qa01-entapi.spectrummobile.com

- Charter Communications Operating, LLC -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 03:56:0b:c3:6b:14:07:bb:18:7b:e0:98:57:1a:62:bd was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Charter Communications Operating, LLC

Organization: Charter Communications Operating, LLC
State / Province: Missouri
Locality: St. Louis
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:56:0b:c3:6b:14:07:bb:18:7b:e0:98:57:1a:62:bd
Serial Number (int): 4434460106325184319832525458183447229
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 40:27:fc:36:25:9c:fd:88:2c:01:64:de:c0:3e:b8:e8:4c:85:b7:42
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): d1:c6:d4:49:4f:20:c0:9b:7b:ea:a7:9b:b8:73:de:9b:dd:74:75:a6
Fingerprint (sha256): 13:11:48:ec:e7:6c:dc:31:f5:33:48:b0:6d:16:ea:f3:0d:79:a1:c4:2e:c3:7f:b3:0e:a0:13:f7:57:ff:19:60

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl

Check the revocation status for certificate qa01-entapi.spectrummobile.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qa01-entapi.spectrummobile.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qa01-entapi.spectrummobile.com

Other certificates including the domain name spectrummobile.com

(limited to 100 certificates)
mobileapi.spectrummobile.com
mobileapi.spectrummobile.com
buy.spectrummobile.com
spectrumtvchoice.com
int-api-nceb.spectrummobile.com
buy-uat.spectrummobile.com
spectrumtvchoice.com
buy-dev1.spectrummobile.com
spectrumtvchoice.com
mobileapi-uat.spectrummobile.com
Portal-api.spectrummobile.com
spectrumtvchoice.com
spectrumtvchoice.com
qa01-entapi.spectrummobile.com
buy.spectrummobile.com
buy.spectrummobile.com
api-nceb.spectrummobile.com
buy-uat.spectrummobile.com
spectrumtvchoice.com
mobileapi-uat.spectrummobile.com
spectrumtvchoice.com
sit.amdocs.spectrummobile.com
api-ncwa.spectrummobile.com
spectrum.com
spectrumtvchoice.com
dev2.amdocs.spectrummobile.com
buy.spectrummobile.com
dev1-entapi.spectrummobile.com
spectrum.com
uat1-entapi.spectrummobile.com
spectrumtvchoice.com
mobileapi-dev2.spectrummobile.com
spectrumtvchoice.com
retail.spectrummobile.com
uat1-entapi.spectrummobile.com
spectrum.com
spectrum.com
srvc-api-nce.spectrummobile.com
Hotfix-entapi.spectrummobile.com
spectrum.com
spectrum.com
buy.spectrummobile.com
srvc-api-ncw.spectrummobile.com
int-apib.spectrummobile.com
int-api.spectrummobile.com
mobileapi-sit.spectrummobile.com
portal-api-nce.spectrummobile.com
uat2-entapi.spectrummobile.com
spectrumtvchoice.com
buy.spectrummobile.com
retail.spectrummobile.com
uat2-entapi.spectrummobile.com
spectrumtvchoice.com
spectrumtvchoice.com
sit-entapi.spectrummobile.com
dev1-entapi.spectrummobile.com
mobileapi-sit.spectrummobile.com
dev.amdocs.spectrummobile.com
int-api-ncwb.spectrummobile.com
spectrumtvchoice.com
buy.spectrummobile.com
spectrum.com
spectrumtvchoice.com
spectrumtvchoice.com
mobileapi-uat.spectrummobile.com
spectrumtvchoice.com
buy.spectrummobile.com
portal-api-ncw.spectrummobile.com
dev.amdocs.spectrummobile.com
spectrumtvchoice.com
mobileapi.spectrummobile.com
api-ncea.spectrummobile.com
spectrumtvchoice.com
mobileapi.spectrummobile.com
buy.spectrummobile.com
api-oauth-nce.spectrummobile.com
mobileapi-dev2.spectrummobile.com
spectrumtvchoice.com
elastic-api-nce.spectrummobile.com
int-apia.spectrummobile.com
sit.amdocs.spectrummobile.com
spectrumtvchoice.com
spectrum.com
dev1-entapi.spectrummobile.com
spectrumtvchoice.com
qa1-entapi.spectrummobile.com
mobileapi.spectrummobile.com
buy.spectrummobile.com
buy.spectrummobile.com
spectrum.com
spectrumtvchoice.com
buy.spectrummobile.com
mobileapi.spectrummobile.com
spectrumtvchoice.com
official.spectrummobile.com
qa2-entapi.spectrummobile.com
spectrumtvchoice.com
uat2-entapi.spectrummobile.com
official.spectrummobile.com
spectrum.com

Certificate

The complete raw certificate details for qa01-entapi.spectrummobile.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiCATKKcqVvFHQDgPAxv
Mh2MUhUvSh7FxYrWHiuA5F67buh03nCKcLj/nZkIqapDcNfUHgHdvJgOXAuQz6E2
+gRYAXg1cJvEFPFWDmRvytJOyIt3uKQJ9CNPF+d7Qil2puXNbFmLs0gyoZFDW2Lf
elt4chzJ8zG6f7E3Nn21LyVJOP8UScLxfaHl3a+EzYaaXzxrwNmEIanPJNajjKdp
8aJK4wDslRccUdTYb4sl0C24DauFnrPbtJpc1XI+YU5y2LyB6wMahjq9OZSEok/p
nnFJtlK5apaRhbySJyPB8K/mNMos3gpkU6EnCvUETeJjlYVm9r57EVGG1cCuvJng
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4434460106325184319832525458183447229
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Missouri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St. Louis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Charter Communications Operating, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa01-entapi.spectrummobile.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25011211307222854449553456632196337923667799838621885784737814513495780330271688934981455266208749669334892182624625438046736403644548339563103852470773450215634042414059889147533354759660607099456849087641691313717625540298849943120166809382222560959790303268088505560350527421070461039064799390371995468242393331094392618751008437350480353004259645084729928699128029157533265697269552260669504130995920132170603069503645797769967813897060968606339933720559044315738928820803847906560236897766044119834952207267401795618111386587344714516615661280118606203432064820657305161303141474552933403661379217309480062148617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4027fc36259cfd882c0164dec03eb8e84c85b742
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa01-entapi.spectrummobile.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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