account-env1.level3.com

- Level 3 Communications, Inc -

Issued by thawte SHA256 SSL CA

About this certificate

This digital certificate with serial number 63:c1:c2:39:95:79:78:6c:d7:9e:06:2e:46:d4:b3:2f was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Level 3 Communications, Inc

Organization: Level 3 Communications, Inc
Organization unit: GTI
State / Province: Colorado
Locality: Broomfield
Country: US

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 63:c1:c2:39:95:79:78:6c:d7:9e:06:2e:46:d4:b3:2f
Serial Number (int): 132599624226132380066229725606538687279
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 2b:9a:35:ae:01:18:38:30:e1:70:7a:05:e0:11:76:a3:ce:bd:90:14

Fingerprint (sha1): 3b:b4:0a:6a:bf:89:dd:f0:d1:0f:08:c9:f5:75:02:9c:12:3d:70:da
Fingerprint (sha256): 0d:28:b1:76:02:c7:bf:93:cd:ea:65:3f:37:a0:28:a3:e4:2f:7f:2b:0f:61:ed:fb:7c:30:c2:37:61:90:ef:3d

Issuing Certificate URL: http://tg.symcb.com/tg.crt

Revocation information

OCSP Server: http://tg.symcd.com
CRL Distribution Point: http://tg.symcb.com/tg.crl

Check the revocation status for certificate account-env1.level3.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for account-env1.level3.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

account-env1.level3.com

Other certificates including the domain name level3.com

(limited to 100 certificates)
latampool10.level3.com
vbs.level3.com
argrpad.corp.global.level3.com
developer.level3.com
clearpass.level3.com
aslatam.level3.com
onestopenv1.level3.com
ecd.lumen.com
apienv3.level3.com
eisgsaportalidc01-prod.idc1.level3.com
idcjamf0001.corp.global.level3.com
voiceconfig.centurylink.com
lyncedge2.level3.com
scheduler.ensportal.level3.com
apps.level3.com
test.level3.com
Clapps.level3.com
b2bqa.level3.com
eisgsaportal.level3.com
fcam.level3.com
CATOAKUCM-PUB.level3.com
gbbgkwvinf26.corp.global.level3.com
amvjxlmbfejqtsy01.level3-gsa.com
hlr-director-01.centurylink.net
uptime.globalcrossing.com
gblonwvinf6.corp.global.level3.com
apm.level3.com
vctportal.voice.uk.level3.com
gblonwvinf6.corp.global.level3.com
apidev4.level3.com
gbbgkwvinf26.corp.global.level3.com
nalm1.level3.com
account.level3.com
account.level3.com
audio.level3.com
latampool2.level3.com
webxtsp-a1.level3.com
masterstream.level3.com
b2bapi-env1.level3.com
callmgr.level3.com
account-env1.level3.com
latam.my.level3.com
jj46-15b1-ilo.idc1.level3.com
rocvendorportal.level3.com
account.level3.com
emeapool3ext.level3.com
fcam.level3.com
b2benv4.level3.com
lyncedge2.level3.com
apm.level3.com
apidev4.level3.com
l3adc-goss-bastion.adc1.level3.com
ecd.cfer.com
ensportal.level3.com
account-env2.level3.com
aslatam.level3.com
callmgrtest.level3.com
account-env4.level3.com
swtest.level3.com
b2bua.level3.com
mobilesync.level3.com
secureapi.level3.com
desio.centurylink.com
ui.level3.com
cdn.level3.com
lyncedge2.level3.com
b2b.level3.com
onestop.level3.com
den1-apibeta.level3.com
voiceconfig.level3.com
stage-latam.my.level3.com
supplierportaldev.level3.com
partnerportal.level3.com
ensportal.level3.com
activesync.level3.com
storefrontlb-adc.level3.com
api.centurylink.com
desio.centurylink.com
secureapi-dev2.level3.com
adfsprd.level3.com
connect.level3.com
api-ext.centurylink.com
argcamea.corp.global.level3.com
vctboot.voice.uk.level3.com
myquote.level3.com
web.corp.global.level3.com
emeapool3ext.level3.com
pdns.level3.com
portout.level3.com
emealm1.level3.com
rocvendorportal.level3.com
ui.level3.com
CATOAKUCM-PUB.level3.com
secureweb.level3.com
enswebservices.level3.com
ext-ticketing.level3.com
emeapool2ext.level3.com
attachmentssf-web-testb.level3.com
api.level3.com
ensportal.level3.com

Certificate

The complete raw certificate details for account-env1.level3.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3Amnfx6b8ooPRKc07xl
Aq0TbIoKjbrK+xPXRZRQFQGxGAWozp16HMjaR2fWBIsaBTXcfbF1QV0NcDDnjqoC
B5125ItwuFcxayykadYXuZ5mNJ0ei8x0IDo342sEjaX9sOJiYTDN5U70z7YW/BXs
QyZmw9Ec12akyDqqUVBQkg9TFmW+SKXQpL5DKNO0a1jMNgcv8FTw6OmWj1oj4k2w
ZspGex9QMr/QXMtPZV/v2ek+jOL1F9jpxLyDqKhJl2iPX9+UjgmFtIuN+epViB4o
Jp+sEta91S3UeQ/mdKcXi7KWql6J230OaeIVvx3OZ1UJg+s6MhBvPqWugSAzfDrx
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 132599624226132380066229725606538687279
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Colorado'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Broomfield'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Level 3 Communications, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'GTI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'account-env1.level3.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22651960233356495275883750316953423784606851516271191925815479793491262600838664587696504557847930915515284654501382788728496818444708577442888272450499197997910683759084554192915476369948471117791271179005904594520288236942716058526239823059103372119791453707494794053822076185699490670484186085911327990107368863891349841666974878361697015859482593615144913469395738365588848151795769614651761182135536696439965677205777507410421459520452078719913068112924244146564670930989213032192948518306541670802771025997806831736411886093430692000967192050187314823443739643203309688313228361172264365705055510979155347567001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account-env1.level3.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2b9a35ae01183830e1707a05e01176a3cebd9014
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015cafaa877a0000040300473045022100cab32fd2531c799bbee9acae15ffc3854966da5c48af515766155b89beb40b0d022071f6ebc123811ed390fe33fbefba8559d899f89952cd196ad09abe20ae50d404007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015cafaa878c000004030046304402206c97fd68205ffc9cc4e334b1399b948980a72274f70fe51a8398d9ec430b874002207587beaa78083ec95d94f0ecdb9e9ef0c2cb76513200c30b3c1ceef5f1ce0dec
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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