dc59bec8d95c62c11a078cfe4b227ff89fdcba007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018456ebf2800000040300483046022100e18c439b53d74ef299676046f3d2f66434bd888f2bbe3fcc5725ab574528b819022100fba7c60f51da8e852cd18af3586da7df0a4510ac89e44fe838966d0aa963d1fa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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