advault-web.dev-ads.wmedia.tech

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 01:70:8f:25:9f:d7:ea:17:44:9f:2d:e8:76:1d:62:fd was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=advault-web.dev-ads.wmedia.tech

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:70:8f:25:9f:d7:ea:17:44:9f:2d:e8:76:1d:62:fd
Serial Number (int): 1913668609425292859738175851628159741
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: ef:2e:12:e1:89:68:d6:67:a8:b1:f2:26:b6:6d:6e:3e:ed:ce:50:2c
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): ac:f7:03:b6:c6:b5:04:fa:31:07:47:af:96:ca:76:6c:54:18:2c:a9
Fingerprint (sha256): 62:52:bf:a7:0e:5b:77:e9:3c:1b:49:ae:9d:a9:e0:43:3b:87:ac:bf:3b:b0:e2:fe:a3:c5:1b:48:36:ba:42:7f

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate advault-web.dev-ads.wmedia.tech

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for advault-web.dev-ads.wmedia.tech

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advault-web.dev-ads.wmedia.tech
dev.advault.warnermedia.com

Other certificates including the domain name wmedia.tech

(limited to 100 certificates)
ecs-npm-mct.dev-ps.wmedia.tech
portal.dev-b2b.wmedia.tech
partnerhub.qa-b2b.wmedia.tech
blueprint.prod-ops.wmedia.tech
api-v2-http.poc-mediapoc.wmedia.tech
ecs-py-mct.dev-ps.wmedia.tech
portal.prod-b2b.wmedia.tech
morph-web-app.dev-ops.wmedia.tech
morph-job-definitions.qa-ops.wmedia.tech
api-ws.dev-ads.wmedia.tech
admin-deliver-portal.dev-b2b.wmedia.tech
admin-deliver-portal.qa-b2b.wmedia.tech
mstack.prod-ps.wmedia.tech
lasso-web-ui.prod-ops.wmedia.tech
*.qa-apptmwf.wmedia.tech
deliver-portal.dev-b2b.wmedia.tech
cmt.dev-esp.wmedia.tech
promowf.prod-apptmwf.int.wmedia.tech
morph-web-app.uat-ops.wmedia.tech
portal.uat-ops.wmedia.tech
greyhound-ecs-npm-mct.dev-ps.wmedia.tech
deliver-portal-api.dev-b2b.wmedia.tech
ecs-npm-mct.dev-ps.wmedia.tech
lasso-web-ui.dev-ops.wmedia.tech
auth.e1-esp.wmedia.tech
logs-preprod.wmedia.tech
logs.wmedia.tech
disco.qa-ops.wmedia.tech
blueprint.dev-ops.wmedia.tech
api-ws.uat-ads.wmedia.tech
lasso-web-ui.uat-ops.wmedia.tech
api.uat-ads.wmedia.tech
msc-common-docs.dev-ps.wmedia.tech
ecs-mvn-mct.dev-ps.wmedia.tech
morph.prod-ops.wmedia.tech
disco.uat-ops.wmedia.tech
ia-sdr.dev-vendor-iris.wmedia.tech
*.stg-apptmwf.int.wmedia.tech
disco.qa-ops.wmedia.tech
api.dev-esp.wmedia.tech
portal.prod-ops.wmedia.tech
morph-web-app.qa-ops.wmedia.tech
morph-job-definitions.dev-ops.wmedia.tech
admin-deliver-portal.qa-b2b.wmedia.tech
*.stg-apptmwf.wmedia.tech
polaris.uat-esp.wmedia.tech
*.dev-poc.wmedia.tech
deliver.prod-b2b.wmedia.tech
admin-deliver.prod-b2b.wmedia.tech
api.esp.wmedia.tech
lasso-web-ui.uat-ops.wmedia.tech
blueprint.prod-ops.wmedia.tech
api-ws.poc-mediapoc.wmedia.tech
ecs-npm-mct.dev-ps.wmedia.tech
mstack.dev-ps.wmedia.tech
aim.prod-esp.wmedia.tech
partnerhub.prod-b2b.wmedia.tech
lasso-web-ui.prod-ops.wmedia.tech
ecs-py-mct.dev-ps.wmedia.tech
portal.prod-ops.wmedia.tech
greyhound-ecs-mvn-mct.dev-ps.wmedia.tech
*.promowf.prod-apptmwf.wmedia.tech
greyhound-ecs-mvn-mct.dev-ps.wmedia.tech
greyhound-ecs-npm-mct.dev-ps.wmedia.tech
polaris.prod-esp.wmedia.tech
partnerhub.prod-b2b.wmedia.tech
cmt.prod-esp.wmedia.tech
lasso-web-ui.dev-ops.wmedia.tech
api.uat-esp.wmedia.tech
api-ws.dev-ads.wmedia.tech
portal.qa-b2b.wmedia.tech
pegasus-adhoc-workflow-ui.dev-apptmwf.wmedia.tech
admin-deliver-portal.dev-b2b.wmedia.tech
greyhound-ecs-npm-mct.dev-ps.wmedia.tech
disco.uat-ops.wmedia.tech
auth.qa-esp.wmedia.tech
api.prod-esp.wmedia.tech
api.poc-mediapoc.wmedia.tech
api.ads.wmedia.tech
advault-web.dev-ads.wmedia.tech
wm360.prod-b2b.wmedia.tech
api.int-ps.wmedia.tech
greyhound-ecs-mvn-mct.dev-ps.wmedia.tech
lasso-web-ui.prod-ops.wmedia.tech
blueprint.prod-ops.wmedia.tech
partnerhub.qa-b2b.wmedia.tech
api.poc-mediapoc.wmedia.tech
portal.prod-b2b.wmedia.tech
disco.dev-ops.wmedia.tech
auth.qa-esp.wmedia.tech
api.dev-ads.wmedia.tech
auth.base-esp.wmedia.tech
api.qa-ads.wmedia.tech
disco.dev-ops.wmedia.tech
greyhound-ecs-py-mct.dev-ps.wmedia.tech
deliver-admin-api.uat-b2b.wmedia.tech
api.qa-esp.wmedia.tech
portal.prod-ops.wmedia.tech
blueprint.prod-ops.wmedia.tech
auth.uat-esp.wmedia.tech

