LIVE.AF.CENTURYLINK.COM

- CenturyLink, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0a:2b:b6:dd:b4:56:ab:3e:24:d0:89:2a:7c:2c:bc:7c was issued on by DigiCert Inc.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CenturyLink, Inc.

Organization: CenturyLink, Inc.
Organization unit: Service Delivery Framework
State / Province: Louisiana
Locality: Monroe
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:2b:b6:dd:b4:56:ab:3e:24:d0:89:2a:7c:2c:bc:7c
Serial Number (int): 13519257686550014632849093272802212988
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: dd:fc:57:63:18:ed:d4:d6:3e:20:7e:c3:4a:66:d6:1e:ab:84:1d:3d
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 2a:2f:a3:e9:2d:c9:85:5f:05:9c:2b:73:5e:e3:a3:d9:0e:ee:f0:e5
Fingerprint (sha256): 02:f6:b9:68:71:69:a6:a4:92:d3:92:ac:86:4b:26:60:7a:76:49:ec:53:e6:b0:61:a8:76:ca:46:6d:66:3c:0f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate LIVE.AF.CENTURYLINK.COM

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for LIVE.AF.CENTURYLINK.COM

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

LIVE.AF.CENTURYLINK.COM
login.centurylink.com
login.af.centurylink.com
quickconnect-api.chi.af.centurylink.com
quickconnect.chi.af.centurylink.com
quickconnect-api.dnv.af.centurylink.com
quickconnect.dnv.af.centurylink.com
login-api.centurylink.com
login-api.chi.centurylink.com
login-api.dnv.centurylink.com
live1.af.centurylink.com
live2.af.centurylink.com
live5.af.centurylink.com
live6.af.centurylink.com
corp-xzeus.af.qwest.net
xzeus.af.qwest.net

Other certificates including the domain name CENTURYLINK.COM

(limited to 100 certificates)

Certificate

The complete raw certificate details for LIVE.AF.CENTURYLINK.COM in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13519257686550014632849093272802212988
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Louisiana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Monroe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CenturyLink, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Service Delivery Framework'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LIVE.AF.CENTURYLINK.COM'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 813086224389658536077655149768337960064856146557851866250487318427476487312927093470309956352846728489433670532517987836873906525822688647534295828856505632906026227165470741036390155161563396710498965107740942100993004344402156067304484537234085977139489535766872285532938766742709934252180839928467586253075119867817371935546695395977140298799388537225718977138900904873592546410270311327988998198734782323388465652277831136520799528157121359547874478766956669476910703876136345948015966587425807595970370827245797230075209981206184099393675490467142171669002540644693110211768266653477470826186875021341992653750812449799189150781302558572983772391820505090420189001678820291254472621889824731660777012249114416159831616993044219141834719848328316673394005076987969068138598519969029835289056634565419871168316836327449267389138989243333073746635521001280811184603551136564344716710060720250658301359844177499458884513951641481425969893100850839322759825838531670894531718874251017942350313485856233212756524622395836369302365328318806578757366691845020001381738415684419434555991826559727371424023146557246956575980521765758373054991331110304635778163355572190752750653105155327929775533715952254809720718007468974133305776945387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ddfc576318edd4d63e207ec34a66d61eab841d3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (472 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LIVE.AF.CENTURYLINK.COM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.af.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickconnect-api.chi.af.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickconnect.chi.af.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickconnect-api.dnv.af.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickconnect.dnv.af.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-api.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-api.chi.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-api.dnv.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live1.af.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live2.af.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live5.af.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live6.af.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corp-xzeus.af.qwest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xzeus.af.qwest.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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