kstllcmdu01.corp.chartercom.com

- Charter Communications Holding Company LLC -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 46:63:ed:66:ce:d5:44:ce:a9:5f:8e:50:e6:6c:33:39 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Charter Communications Holding Company LLC

Organization: Charter Communications Holding Company LLC
Organization unit: Charter Communications Holding Company LLC
State / Province: Missouri
Locality: St. Louis
Country: US

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 46:63:ed:66:ce:d5:44:ce:a9:5f:8e:50:e6:6c:33:39
Serial Number (int): 93564812170299439095273667881125819193
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): ab:d6:a2:55:e5:2f:8a:b1:2b:b1:b0:00:56:eb:7d:11:04:1e:77:48
Fingerprint (sha256): 11:72:e2:c7:dd:fc:df:6b:ff:28:8e:c7:5c:1c:2b:7b:d0:3f:87:f9:e3:3b:4a:1c:b3:14:b0:4a:11:78:a3:0d

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate kstllcmdu01.corp.chartercom.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kstllcmdu01.corp.chartercom.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kstllcmdu01.corp.chartercom.com

Other certificates including the domain name chartercom.com

(limited to 100 certificates)
scoreuat.chartercom.com
issuetrakQA.corp.chartercom.com
prvbas2b.twcable.com
issuetrak.chartercom.com
webvpn.chartercom.com
files.chartercom.com
scoreuat.chartercom.com
coin.chartercom.com
realworxvala.chartercom.com
ucchub.chartercom.com
files.charter.com
prvpas1l.twcable.com
realworxwi1.chartercom.com
carswebq-usr.corp.chartercom.com
wlc01smfrct.corp.chartercom.com
realworxwi2.chartercom.com
esbprovqa.corp.chartercom.com
oms-stg.chartercom.com
tqa.chartercom.com
files.chartercom.com
vrf-api-dev.chartercom.com
charterbusiness-uat.chartercom.com
EP1.corp.chartercom.com
tqa.chartercom.com
coin.chartercom.com
vrf-api-dev.chartercom.com
sharepoint.charter.com
techmobile-foss.chartercom.com
edw.chartercom.com
isp-assist.chartercom.com
prvpas2c.twcable.com
EU1.corp.chartercom.com
sdpesat-dr.corp.chartercom.com
sharepointappsdr.charter.com
ent-api.charter.com
ED1.corp.chartercom.com
amrlca.corp.chartercom.com
git.corp.chartercom.com
ucmuat.chartercom.com
eqatest.chartercom.com
uimsdpr-global.corp.chartercom.com
vrf-api.chartercom.com
kstllcmdu01.corp.chartercom.com
sopt02.chartercom.com
osmsdpr.corp.chartercom.com
citrixweb.spectrumreach.com
granite-dev.chartercom.com
bacclite.chartercom.com
prism-tdb-uat.corp.chartercom.com
bisws-a.corp.chartercom.com
jiratest.corp.chartercom.com
sharepointdr.charter.com
tms-uat.corp.chartercom.com
isp-assist.chartercom.com
files.charter.com
recom.chartercom.com
sharepointappsdr.charter.com
esbprovr-blue.corp.chartercom.com
cppt04.chartercom.com
cars-qa-web-usr.corp.chartercom.com
CORPortal.corp.chartercom.com
cat.corp.chartercom.com
uimsdpr.corp.chartercom.com
prvhas2l.twcable.com
tms-uat.corp.chartercom.com
recom-dev.chartercom.com
EP1.corp.chartercom.com
mstr9uat.chartercom.com
nce-isp-app-01.corp.chartercom.com
cissolosynch-uat.corp.chartercom.com
mobileretail-xcenter-uat.chartercom.com
chartercert.chartercom.com
techmobile.chartercom.com
srvc-entapi.corp.chartercom.com
jamf.charter.com
cppt04.chartercom.com
irisweb-usr.corp.chartercom.com
apv.corp.chartercom.com
corp-vpn.chartercom.com
vm0pwnetbra0002.corp.chartercom.com
corp-vpn.chartercom.com
corportal.corp.chartercom.com
prvpas1i.twcable.com
prvhas1f.twcable.com
osmsdp.corp.chartercom.com
ctap-uat.chartercom.com
prvhas1c.twcable.com
collections-uat.chartercom.com
eqa.chartercom.com
coin.chartercom.com
prvhas1c.twcable.com
tqa.chartercom.com
cppt02.chartercom.com
spt01.chartercom.com
files.chartercom.com
coin2010uat.chartercom.com
realworxvala.chartercom.com
prvbas1c.twcable.com
sopt02.chartercom.com
files.chartercom.com

Certificate

The complete raw certificate details for kstllcmdu01.corp.chartercom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2S1xqMkK2j8ayN/QTm/v
RXlQWshqUw0yomRYhWNwkviVlkpCqLkhIhu6u/59b391wGv/T/cTb4vAs0l/0InI
n4s8gXqb92oDffvMg/5c+RDMf1h52pql4TEAL6b4ExRDejNxvaVPSXyZ/ZpU87UI
U1ADG8028BvQfayXnvjS+ECXEsWP2f2hp/D7q4neU4GWZcBB8FuFt/0/x1Ljtf8B
4aLNHR/zuoVLDvr0AJRTrz4XyHAXvQ2+Lgbm05GtuVdkZhpHAtxHcxq8r0S+5KW1
p2hseR8dkBFaCtqRw1RBNYjY4mCBH264qMV5vYrFRpCTZaYkEfIKk5YyqPsCc5ZI
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 93564812170299439095273667881125819193
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Missouri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'St. Louis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Charter Communications Holding Company LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Charter Communications Holding Company LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'kstllcmdu01.corp.chartercom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27416121440220390429815818064841951828366812804805426487864972668859845860336921710207092116314133595334092694559389104805578891216887730182092620142307948038000066633381206902595697374581291660012924887469237759166660606445088652621148011587571706967080726440040948525186020010806387015056882207380621232727020049229493174754285291650793136801424160862270273732311038656627285059637155209934073018893880866504834827690179176678840436505430885355491737067121070189153231130192779475731297429809467657263088801250914843576378368141431518017245658552686052496682902105638522135517736859421206707016374831995631571454013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kstllcmdu01.corp.chartercom.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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