pptrap.warnermediagroup.com

- Warner Media, LLC -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 16:e6:03:5d:e7:b1:35:27:aa:a7:b7:df was issued on by GlobalSign nv-sa.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Warner Media, LLC

Organization: Warner Media, LLC
State / Province: New York
Locality: New York
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 16:e6:03:5d:e7:b1:35:27:aa:a7:b7:df
Serial Number (int): 7086739053922787424173799391
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 47:b7:d9:1f:8e:f1:48:85:ba:99:81:42:89:d7:5e:d9:cd:f4:0c:5d
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): ee:47:a6:5a:95:c0:42:1b:2a:bd:c9:5b:c4:2f:4e:0f:6a:35:98:79
Fingerprint (sha256): 47:d0:cd:a8:23:cf:5c:b3:da:19:87:8d:54:d4:71:a3:cc:f7:ef:f6:4b:32:7e:36:19:a7:37:ca:66:25:3c:57

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate pptrap.warnermediagroup.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pptrap.warnermediagroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pptrap.warnermediagroup.com
cpa-app007446.ad.corp.aoltw.net
cpa-app007447.ad.corp.aoltw.net

Other certificates including the domain name warnermediagroup.com

(limited to 100 certificates)
partnerhub.qa-b2b.wmedia.tech
turner.com
touchpoint.twi.com
www.warnermediagroup.com
turner.com
*.brandcenter.warnermediagroup.com
warnermedia.com
*.warnermedia.com
touchpoint.warnermediagroup.com
t-rexstg.warnermediagroup.com
t-rexstg.wbd.com
t-rexdev.warnermediagroup.com
turner.com
warnermediagroup.com
*.deliver.warnermediagroup.com
pressroom.warnermediagroup.com
turner.com
ref.deliver.warnermediagroup.com
t-rex.warnermediagroup.com
*.warnermedia.com
wmgp-expc3-p.warnerbros.com
turner.com
wmgp-expe3-p.warnerbros.com
careers.warnermediagroup.com
turner.com
turner.com
*.cso.warnermedia.com
admin-deliver-portal.dev-b2b.wmedia.tech
*.warnermedia.com
turner.com
touchpoint.twi.com
admin-deliver-portal.qa-b2b.wmedia.tech
*.warnermedia.com
sspm.warnermediagroup.com
admin.cartoonnetwork.asia
admin.cartoonnetwork.asia
deliver.brandcenter.warnermediagroup.com
t-rexstg.warnermediagroup.com
hboassets.warnermediagroup.com
touchpoint.warnermediagroup.com
*.wbd.com
deliver.brandcenter.warnermediagroup.com
brandcenter.warnermediagroup.com
www.warnermediagroup.com
*.warnermedia.com
turner.com
warnerbros.com
turner.com
pressroom.warnermediagroup.com
*.wbd.com
turner.com
besafe.warnermediagroup.com
touchpoint.twi.com
admin.cartoonnetwork.asia
test.aws-splunk.cso.warnermediagroup.com
t-rex.warnermediagroup.com
touchpoint.warnermediagroup.com
admin.cartoonnetwork.asia
adminqa.timewarner.com
turner.com
appcentral.warnermediagroup.com
*.aws-splunk.cso.warnermediagroup.com
ablink.mktgmail.warnermediagroup.com
splunk-hec-prod.splunk-hec.aws-splunk.cso.warnermediagroup.com
disco.qa-ops.wmedia.tech
admin.cartoonnetwork.asia
warnermediagroup.tech
turner.com
qa.brandcentral.warnermediagroup.com
*.brandcenter.warnermediagroup.com
bulkingest.dev-fuse.deliver.warnermediagroup.com
turner.com
*.cso.warnermedia.com
hannibal-fe.warnermediagroup.com
turner.com
turner.com
admin.cartoonnetwork.asia
admin.cartoonnetwork.asia
*.warnermedia.com
warnermediagroup.com
turner.com
careers.warnermediagroup.com
turner.com
besafe.warnermedia.com
aws-splunk.cso.warnermediagroup.com
pressroom.warnermediagroup.com
servicesqa.warnermediagroup.com
brandcentral.warnermediagroup.com
*.doc.warnermediagroup.com
bulkingest.ref-assess.deliver.warnermediagroup.com
warnermediagroup.com
appcentral.warnermediagroup.com
disco.uat-ops.wmedia.tech
warnermedia.com
music.warnermediagroup.com
warnerbros.com
qa.brandcentral.warnermediagroup.com
disco.qa-ops.wmedia.tech
www.warnermediagroup.com
*.warnermedia.com

Certificate

The complete raw certificate details for pptrap.warnermediagroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15NhpC3YV7Jqs5Rj9Sy+
qmXGgslIXZLTc2R2jnAs2ywTNWBt3lFh3fa/IVIeFMBJ7HMRmtRkCWUp0RhyrJVS
5Q8irM6ysTD6fTvCuch8Hojo62FEDeQUh4nSmBeIXZw6fDiVUXwO2gbYFCuj8LyJ
9yKzsWtAkEBQexi4Yt8trVYQvat8ToOu0tTSImtuYyIRrLxH3C1pNwsOrIhu3mAu
rP1MqNarfEnRrIxTrF9B+D/ClFuGq5nkUcyWlpQCGIZx4ev9IkTDdFd5SYDscw5X
C5RPiJCKPfB+3+rORISlF7Z7hadRzWSk2nb32N+OR3pDZOh4KfLg2YC1Xv/8Ixxx
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7086739053922787424173799391
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-21 22:01:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-22 22:01:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Warner Media, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pptrap.warnermediagroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27213912050365374712927144397677666030499831971793052483031035646431755190193322743918188899360422831541283220478833664374899137468038597242234109423108456947819059636239497498970569953715917982199680672272351843417376241351304230864665260022273840172700429861003729545844868947349456031247923929355278570561807701647456342240828377671325764896507737775284442895849409532500767766405663992483527474962182642113457958256222211339038557085068984235735286538502925035931803667498542679810939830781530177635337963053065347527330384618889222231480569935111555189531918097361762771609072797095439371660347902211363052483033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pptrap.warnermediagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpa-app007446.ad.corp.aoltw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpa-app007447.ad.corp.aoltw.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							47b7d91f8ef14885ba99814289d75ed9cdf40c5d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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