clt.shaken.spectrum.com

- Charter Communications Operating, LLC -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 01:12:1e:45:c9:43:96:c2:c6:4e:05:f2:ab:14:92:9c was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Charter Communications Operating, LLC

Organization: Charter Communications Operating, LLC
State / Province: Missouri
Locality: St. Louis
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:12:1e:45:c9:43:96:c2:c6:4e:05:f2:ab:14:92:9c
Serial Number (int): 1423303340558062756504053288602473116
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 54:3a:88:69:71:fe:85:c9:8a:26:b1:b9:42:7a:21:22:61:3e:b7:07
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 95:c9:9a:a8:28:bd:d2:bd:2e:c9:d1:81:b7:dd:33:17:d3:dc:00:b5
Fingerprint (sha256): 00:6f:14:b5:1d:af:4f:ff:71:48:a9:b8:aa:de:3c:8a:e4:8b:a1:42:b2:5f:77:37:53:eb:8f:4b:ba:1d:d3:34

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertSHA2SecureServerCA.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertSHA2SecureServerCA.crl

Check the revocation status for certificate clt.shaken.spectrum.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clt.shaken.spectrum.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clt.shaken.spectrum.com
shaken.spectrum.com

Other certificates including the domain name spectrum.com

(limited to 100 certificates)
172-220-186-061.res.spectrum.com
images.enterprise.spectrum.com
075-135-205-231.res.spectrum.com
clt.shaken.spectrum.com
szervizek.carglass.hu
newsroom.spectrum.com
spectrumenterprise.com
035-130-104-239.res.spectrum.com
improvements.spectrum.com
173-042-002-021.biz.spectrum.com
mail.pelletron.com
047-049-040-002.biz.spectrum.com
chtr-cos-icoms1t.spectrum.com
clrp.spectrum.com
173-042-002-021.biz.spectrum.com
plans.spectrum.com
notices.spectrum.com
050-089-217-187.res.spectrum.com
reportspam.spectrum.com
096-035-155-045.biz.spectrum.com
*.email.spectrum.com
sanalytics.enterprise.spectrum.com
buy.spectrummobile.com
jobs.spectrum.com
174-045-022-013.res.spectrum.com
mail.pelletron.com
spectrumtvchoice.com
responsibility.spectrum.com
174-045-013-188.res.spectrum.com
embed-answers.cority.com.pagescdn.com
050-091-130-043.res.spectrum.com
plans.spectrum.com
newsroom.spectrum.com
spectrumtvchoice.com
notices-wg.spectrum.com
newsroom.spectrum.com
*.plans.spectrum.com
stores.spectrum.com
communityimpact.spectrum.com
172-220-186-061.res.spectrum.com
mail.pelletron.com
096-033-089-086.res.spectrum.com
espanol.charter.com
047-049-040-002.biz.spectrum.com
app.enterprise.spectrum.com
068-190-112-250.res.spectrum.com
jobs.spectrum.com
024-231-231-058.biz.spectrum.com
jobs.marugame-seimen.com
commn.spectrum.com
wireless-provisioning.den.ims.spectrum.com
spectrumenterprise.com
aus.shaken.spectrum.com
clrp.spectrum.com
173-042-002-021.biz.spectrum.com
050-088-060-101.res.spectrum.com
076-053-027-154.inf.spectrum.com
espanol.charter.com
174-086-051-040.res.spectrum.com
corporate.charter.com
035-130-104-239.biz.spectrum.com
leapfrog-ssl-8.gcs-web.com
plans.spectrum.com
elqapp.spectrum.com
newsroom.spectrum.com
www.charter-retailportal.com
answers.alpinebank.com.pagescdn.com
edge-vod.spectrum.net
075-135-209-035.res.spectrum.com
communityimpact.spectrum.com
official.spectrum.com
corporate.charter.com
espanol.charter.com
improvements.spectrum.com
172-220-186-061.res.spectrum.com
web08.pushing7.com
leapfrog-ssl-8.gcs-web.com
spectrumtvchoice.com
173-042-002-021.biz.spectrum.com
035-130-104-239.biz.spectrum.com
mail.pelletron.com
184-167-056-046.res.spectrum.com
espanol.timewarnercable.com
commn.spectrum.com
096-040-025-044.res.spectrum.com
wireless-provisioning.den.ims.spectrum.com
jobs.spectrum.com
san4.yext-cdn.com
official.spectrum.com
den.shaken.spectrum.com
buy.spectrummobile.com
buy.spectrummobile.com
72.174.234.30
star.aiprx.spectrum.com
info.spectrum.com
channelpartners.spectrum.com
spectrumtvchoice.com
173-042-002-021.biz.spectrum.com
172-220-186-061.res.spectrum.com
addapp-enterprise.aiprx.spectrum.com

Certificate

The complete raw certificate details for clt.shaken.spectrum.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF3Bwokdr9+LVHIM9351
pcX8JZfrbTGNopHmBR8X/Xyj8nF41ey0DL1GiJrjYwObWYmFUYS9+LRtCHqbJR/H
0AcdqmOLUxBbeBPqnvEI66N9qstZQTjjtxICbIZvQJlEK9P46gftqn4kru638bGN
osv93HZ42BBtFtRepRRbR6IaLem9uip1enkJDWEDxm0BROeYyfheXz2vdIULSLWZ
9L2imAPmfcrV76bIuBm2nfTLGh3undnP3fc9vodfWyVKwq4bquqrLqRGpVkzGDti
2CCCQB85kB9YcE83nKy0m8ycTc7v4EDW2xmBZ/t3RQ4bmeHncajihagIk01/umPr
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1423303340558062756504053288602473116
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Missouri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St. Louis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Charter Communications Operating, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clt.shaken.spectrum.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24283987791498615187094507879095766279384743875183622377850381207833129676822855415631283093128875511107221569246993296428087621091029068243298362213640240529712130703022826069663681645141288144187010535051714216735870778838809855548361651558898128901899932291360634103216645930094533801239668774174149424464528164707151036810755433539719965550907107074733904639708429395934793252900150298451682558134053058281536347856416214118684863500243612874945892807670735221664510717722109903895202844592463644373447655576364860575237533979938534942981491060485269490460495322651318054652415206593272726284475426924344104971207
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							543a886971fe85c98a26b1b9427a2122613eb707
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clt.shaken.spectrum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaken.spectrum.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertSHA2SecureServerCA.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertSHA2SecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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