ingress-dev.charter.com

- Charter Communications Operating, LLC -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 02:8d:16:02:48:aa:dc:d5:b7:01:83:a9:b8:93:55:a2 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Charter Communications Operating, LLC

Organization: Charter Communications Operating, LLC
State / Province: Missouri
Locality: Saint Louis
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:8d:16:02:48:aa:dc:d5:b7:01:83:a9:b8:93:55:a2
Serial Number (int): 3391016242580328766149433008449607074
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 2d:c6:9c:47:29:da:ff:1c:a6:2a:9f:61:30:9b:74:8e:42:20:9e:e3
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 8c:e9:f2:5b:b8:ff:52:91:bb:da:7c:23:9c:6a:5b:2e:16:97:9e:48
Fingerprint (sha256): 0f:35:5a:82:51:f6:3b:10:20:17:88:48:ce:b3:a3:20:0e:79:64:20:5f:c0:59:cd:4f:c4:90:0d:37:e8:9f:00

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate ingress-dev.charter.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ingress-dev.charter.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ingress-dev.charter.com

Other certificates including the domain name charter.com

(limited to 100 certificates)
wsesam.twcable.com
eli-ws-serviceability.charter.com
spt01aldlmi.aldl.mi.charter.com
bhn-uid-http.dsb.charter.com
scope-api.charter.com
newsroom.spectrum.com
prvbas2b.twcable.com
plbk-cga.ladc.ca.charter.com
cwm.charter.com
ncencem-h2l-ts1.inf.charter.com
files.charter.com
prvpas1l.twcable.com
notices-stage.charter.com
etsd.charter.com
www.myaccount.charter.com
spt01aldlmi.aldl.mi.charter.com
*.overtureshops.com
spc-csg-qa.charter.com
ctec-vpn.charter.com
wsgotobroadbandqa.twcable.com
sdptwc-mgmt-ftp.charter.com
vendoraccess.twcable.com
ivrnewcharter.charter.com
vendoraccess.twcable.com
teldev.charter.com
ingress-staging.charter.com
sdpsa.charter.com
ss2.dsb.charter.com
wsgotobroadband.twcable.com
newsroom.spectrum.com
newsroom.spectrum.com
chartersolutionchannel.com
product.charter.com
packetfence1.roch.mn.charter.com
communityimpact.spectrum.com
EP1.corp.chartercom.com
ss1.dsb.charter.com
eli-demo-uat.charter.com
espanol.charter.com
chalk.charter.com
documentation.ccit.ops.charter.com
ctec-vpn.charter.com
sharepoint.charter.com
smetrics.charter.com
peakview.charter.com
orders.charter.com
bluevpn.charter.com
www.charter.com
car.cproxy.scope.charter.com
EU1.corp.chartercom.com
bluevpn.charter.com
login.timewarnercable.com
chalk.charter.com
sdpasap.charter.com
policy.charter.com
*.dp.aws.charter.com
vendoraccess.twcable.com
jenkins.bf.lab.charter.com
sharepointappsdr.charter.com
sdpuim.charter.com
espanol.charter.com
*.dp.aws.charter.com
mypc.charter.com
corporate.charter.com
Prism.twcable.com
amrlca.corp.chartercom.com
leapfrog-ssl-8.gcs-web.com
eli-ws-gotobroadband-uat.charter.com
notices.charter.com
media5.adlegend.com
newsroom.spectrum.com
payments.charter.com
ingress-dev.charter.com
cbi.charter.com
orders.charter.com
prism-qa2-ui.charter.com
communityimpact.spectrum.com
corporate.charter.com
espanol.charter.com
evpn-nce.charter.com
raleighcloudpathvip.charter.com
cdptpabb04-cfui30-01.stage.charter.com
prism-wf.charter.com
blueguest.charter.com
leapfrog-ssl-8.gcs-web.com
jira.charter.com
eli-serviceability.charter.com
*.ccit.ops.charter.com
repo.rio.osg.cloud.twc.net
espanol.timewarnercable.com
eli-ws-carrier-uat.charter.com
files.charter.com
webconference.charter.com
jira.charter.com
wsesam.twcable.com
email.charter.com
chrcnctramw-rcp-cl1.wireless.charter.com
wlc-virtual.charter.com
clrpass02.charter.com
sdpinv.charter.com

Certificate

The complete raw certificate details for ingress-dev.charter.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEuMfqYSUwyyeTm3wEJQ
2RDMhPdjExaMiNP6N73HVvKSbTP702j72yXdXXVYmnmkmF22r6Qvv85CLG6tiIIR
wHQvmLU0B6Hi2n7jeUfOO3o460fGMYT6/Jyli+TF4tbHM0GfVKyiiys9ygVs216N
hHPRCTTY08xF2nqYhImNEmkAckqn3nJOJjg0ReaULTKZEFm7IafpKl72m6yEUyZh
evIPSquVLU4FkoiIHkVpkF2/4u0p61fxISeTInAs2vRn0I5sm/aIBhp6Yas6URpw
sUDQpiEr5uv1uLHfV529g60iMG8By/gyVqV0em1HiVL+vyZJuTvPTu4GeBNT/nlF
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3391016242580328766149433008449607074
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Missouri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Saint Louis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Charter Communications Operating, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ingress-dev.charter.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24275009058958927289294123953243240945630051110258980252091056396090334823664871335925692638947219193951932176393130004769334328844938312114852609837803840897717258842182308904640970758778267057775547164712789410626094497693579156217822915982568570479902229896454763123106679779454855942421765971977413916445883316175680735423341200683341685826316843154862398126046049670199100965580746050401589849208681273035685072877066471088111473961220612077373890690432447026094767976760356136353158141112370536427524272445602064179927887651192385650774138580506531167502717098777332016659382772478858199037815747223720077903247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2dc69c4729daff1ca62a9f61309b748e42209ee3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingress-dev.charter.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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