047-049-040-002.biz.spectrum.com

Issued by R3

About this certificate

This digital certificate with serial number 03:e0:6d:cb:e4:24:1d:cf:f5:3c:9d:69:5d:51:03:fb:b8:de was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=047-049-040-002.biz.spectrum.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e0:6d:cb:e4:24:1d:cf:f5:3c:9d:69:5d:51:03:fb:b8:de
Serial Number (int): 337706052500624624109944504928437213575390
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fc:f3:a0:fa:dc:fb:8a:c0:16:cc:66:65:22:4f:14:2d:4c:24:0e:6d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 27:a3:83:58:9d:f1:d0:78:ac:c2:60:9a:50:81:0e:9a:5f:24:e4:52
Fingerprint (sha256): 02:58:02:ae:46:92:27:7f:15:39:c0:e6:45:e2:87:c3:c9:88:27:9e:91:c2:ac:22:2c:7f:c4:d9:d5:70:a7:1f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 047-049-040-002.biz.spectrum.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 047-049-040-002.biz.spectrum.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

047-049-040-002.biz.spectrum.com

Other certificates including the domain name spectrum.com

(limited to 100 certificates)
172-220-186-061.res.spectrum.com
images.enterprise.spectrum.com
075-135-205-231.res.spectrum.com
clt.shaken.spectrum.com
szervizek.carglass.hu
newsroom.spectrum.com
spectrumenterprise.com
035-130-104-239.res.spectrum.com
improvements.spectrum.com
173-042-002-021.biz.spectrum.com
mail.pelletron.com
047-049-040-002.biz.spectrum.com
chtr-cos-icoms1t.spectrum.com
clrp.spectrum.com
173-042-002-021.biz.spectrum.com
plans.spectrum.com
notices.spectrum.com
050-089-217-187.res.spectrum.com
reportspam.spectrum.com
096-035-155-045.biz.spectrum.com
*.email.spectrum.com
sanalytics.enterprise.spectrum.com
buy.spectrummobile.com
jobs.spectrum.com
174-045-022-013.res.spectrum.com
mail.pelletron.com
spectrumtvchoice.com
responsibility.spectrum.com
174-045-013-188.res.spectrum.com
embed-answers.cority.com.pagescdn.com
050-091-130-043.res.spectrum.com
plans.spectrum.com
newsroom.spectrum.com
spectrumtvchoice.com
notices-wg.spectrum.com
newsroom.spectrum.com
*.plans.spectrum.com
stores.spectrum.com
communityimpact.spectrum.com
172-220-186-061.res.spectrum.com
mail.pelletron.com
096-033-089-086.res.spectrum.com
espanol.charter.com
047-049-040-002.biz.spectrum.com
app.enterprise.spectrum.com
068-190-112-250.res.spectrum.com
jobs.spectrum.com
024-231-231-058.biz.spectrum.com
jobs.marugame-seimen.com
commn.spectrum.com
wireless-provisioning.den.ims.spectrum.com
spectrumenterprise.com
aus.shaken.spectrum.com
clrp.spectrum.com
173-042-002-021.biz.spectrum.com
050-088-060-101.res.spectrum.com
076-053-027-154.inf.spectrum.com
espanol.charter.com
174-086-051-040.res.spectrum.com
corporate.charter.com
035-130-104-239.biz.spectrum.com
leapfrog-ssl-8.gcs-web.com
plans.spectrum.com
elqapp.spectrum.com
newsroom.spectrum.com
www.charter-retailportal.com
answers.alpinebank.com.pagescdn.com
edge-vod.spectrum.net
075-135-209-035.res.spectrum.com
communityimpact.spectrum.com
official.spectrum.com
corporate.charter.com
espanol.charter.com
improvements.spectrum.com
172-220-186-061.res.spectrum.com
web08.pushing7.com
leapfrog-ssl-8.gcs-web.com
spectrumtvchoice.com
173-042-002-021.biz.spectrum.com
035-130-104-239.biz.spectrum.com
mail.pelletron.com
184-167-056-046.res.spectrum.com
espanol.timewarnercable.com
commn.spectrum.com
096-040-025-044.res.spectrum.com
wireless-provisioning.den.ims.spectrum.com
jobs.spectrum.com
san4.yext-cdn.com
official.spectrum.com
den.shaken.spectrum.com
buy.spectrummobile.com
buy.spectrummobile.com
72.174.234.30
star.aiprx.spectrum.com
info.spectrum.com
channelpartners.spectrum.com
spectrumtvchoice.com
173-042-002-021.biz.spectrum.com
172-220-186-061.res.spectrum.com
addapp-enterprise.aiprx.spectrum.com

Certificate

The complete raw certificate details for 047-049-040-002.biz.spectrum.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337706052500624624109944504928437213575390
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-01 13:04:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-29 13:04:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '047-049-040-002.biz.spectrum.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 721586216522731019855426313955740016012292967502350214773033601493633446818835043389906667049181688694634550972801288474900754142470003103535703740622673680295841905355549097238508401360679511367240008214718747617217708318679730460379786759653307693721576356735449893849450535908636849653562215395510167591541873740897365301852351083622894755912177140091013568772981322074582114855120544835268948010644488260202062796980543310195779331725161226575309717022937505178646350211500856876939917097927340428034503323728901332918496102477269882108931680988620066288107082792479041943876912124162248766993916402218249082356996804270870591160410281996637111411656811584016246545669321743850525050422649132138961601759698994141497232347238548422679004666371537220550726669806166893928310551426511371588150691478078820144001739238522892173809684830260337011090340775475628499974540366450673693611878999305612291823763983030980069826498390474841933566069823857413177270982101351351440978553546566652909796090827042244533577953739876867335215408451329032254678088179615862172305531814701134649745614546580036688973089268743822184832980782332083959262870485475431386093137025979764062851874111398252734649790906602809468332583389412024568928165051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fcf3a0fadcfb8ac016cc6665224f142d4c240e6d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '047-049-040-002.biz.spectrum.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a7300000181ba13916500000403004630440220695c1e68b6559e2ce751bd9863150e5ab2b2af0fe7bd842803747390364a4fc502204e66bcae8787a998da631f007bbd1590a08324e59d3b6e8f04581711f8fd462b00750046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000181ba1391b90000040300463044022054ecb1d20ec8d3f4e75083714211afad90712fa9cc723a32645781e10891bdb3022071ef8fcac79f98d5ffadc0d2184390566689cd3a7da109b4409258a578fdd1c1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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