Certificate

The complete raw certificate details for advault-web.dev-ads.wmedia.tech in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5+0IILB4Ew+XnBav21h
6N5JqLVfyXPBkGrbLgQGptPzWhJy4SB2ckBTc/tvC7ZBG0xYUxdTAo1P48JrqlYM
lTpxdQEakHZNXDIOZxFEVoKAU1TVSYnU3Ct/I0AkD6vQsKCp4ju4ZYN91komovKs
/cF2fePUtq53bq2KFobbKkekAY/X+4wrTFdK/tbgyFxetxCdBcaOH3r5UXI0KM9S
1L3T3qEgYlVK9lVoVtj9eIRsDmQv2yvYdsdcPv24+4uMBQ/TLcQn5jERTLFPAhw+
gUms9auM2iQ2003a03fRAA16e1qJ9uB73PdUwdmfnqibWdsLSWv3tbe5Ht29eynm
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1913668609425292859738175851628159741
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'advault-web.dev-ads.wmedia.tech'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24190269039225981916823866569362947154431786401707220381984998553486289579824630416194085886120182237968922064940406908606348699525590758971790131346939201573899902920485834819253435135129043250780467746644655497937013777399511812625196124881841284410788217058593522921526808070653632442164837725118548027248614310327490630728754144553185636351685514536119207850034974905005910968013098226849375273845920755434445205846119330639341618599839158905161801449365171124572506223663613397587221877658740008229400310274284000846474322223160833636615234056371783482787001068721502187059500356696027122321831749957381163443737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef2e12e18968d667a8b1f226b66d6e3eedce502c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advault-web.dev-ads.wmedia.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.advault.warnermedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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