lsd-ref-56m.gslb.vgtf.net

- TURNER BROADCASTING SYSTEM, INC. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 58:a7:24:89:39:13:0b:cf:32:0c:61:8e was issued on by GlobalSign nv-sa.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

TURNER BROADCASTING SYSTEM, INC.

Organization: TURNER BROADCASTING SYSTEM, INC.
State / Province: Georgia
Locality: Atlanta
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 58:a7:24:89:39:13:0b:cf:32:0c:61:8e
Serial Number (int): 27436744012663974394638131598
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: e4:3e:56:d1:2d:97:9a:15:eb:4f:28:a0:16:4c:a4:cc:19:87:28:fb
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 0a:e5:9c:ba:de:99:cc:77:90:78:c2:6b:4f:1f:89:df:77:33:00:e3
Fingerprint (sha256): a9:00:99:80:62:f5:ba:05:c8:5a:0c:c4:76:d1:1f:45:03:c4:5e:a5:8e:0b:07:7b:05:16:d9:f8:5e:fd:d5:3c

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate lsd-ref-56m.gslb.vgtf.net

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lsd-ref-56m.gslb.vgtf.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lsd-ref-56m.gslb.vgtf.net
dataref.adultswim.com
dataref.cartoonnetwork.com
dataref.cnn.com
dataref.eleague.com
dataref.nba.com
dataref.ncaa.com
dataref.tbs.com
dataref.tcm.com
dataref.tntdrama.com
dataref.trutv.com

Other certificates including the domain name vgtf.net

(limited to 100 certificates)
lsd-prod-56m.gslb.vgtf.net
artifacts.vgtf.net
chef.vgtf.net
www.turner.com
refpaws.acr.vgtf.net
www.turner.com
lsd-int-56m.gslb.vgtf.net
www.turner.com
token.vgtf.net
lsd-ref-56m.gslb.vgtf.net
reftoken.aspen.vgtf.net
www.turner.com
cnn-ref-cms3-service-proxy.56m.vgtf.net
www.turner.com
www.turner.com
chef.56m.vgtf.net
www.turner.com
cnn-ref-cms3-service-proxy.56m.vgtf.net
www.turner.com
*.s.lvo.services.vgtf.net
token.ngtv.io
www.turner.com
artifacts.vgtf.net
lsd-int-56m.gslb.vgtf.net
vgtf.net
refpartner.token.vgtf.net
ospoc.dev.vgtf.net
reftoken.aspen.vgtf.net
ospoc.dev.vgtf.net
www.turner.com
lsd-prod-56m.gslb.vgtf.net
www.turner.com
chef.56m.vgtf.net
aspen.ngtv.io
www.turner.com
www.turner.com
livedataint.56m.dmtio.net
www.turner.com
livedataint.56m.dmtio.net
*.api.56m.vgtf.net
*.s.lvo.services.vgtf.net
reftoken.aspen.vgtf.net
www.turner.com
api.vgtf.net
livedataint.56m.dmtio.net
lsd-qa-56m.gslb.vgtf.net
admin.vgtf.net
www.turner.com
*.api.lax.vgtf.net
partner.token.vgtf.net
chef.56m.vgtf.net
artifacts.api.56m.vgtf.net
lsd-ref-56m.gslb.vgtf.net
*.mon.vgtf.net
token.vgtf.net
www.turner.com
livedataint.56m.dmtio.net
admin.vgtf.net
token.vgtf.net
www.turner.com
www.turner.com
www.turner.com
www.turner.com
*.s.lvo.services.vgtf.net
lsd-qa-56m.gslb.vgtf.net
chef.56m.vgtf.net
livedataint.56m.dmtio.net
vgtf.net
www.turner.com
artifacts.vgtf.net
lsd-int-56m.gslb.vgtf.net
www.turner.com

Certificate

The complete raw certificate details for lsd-ref-56m.gslb.vgtf.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVuis0EWm0bWAdYj0AcZ
oT4l0IUzRUThkR8LS7qEYBv7ehx1xblaU0NffGg4Qzsy9RTblWBIvlyI9ggAoR+T
aW1in4yMjaU7XOTRjTM1b8UuICwSTaCaRRqByn2hWl5LAl/LtcuD69Rzg6KSxlKv
bahkfPmwDC0rqdtJ2gMvx+FPJpYfaiYilPMHb2HXU9Ll4skmnqdD6emQ8Ud6O24n
re47LldyYXq23omiy4IejbJ/yrN0ozUtVwANrFDYrpP90WZa0Ix1UCqihqwsRt4m
0i3Ti4AtK579ssOV3+AgywJyRQPCphoZz03kPB4ZO0/fi9IMhYplEOp+mXzHITI1
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 27436744012663974394638131598
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-02 20:21:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-03 20:21:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atlanta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TURNER BROADCASTING SYSTEM, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lsd-ref-56m.gslb.vgtf.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22389367151713621601846346219501272336164697550173486140845194275135327740571719359311082029575990473023890606487979883198520459349036193221323784859664356028347814601558443588212592099504252363052288967519322169522986087191112331491761439302120342301475234108882403617341861636666246023162195595080610575138222074684204873488362562267688731036532151760258386947548172007314095764022445187375339335301941011984758570225706588751473241769441336769887630315075726387808333402094847517690517632061711009981422594557577413290732937104790222888820051214051845772260223091257174633728454528230332337684456498651418904900877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (229 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsd-ref-56m.gslb.vgtf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataref.adultswim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataref.cartoonnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataref.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataref.eleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataref.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataref.ncaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataref.tbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataref.tcm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataref.tntdrama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataref.trutv.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e43e56d12d979a15eb4f28a0164ca4cc198728fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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