auth.dev.idv.warnermediaprivacy.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:dd:d6:67:62:0a:3d:7f:e2:a0:10:17:5c:59:3b:12 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=auth.dev.idv.warnermediaprivacy.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:dd:d6:67:62:0a:3d:7f:e2:a0:10:17:5c:59:3b:12
Serial Number (int): 17102582181653018451558406636535626514
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 82:54:aa:3f:43:c1:a0:0c:fe:33:15:1a:ec:3a:3c:5e:56:c5:1b:4d
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 18:11:95:7e:b6:bb:24:0e:c3:0f:5a:cd:36:3e:66:d6:21:52:ff:46
Fingerprint (sha256): 4b:6a:d1:35:c6:74:b7:bc:13:69:a9:fe:c2:d3:db:72:5b:a1:00:8b:08:81:4e:d2:21:90:35:81:46:ef:60:18

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate auth.dev.idv.warnermediaprivacy.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for auth.dev.idv.warnermediaprivacy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.dev.idv.warnermediaprivacy.com
www.auth.dev.idv.warnermediaprivacy.com

Other certificates including the domain name warnermediaprivacy.com

(limited to 100 certificates)
qa.content.privacycenter.wb.com
cartoonito.co.uk
dev.idv.warnermediaprivacy.com
auth.dev.idv.warnermediaprivacy.com
sit.consent.api.warnermediaprivacy.com
qa.consentadmin.api.warnermediaprivacy.com
sni.cloudflaressl.com
sit.consent.api.warnermediaprivacy.com
nonprod.consentadmin.api.warnermediaprivacy.com
sit.consentadmin.api.warnermediaprivacy.com
stage.warnermediaprivacy.com
sni.cloudflaressl.com
api.dev.idv.warnermediaprivacy.com
idv.warnermediaprivacy.com
warnermediaprivacy.com
warnermediaprivacy.com
sni.cloudflaressl.com
api.idv.warnermediaprivacy.com
cartoonito.co.uk
api.dev.idv.warnermediaprivacy.com
api.dev.idv.warnermediaprivacy.com
stage.warnermediaprivacy.com
sni.cloudflaressl.com
sit.consentadmin.api.warnermediaprivacy.com
sni.cloudflaressl.com
stage.warnermediaprivacy.com
sit.consentadmin.api.warnermediaprivacy.com
idv.warnermediaprivacy.com
sit.consent.api.warnermediaprivacy.com
api.idv.warnermediaprivacy.com
www.warnermediaprivacy.com
sni.cloudflaressl.com
cartoonito.co.uk
consent.api.warnermediaprivacy.com
stage.privacy.wizardingworld.com
consent.api.warnermediaprivacy.com
warnermediaprivacy.com
stage.warnermediaprivacy.com
qa.consentadmin.api.warnermediaprivacy.com
sni.cloudflaressl.com
api.dev.idv.warnermediaprivacy.com
dev.idv.warnermediaprivacy.com
sit.consent.api.warnermediaprivacy.com
dev.consentadmin.api.warnermediaprivacy.com
dev.warnermediaprivacy.com
sit.consentadmin.api.warnermediaprivacy.com
stage.warnermediaprivacy.com
qa.warnermediaprivacy.com
sni.cloudflaressl.com
sni.cloudflaressl.com
auth.dev.idv.warnermediaprivacy.com
sni.cloudflaressl.com
stage.warnermediaprivacy.com
Stage.privacycenter.wb.com
dev.warnermediaprivacy.com
idv.warnermediaprivacy.com
sit.consentadmin.api.warnermediaprivacy.com
sni.cloudflaressl.com
dev.consent.api.warnermediaprivacy.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
dev.consent.api.warnermediaprivacy.com
stage.warnermediaprivacy.com
auth.dev.idv.warnermediaprivacy.com
dev.warnermediaprivacy.com
consentadmin.api.warnermediaprivacy.com
sit.consent.api.warnermediaprivacy.com
sni.cloudflaressl.com
sit.consent.api.warnermediaprivacy.com
sni.cloudflaressl.com
dev.idv.warnermediaprivacy.com
idv.warnermediaprivacy.com
sni.cloudflaressl.com
stage.warnermediaprivacy.com
sni.cloudflaressl.com
sit.consentadmin.api.warnermediaprivacy.com
www.warnermediaprivacy.com
cartoonito.co.uk
sit.consentadmin.api.warnermediaprivacy.com
consent.api.warnermediaprivacy.com
dev.warnermediaprivacy.com
dev.consent.api.warnermediaprivacy.com
qa.consent.api.warnermediaprivacy.com
idv.warnermediaprivacy.com
consent.api.warnermediaprivacy.com
dev.consent.api.warnermediaprivacy.com
auth.idv.warnermediaprivacy.com
stage.warnermediaprivacy.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sit.consentadmin.api.warnermediaprivacy.com
dev.consent.api.warnermediaprivacy.com
sit.consent.api.warnermediaprivacy.com
sni.cloudflaressl.com
dev.warnermediaprivacy.com
sit.consent.api.warnermediaprivacy.com
auth.idv.warnermediaprivacy.com
stage.warnermediaprivacy.com

Certificate

The complete raw certificate details for auth.dev.idv.warnermediaprivacy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2hb0S5FRa7p4gKYEFBR
aGq+Putn62banf1y9AgEc1wfqZazjsVPBy6L3zMCS8AXEacCt5YltUCN1hJQm9Nc
N9bG0nqLoYK0CKeKIQI2y8c7EjJBOnLSrcP+8ZYNtV55IsonxaEUO4kEtDi0RuFg
2tRYjsXuCVtOg3Zx4oqDI0LX2yPHTdFRNebnBtGsBo2h49BrXGjIjlk2E55J6aTw
6LAbsXe1RsY8RwuLlqMAF0JqVgzpiYXnOwuuQ9A4I88DICJmaWDptHW5D2j8IiBL
jILFoPCs2AxpD2sUV7Ju1v2TxPYav6dYagp/SJE3L3v7faY14pA87qO0bc3Sjq21
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17102582181653018451558406636535626514
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-21 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auth.dev.idv.warnermediaprivacy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25172883861769192739983087967830733635029127223649746379792902664221616616457126442327510439888550534306405241235089897378004487736745146502205436110609116361599443493242187081123225234230282622732161256824862988764323228464602493792028126131072342152904286114147195221508942893804492286330422059349581682963070420316858637972158575119139430054673563581255817228995724342948746566653663060201389771254195121337295456860559666309565868121554421501807408693484556428318852549207420101820945371607317753303640782817445382158691952571938697500422609571183810427317969336737631419894738200682462154029457175963463561622827
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8254aa3f43c1a00cfe33151aec3a3c5e56c51b4d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.dev.idv.warnermediaprivacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auth.dev.idv.warnermediaprivacy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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