miamiapidev.homebox.com

- HOME BOX OFFICE, INC. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 12:ad:0c:d0:71:1f:89:7b:1a:f7:9a:db was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

HOME BOX OFFICE, INC.

Organization: HOME BOX OFFICE, INC.
State / Province: New York
Locality: New York
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 12:ad:0c:d0:71:1f:89:7b:1a:f7:9a:db
Serial Number (int): 5779934857049488863989832411
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 50:02:a2:ca:18:46:3b:9a:8d:f1:c0:47:e1:0f:1a:4f:dc:0d:49:a0
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 63:5b:08:ee:28:dc:e3:30:f9:17:0d:dc:c6:84:3b:db:90:03:4c:e9
Fingerprint (sha256): 47:4a:8f:a9:0c:8d:80:47:0c:93:63:3f:87:b0:c6:5f:e2:c7:6d:67:cc:1e:41:dc:13:19:c6:8e:45:46:66:8d

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate miamiapidev.homebox.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for miamiapidev.homebox.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

miamiapidev.homebox.com
miamiapidev.homeboxoffice.com

Other certificates including the domain name homebox.com

(limited to 100 certificates)
finesseptch.homebox.com
w12nysp01devt.hbo.homebox.com
hpw-dbs014972.hbo.homebox.com
finessetest.homebox.com
HBODRA.hbo.homebox.com
uxtdlcmapp12b.homebox.com
hyndwv-00nxs001.eng.homebox.com
o365.hbo.com
tidalp.homebox.com
hpw-app007012.hbo.homebox.com
hpw-app003727.hbo.homebox.com
sonar.homebox.com
uxoemapp15p.homebox.com
hpw-app014941.hbo.homebox.com
oauth.homebox.com
operaprod.homebox.com
puma.homebox.com
max-airflow.homebox.com
finreportsdev.homebox.com
panorama.homebox.com
prestoofferingloader.homebox.com
dropbox.homeboxoffice.com
vhtad01.homebox.com
hbonet.homebox.com
hyndlv-00tsg001.eng.homebox.com
hyndl-vca01-01v.eng.homebox.com
uxddtapp01d.homebox.com
hynpl-nxu01-01v.eng.homebox.com
betadigitallibraryservices.homebox.com
hpl-app002365.homebox.com
vdesktop.homeboxoffice.com
documentmgrd.homebox.com
veadc01.homebox.com
vdesktop.homeboxoffice.com
splunk-dev.homebox.com
hqw-app003758.hbo.homebox.com
finesseptch.homebox.com
toscaserverdev.hbo.homebox.com
hpw-dbs002617.hbo.homebox.com
hqw-web007608.hbo.homebox.com
tss.homebox.com
betadigitallibraryservices.homebox.com
apibeta.homeboxoffice.com
siabeta-api.homebox.com
finprodobi.homebox.com
vera-fcdv.homebox.com
mobile.homeboxoffice.com
stgdigitallibraryservices.homebox.com
betadigitallibraryservices.homebox.com
hynplv-00acux.eng.homebox.com
cappmpfix.homebox.com
documentmgrb.homebox.com
midasprod.homebox.com
tidalp.homebox.com
itsecsearch.hbo.homebox.com
edsapps-dev.homebox.com
mobile.homeboxoffice.com
operabeta2.homebox.com
hynpeh-00uag001.eng.homebox.com
hpw-app007662.hbo.homebox.com
hynplv-00lcb001.eng.homebox.com
uxcygsvsapp01d.homebox.com
finessesand.homebox.com
qlikview.homebox.com
w8nycmg01p.hbo.homebox.com
nyctjbapp01p.homebox.com
workdaynewhire.homeboxoffice.com
ebsoamd.homebox.com
vetad01.homebox.com
splunk-beta.homebox.com
hqw-web014923.hbo.homebox.com
vefsc02.homebox.com
tamdev-api.homebox.com
infoblox.homebox.com
hpw-app007023.hbo.homebox.com
mongo.prod-espv4.hbo.com
pam-api.homebox.com
tam-api.homebox.com
dlsia.homebox.com
w8nymp01app.hbo.homebox.com
inventory.eng.homebox.com
ebsoamb.homebox.com
finpfixobi.homebox.com
iris-dev.homebox.com
mscQAServerDev.hbo.homebox.com
uxtdlmstrdb12t.homebox.com
hdw-dbs003316.hbo.homebox.com
vera-fsdv.homebox.com
presto.homebox.com
git.homebox.com
hqw-dbs007647.hbo.homebox.com
stgdlsia.homebox.com
siem.homebox.com
git-dev.homebox.com
hynpeh-00uag001.eng.homebox.com
phantom.hbo.homebox.com
uxcygsvsapp01d.homebox.com
mscQAAgentJenkins.hbo.homebox.com
uxcroapp11d.homebox.com
finessefunc.homebox.com

Certificate

The complete raw certificate details for miamiapidev.homebox.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxbhoiAyVmFAWVx+6sp4
CbBOaAZZ/lRu9qmau/IPG92gSHHSeTTIxVq1VG1syY6QOcYlsiQoA9604RWLGXYF
3XhNdXTGUjDH8UilaWeTGkQcvVDLMRjojN3gPVvyq+WnlVD0LhEDEQwXgrJG7bAS
s5Rp9/XUwhasww+QoRsxKlqJGOMa9k5ySkJwHvFsQFG9F12T9Y3PUHzpRsgeaH+x
azMHYClksAPeFTNZJPQiq/jamxc/W8RFeeNnGGEuK5EVDEFw/LAy2wcyk4w+UguT
f5iZ7GEzgj6VODqyk21NoENlcCxn4R9okNDJa8nNrQ4oGTcoeVda280Amw80Cj7U
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5779934857049488863989832411
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-20 17:54:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-21 17:54:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HOME BOX OFFICE, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'miamiapidev.homebox.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26142612357029648151661420143003075514949788016261463414087062220164023372289378353636864863226870975071983130460323966088864498508155174907215992609158566292107442466265146701010375069447585858225366204171438358780635860618148767830627753167420272966106285031518762428254356591862584653685872325921035104895619466363434296648842067398211957392652698998917065295651113880721246559925592516776933388660592494051395522904330353270711155247952883516196207212319593944993471837654952591801282679872097267341106037392556428564000040501452405415357226579799128027742528051858365337274053373334781398042171514777029505373289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miamiapidev.homebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miamiapidev.homeboxoffice.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5002a2ca18463b9a8df1c047e10f1a4fdc0d49a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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