047-049-040-002.biz.spectrum.com

Issued by R3

About this certificate

This digital certificate with serial number 03:6e:49:5f:6e:74:12:71:4a:59:48:0b:aa:6b:b3:06:ec:30 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=047-049-040-002.biz.spectrum.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6e:49:5f:6e:74:12:71:4a:59:48:0b:aa:6b:b3:06:ec:30
Serial Number (int): 298865447308739061531424475482315670613040
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fc:f3:a0:fa:dc:fb:8a:c0:16:cc:66:65:22:4f:14:2d:4c:24:0e:6d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6f:20:b7:07:dc:cd:d0:00:7e:34:00:cd:71:42:38:da:a6:11:b9:ec
Fingerprint (sha256): 09:b4:37:9d:50:97:92:f9:70:26:1a:8e:50:d4:3b:35:62:f3:52:6f:14:bf:a2:65:87:15:b1:62:6b:25:18:77

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 047-049-040-002.biz.spectrum.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 047-049-040-002.biz.spectrum.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

047-049-040-002.biz.spectrum.com

Other certificates including the domain name spectrum.com

(limited to 100 certificates)
172-220-186-061.res.spectrum.com
images.enterprise.spectrum.com
075-135-205-231.res.spectrum.com
clt.shaken.spectrum.com
szervizek.carglass.hu
newsroom.spectrum.com
spectrumenterprise.com
035-130-104-239.res.spectrum.com
improvements.spectrum.com
173-042-002-021.biz.spectrum.com
mail.pelletron.com
047-049-040-002.biz.spectrum.com
chtr-cos-icoms1t.spectrum.com
clrp.spectrum.com
173-042-002-021.biz.spectrum.com
plans.spectrum.com
notices.spectrum.com
050-089-217-187.res.spectrum.com
reportspam.spectrum.com
096-035-155-045.biz.spectrum.com
*.email.spectrum.com
sanalytics.enterprise.spectrum.com
buy.spectrummobile.com
jobs.spectrum.com
174-045-022-013.res.spectrum.com
mail.pelletron.com
spectrumtvchoice.com
responsibility.spectrum.com
174-045-013-188.res.spectrum.com
embed-answers.cority.com.pagescdn.com
050-091-130-043.res.spectrum.com
plans.spectrum.com
newsroom.spectrum.com
spectrumtvchoice.com
notices-wg.spectrum.com
newsroom.spectrum.com
*.plans.spectrum.com
stores.spectrum.com
communityimpact.spectrum.com
172-220-186-061.res.spectrum.com
mail.pelletron.com
096-033-089-086.res.spectrum.com
espanol.charter.com
047-049-040-002.biz.spectrum.com
app.enterprise.spectrum.com
068-190-112-250.res.spectrum.com
jobs.spectrum.com
024-231-231-058.biz.spectrum.com
jobs.marugame-seimen.com
commn.spectrum.com
wireless-provisioning.den.ims.spectrum.com
spectrumenterprise.com
aus.shaken.spectrum.com
clrp.spectrum.com
173-042-002-021.biz.spectrum.com
050-088-060-101.res.spectrum.com
076-053-027-154.inf.spectrum.com
espanol.charter.com
174-086-051-040.res.spectrum.com
corporate.charter.com
035-130-104-239.biz.spectrum.com
leapfrog-ssl-8.gcs-web.com
plans.spectrum.com
elqapp.spectrum.com
newsroom.spectrum.com
www.charter-retailportal.com
answers.alpinebank.com.pagescdn.com
edge-vod.spectrum.net
075-135-209-035.res.spectrum.com
communityimpact.spectrum.com
official.spectrum.com
corporate.charter.com
espanol.charter.com
improvements.spectrum.com
172-220-186-061.res.spectrum.com
web08.pushing7.com
leapfrog-ssl-8.gcs-web.com
spectrumtvchoice.com
173-042-002-021.biz.spectrum.com
035-130-104-239.biz.spectrum.com
mail.pelletron.com
184-167-056-046.res.spectrum.com
espanol.timewarnercable.com
commn.spectrum.com
096-040-025-044.res.spectrum.com
wireless-provisioning.den.ims.spectrum.com
jobs.spectrum.com
san4.yext-cdn.com
official.spectrum.com
den.shaken.spectrum.com
buy.spectrummobile.com
buy.spectrummobile.com
72.174.234.30
star.aiprx.spectrum.com
info.spectrum.com
channelpartners.spectrum.com
spectrumtvchoice.com
173-042-002-021.biz.spectrum.com
172-220-186-061.res.spectrum.com
addapp-enterprise.aiprx.spectrum.com

Certificate

The complete raw certificate details for 047-049-040-002.biz.spectrum.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298865447308739061531424475482315670613040
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-02 12:04:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-01 12:04:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '047-049-040-002.biz.spectrum.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 721586216522731019855426313955740016012292967502350214773033601493633446818835043389906667049181688694634550972801288474900754142470003103535703740622673680295841905355549097238508401360679511367240008214718747617217708318679730460379786759653307693721576356735449893849450535908636849653562215395510167591541873740897365301852351083622894755912177140091013568772981322074582114855120544835268948010644488260202062796980543310195779331725161226575309717022937505178646350211500856876939917097927340428034503323728901332918496102477269882108931680988620066288107082792479041943876912124162248766993916402218249082356996804270870591160410281996637111411656811584016246545669321743850525050422649132138961601759698994141497232347238548422679004666371537220550726669806166893928310551426511371588150691478078820144001739238522892173809684830260337011090340775475628499974540366450673693611878999305612291823763983030980069826498390474841933566069823857413177270982101351351440978553546566652909796090827042244533577953739876867335215408451329032254678088179615862172305531814701134649745614546580036688973089268743822184832980782332083959262870485475431386093137025979764062851874111398252734649790906602809468332583389412024568928165051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fcf3a0fadcfb8ac016cc6665224f142d4c240e6d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '047-049-040-002.biz.spectrum.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000182fe4d75960000040300463044022047ccbd57ce8d559d725b6b16224eed7aa97e372f93effa522c931ff7de44dbef022078ec2423147af58863400ad0b643b829526b3df30acfa337a525c69d39f23cba007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a7300000182fe4d77580000040300473045022001882d854673e96af96c57bfc84672ba2980ab0a6795a4ecec7a9b59b8303f0c022100bf40cb634b520aadc4befc86b0fe05d513a1b1b41c019a1f6ada7ad13c3bf624
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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