LIVE.AF.CENTURYLINK.COM

- CenturyLink, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0c:c4:bd:81:eb:8e:25:8c:1a:4e:0a:19:f2:60:f4:bc was issued on by DigiCert Inc.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CenturyLink, Inc.

Organization: CenturyLink, Inc.
Organization unit: Service Delivery Framework
State / Province: Louisiana
Locality: Monroe
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:c4:bd:81:eb:8e:25:8c:1a:4e:0a:19:f2:60:f4:bc
Serial Number (int): 16972269802440693282248206190622340284
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: dd:fc:57:63:18:ed:d4:d6:3e:20:7e:c3:4a:66:d6:1e:ab:84:1d:3d
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 44:62:c9:ed:10:cd:78:af:f4:db:93:86:51:8b:a6:de:0e:87:88:7f
Fingerprint (sha256): 01:a2:df:19:4f:f9:c9:6d:47:a6:09:8a:3c:2a:3e:5b:d3:34:94:23:2e:2e:0a:fa:43:ab:c9:ff:46:be:b8:b4

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate LIVE.AF.CENTURYLINK.COM

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for LIVE.AF.CENTURYLINK.COM

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

LIVE.AF.CENTURYLINK.COM
login.centurylink.com
login.af.centurylink.com
quickconnect-api.chi.af.centurylink.com
quickconnect.chi.af.centurylink.com
quickconnect-api.dnv.af.centurylink.com
quickconnect.dnv.af.centurylink.com
login-api.centurylink.com
login-api.chi.centurylink.com
login-api.dnv.centurylink.com
live1.af.centurylink.com
live2.af.centurylink.com
live5.af.centurylink.com
live6.af.centurylink.com
corp-xzeus.af.qwest.net

Other certificates including the domain name CENTURYLINK.COM

(limited to 100 certificates)

Certificate

The complete raw certificate details for LIVE.AF.CENTURYLINK.COM in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16972269802440693282248206190622340284
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Louisiana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Monroe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CenturyLink, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Service Delivery Framework'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LIVE.AF.CENTURYLINK.COM'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 813086224389658536077655149768337960064856146557851866250487318427476487312927093470309956352846728489433670532517987836873906525822688647534295828856505632906026227165470741036390155161563396710498965107740942100993004344402156067304484537234085977139489535766872285532938766742709934252180839928467586253075119867817371935546695395977140298799388537225718977138900904873592546410270311327988998198734782323388465652277831136520799528157121359547874478766956669476910703876136345948015966587425807595970370827245797230075209981206184099393675490467142171669002540644693110211768266653477470826186875021341992653750812449799189150781302558572983772391820505090420189001678820291254472621889824731660777012249114416159831616993044219141834719848328316673394005076987969068138598519969029835289056634565419871168316836327449267389138989243333073746635521001280811184603551136564344716710060720250658301359844177499458884513951641481425969893100850839322759825838531670894531718874251017942350313485856233212756524622395836369302365328318806578757366691845020001381738415684419434555991826559727371424023146557246956575980521765758373054991331110304635778163355572190752750653105155327929775533715952254809720718007468974133305776945387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ddfc576318edd4d63e207ec34a66d61eab841d3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (452 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LIVE.AF.CENTURYLINK.COM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.af.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickconnect-api.chi.af.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickconnect.chi.af.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickconnect-api.dnv.af.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickconnect.dnv.af.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-api.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-api.chi.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-api.dnv.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live1.af.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live2.af.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live5.af.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live6.af.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corp-xzeus.af.qwest.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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