iowa.timewarner.com

- Time Warner, Inc. -

Issued by AOL Member CA

About this certificate

This digital certificate with serial number 04:2c:1e:fe was issued on by America Online Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Time Warner, Inc.

Organization: Time Warner, Inc.
Organization unit: Corp - Global Technology Services
State / Province: New York
Locality: New York
Country: US

America Online Inc.

Organization: America Online Inc.
State / Province: Virginia
Locality: Dulles
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2c:1e:fe
Serial Number (int): 70000382
Serial Number lenght: 27 bits, 4 octets

SubjectKeyId: 65:04:a2:a9:25:97:73:48:74:65:09:04:b1:63:d8:83:6c:fb:cc:ac
AuthorityKeyId: 61:a6:99:6d:24:9f:0e:11:88:e6:39:e0:fe:74:d1:05:69:52:a9:43

Fingerprint (sha1): 67:d0:a4:19:6a:81:46:cf:c8:52:3b:92:ea:62:2d:de:de:06:7a:51
Fingerprint (sha256): 7c:c8:7f:78:2d:73:1a:9e:90:1f:24:7e:13:c3:4a:05:9f:2b:0f:f3:a0:11:77:c9:fc:78:13:01:6a:a4:e8:1e


Revocation information

OCSP Server: http://ocsp.web.aol.com/ocsp
CRL Distribution Point: http://crl.aol.com/AOLMSPKI/aolServerCert.crl

Check the revocation status for certificate iowa.timewarner.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for iowa.timewarner.com

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

iowa.timewarner.com
iowa.twi.com

Other certificates including the domain name timewarner.com

(limited to 100 certificates)
desktop.timewarner.com
changeauditor.timewarner.com
travelandexpense.timewarner.com
desktop.timewarner.com
www.warnermediagroup.com
warnermedia.com
seg.timewarner.com
stransferdev.timewarner.com
mytwqa.timewarner.com
mfa.timewarner.com
warnermediagroup.com
desktopwestdev.timewarner.com
mfa.timewarner.com
timewarner.com
casperdev.timewarner.com
careers.warnermediagroup.com
twservices.timewarner.com
webtms.timewarner.com
touchpoint.twi.com
sspm.warnermediagroup.com
wbapp.timewarner.com
iowa.timewarner.com
desktop.timewarner.com
webtms.timewarner.com
appdev.timewarner.com
touchpoint.warnermediagroup.com
stransfer.timewarner.com
www.warnermediagroup.com
*.warnermedia.com
Login.timewarner.com
besafe.warnermediagroup.com
touchpoint.twi.com
seg.timewarner.com
app.timewarner.com
login.timewarner.com
touchpoint.warnermediagroup.com
adminqa.timewarner.com
appvol.timewarner.com
login.timewarner.com
app.timewarner.com
fb.timewarner.com
warnermediagroup.tech
itsecsearch.timewarner.com
desktop.timewarner.com
*.warnermedia.com
warnermediagroup.com
careers.warnermediagroup.com
besafe.warnermedia.com
servicesqa.warnermediagroup.com
warnermediagroup.com
besafe.timewarner.com
warnermedia.com
px.timewarner.com
updates.timewarner.com
www.warnermediagroup.com
*.warnermedia.com
warnermedia.com
login.warnermediagroup.com
stransferwest.timewarner.com
itsecsearch.timewarner.com
stransfereast.timewarner.com
sspm.timewarner.com
appdev.timewarner.com
desktopwest.timewarner.com
desktop.timewarner.com
appdev.timewarner.com
*.warnermedia.com
dxprocessing.timewarner.com
warnermediagroup.com
careers.timewarner.com
touchpoint.stage.twi.com
warnermediagroup.com
myoffice.timewarner.com
caspereis.timewarner.com
besafe.timewarner.com
travelandexpense.timewarner.com
twservices.timewarner.com
stransfer.timewarner.com
desktopdr.timewarner.com
drupal.timewarner.com
sspm.timewarner.com
loginqa.warnermediagroup.com
warnermediagroup.com
dxprocessingstage.timewarner.com
dxprocessing.timewarner.com
communications.timewarner.com
*.idea.timewarner.com
communications.timewarner.com
warnermedia.com
twservices.timewarner.com
timewarner.com
contentprotection.timewarner.com
iowa.timewarner.com
loginqa.timewarner.com
warnermediagroup.com
facilities.timewarner.com
careers.timewarner.com
sspm.timewarner.com
desktop.timewarner.com
mfa.timewarner.com

Certificate

The complete raw certificate details for iowa.timewarner.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCzlrT/1q8N0jbN0TILlHvPlwNQ
dqL6SeFmJLPgH/fsUd8J04lsWZsRSrVJUE+NNzexn/Po6llwKmrM0nUKMzYRTSev
9yFr2fObzwKF8L+srdZVpdqFcaK7nwJV7bRaj5nNXLr87nGxQMHgMnbueJRXXR4d
4JkzdAc8C8gqa8DX5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 70000382
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dulles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'America Online Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AOL Member CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2009-10-14 14:42:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-10-14 14:42:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Time Warner, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corp - Global Technology Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iowa.timewarner.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 126111473393184362441598759060697598564875317335770245048419100943653051584416420791814127209128510839003296492334289478856331600651505369317999699337383875729556678410379427398535051923745043966153370602947051819015860135246435188714823165457067073119325848370074704420275050612006015381530357844025007986661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 61a6996d249f0e1188e639e0fe74d1056952a943
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.aol.com/AOLMSPKI/aolServerCert.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.web.aol.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowa.timewarner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowa.twi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.1066.1.1000.1.0.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://pki-info.aol.com/AOLMSPKI/index.html'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6504a2a92597734874650904b163d8836cfbccac
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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