orders.charter.com

- Charter Communications Operating, LLC -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 50:d2:ed:39 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Charter Communications Operating, LLC

Organization: Charter Communications Operating, LLC
State / Province: Missouri
Locality: Saint Louis
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 50:d2:ed:39
Serial Number (int): 1356000569
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: de:c6:34:af:ab:e4:2f:4f:a0:b7:4a:cb:ce:59:44:1f:20:ca:9a:8d
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): fa:b4:f7:e3:2c:b6:d2:77:cc:08:51:95:8c:f1:a5:92:60:06:d6:6e
Fingerprint (sha256): 0a:22:f4:4c:3e:9b:59:07:e2:8f:81:16:af:51:fe:dd:07:06:e4:6a:ff:b3:72:e7:f8:22:cb:95:03:ea:91:46

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate orders.charter.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for orders.charter.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

orders.charter.com

Other certificates including the domain name charter.com

(limited to 100 certificates)
wsesam.twcable.com
eli-ws-serviceability.charter.com
spt01aldlmi.aldl.mi.charter.com
bhn-uid-http.dsb.charter.com
scope-api.charter.com
newsroom.spectrum.com
prvbas2b.twcable.com
plbk-cga.ladc.ca.charter.com
cwm.charter.com
ncencem-h2l-ts1.inf.charter.com
files.charter.com
prvpas1l.twcable.com
notices-stage.charter.com
etsd.charter.com
www.myaccount.charter.com
spt01aldlmi.aldl.mi.charter.com
*.overtureshops.com
spc-csg-qa.charter.com
ctec-vpn.charter.com
wsgotobroadbandqa.twcable.com
sdptwc-mgmt-ftp.charter.com
vendoraccess.twcable.com
ivrnewcharter.charter.com
vendoraccess.twcable.com
teldev.charter.com
ingress-staging.charter.com
sdpsa.charter.com
ss2.dsb.charter.com
wsgotobroadband.twcable.com
newsroom.spectrum.com
newsroom.spectrum.com
chartersolutionchannel.com
product.charter.com
packetfence1.roch.mn.charter.com
communityimpact.spectrum.com
EP1.corp.chartercom.com
ss1.dsb.charter.com
eli-demo-uat.charter.com
espanol.charter.com
chalk.charter.com
documentation.ccit.ops.charter.com
ctec-vpn.charter.com
sharepoint.charter.com
smetrics.charter.com
peakview.charter.com
orders.charter.com
bluevpn.charter.com
www.charter.com
car.cproxy.scope.charter.com
EU1.corp.chartercom.com
bluevpn.charter.com
login.timewarnercable.com
chalk.charter.com
sdpasap.charter.com
policy.charter.com
*.dp.aws.charter.com
vendoraccess.twcable.com
jenkins.bf.lab.charter.com
sharepointappsdr.charter.com
sdpuim.charter.com
espanol.charter.com
*.dp.aws.charter.com
mypc.charter.com
corporate.charter.com
Prism.twcable.com
amrlca.corp.chartercom.com
leapfrog-ssl-8.gcs-web.com
eli-ws-gotobroadband-uat.charter.com
notices.charter.com
media5.adlegend.com
newsroom.spectrum.com
payments.charter.com
ingress-dev.charter.com
cbi.charter.com
orders.charter.com
prism-qa2-ui.charter.com
communityimpact.spectrum.com
corporate.charter.com
espanol.charter.com
evpn-nce.charter.com
raleighcloudpathvip.charter.com
cdptpabb04-cfui30-01.stage.charter.com
prism-wf.charter.com
blueguest.charter.com
leapfrog-ssl-8.gcs-web.com
jira.charter.com
eli-serviceability.charter.com
*.ccit.ops.charter.com
repo.rio.osg.cloud.twc.net
espanol.timewarnercable.com
eli-ws-carrier-uat.charter.com
files.charter.com
webconference.charter.com
jira.charter.com
wsesam.twcable.com
email.charter.com
chrcnctramw-rcp-cl1.wireless.charter.com
wlc-virtual.charter.com
clrpass02.charter.com
sdpinv.charter.com

Certificate

The complete raw certificate details for orders.charter.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9dVuiMeVJtyy0jRgs/+
1Och1FI8stasAOoa/jJYzwYxh+R9+KvvAtWYn1Nod76LPJIsXAvC4XL4XLVs5ahM
nx9CrglhqIXcU4yzp54GtbnMFjkYRr4nQRV8/ZyooAknXieE2Yd3MI0V3tjoXik2
aBe444sFZ9lvXM15m4vANUGHXXJu0KNkDVw/SM89XQJWLEEXY/Aq2WEosiVYU7tL
ihIUT1dYM73Gtp4+lY6HPGh5P9MxeQuWOX6MDbCg2GYrWOp4pZQvbEJsKtVJs5v+
8TUnprpQowak6jiEPDoFZe+V8feLcoMck6PaWcWcwqsCwZ9DwAxWCpYmgSXcvXt8
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1356000569
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-08 18:50:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-09 21:30:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Missouri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Saint Louis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Charter Communications Operating, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'orders.charter.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24217701831233859149867619143832264721210514773982642470082615677755643547068317919298882762233803727663088974827510108795058084601264770042835141137320869567281808193392876445437305939771351078886209996432964585475447226242643995038699657354686197275164879999366562480100952373848892967922666866693533232002448958685773554696176937439264717887557989435358778559998307759159898648934366251537712220367746896606231310001587126881683490200122664456668931449301202322384927041891057714386483979642803024107457080625480767103085631803341183358268907523226392225395974620608118603714102634135989325419131875753784308890637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders.charter.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dec634afabe42f4fa0b74acbce59441f20ca9a8d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005f176d80f758cce3ce904499fee6a3c8adad11d179254e1a3a22f2e3bb85fb1254034f652f2f04d78b7094e5e5699339622fb5ee789fe594ee6bb6921a51dc85132beb003d2e92b911f0b5aa3328e0bd2329c5528de120b85ee67b3ce36f686af2cea0834c46c8e4b310645cae39f4997413510c9be80e913eeb062205254e7c46a4c0f03c2fa696edaf6ae8e22a3cc34af6458dc1e43d9e026a4e4b0d3103762943cba1aa6ebe048846592e4b5cdb8c3dd3736af011dee4e4535429a84e7afbb3fedde4f1c52e2ce0c0143e867ccb3c3e40c87151ec6a6f97dbae4a2a3981c2a3bf78c88e990dacfa1b83eaee373002d00e5be406107f6590b6f9f757bb0bf8