recom.chartercom.com

- Charter Communications Holding Company LLC -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 44:18:d4:e7:e1:5f:0d:f1:23:16:25:91:c3:8b:87:58 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Charter Communications Holding Company LLC

Organization: Charter Communications Holding Company LLC
Organization unit: Charter Communications Holding Company LLC
State / Province: Missouri
Locality: St. Louis
Country: US

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 44:18:d4:e7:e1:5f:0d:f1:23:16:25:91:c3:8b:87:58
Serial Number (int): 90516437080269671171359351789748717400
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): dc:1e:cd:cc:dc:e9:bb:ce:fa:34:26:58:a0:2e:97:a9:58:d8:6b:e8
Fingerprint (sha256): 15:3d:bc:82:92:2a:fe:c9:d9:47:ff:34:6b:fe:64:2a:a6:66:75:41:87:d7:ec:5e:c9:9f:d6:ef:8f:ed:71:91

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate recom.chartercom.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for recom.chartercom.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

recom.chartercom.com

Other certificates including the domain name chartercom.com

(limited to 100 certificates)
scoreuat.chartercom.com
issuetrakQA.corp.chartercom.com
prvbas2b.twcable.com
issuetrak.chartercom.com
webvpn.chartercom.com
files.chartercom.com
scoreuat.chartercom.com
coin.chartercom.com
realworxvala.chartercom.com
ucchub.chartercom.com
files.charter.com
prvpas1l.twcable.com
realworxwi1.chartercom.com
carswebq-usr.corp.chartercom.com
wlc01smfrct.corp.chartercom.com
realworxwi2.chartercom.com
esbprovqa.corp.chartercom.com
oms-stg.chartercom.com
tqa.chartercom.com
files.chartercom.com
vrf-api-dev.chartercom.com
charterbusiness-uat.chartercom.com
EP1.corp.chartercom.com
tqa.chartercom.com
coin.chartercom.com
vrf-api-dev.chartercom.com
sharepoint.charter.com
techmobile-foss.chartercom.com
edw.chartercom.com
isp-assist.chartercom.com
prvpas2c.twcable.com
EU1.corp.chartercom.com
sdpesat-dr.corp.chartercom.com
sharepointappsdr.charter.com
ent-api.charter.com
ED1.corp.chartercom.com
amrlca.corp.chartercom.com
git.corp.chartercom.com
ucmuat.chartercom.com
eqatest.chartercom.com
uimsdpr-global.corp.chartercom.com
vrf-api.chartercom.com
kstllcmdu01.corp.chartercom.com
sopt02.chartercom.com
osmsdpr.corp.chartercom.com
citrixweb.spectrumreach.com
granite-dev.chartercom.com
bacclite.chartercom.com
prism-tdb-uat.corp.chartercom.com
bisws-a.corp.chartercom.com
jiratest.corp.chartercom.com
sharepointdr.charter.com
tms-uat.corp.chartercom.com
isp-assist.chartercom.com
files.charter.com
recom.chartercom.com
sharepointappsdr.charter.com
esbprovr-blue.corp.chartercom.com
cppt04.chartercom.com
cars-qa-web-usr.corp.chartercom.com
CORPortal.corp.chartercom.com
cat.corp.chartercom.com
uimsdpr.corp.chartercom.com
prvhas2l.twcable.com
tms-uat.corp.chartercom.com
recom-dev.chartercom.com
EP1.corp.chartercom.com
mstr9uat.chartercom.com
nce-isp-app-01.corp.chartercom.com
cissolosynch-uat.corp.chartercom.com
mobileretail-xcenter-uat.chartercom.com
chartercert.chartercom.com
techmobile.chartercom.com
srvc-entapi.corp.chartercom.com
jamf.charter.com
cppt04.chartercom.com
irisweb-usr.corp.chartercom.com
apv.corp.chartercom.com
corp-vpn.chartercom.com
vm0pwnetbra0002.corp.chartercom.com
corp-vpn.chartercom.com
corportal.corp.chartercom.com
prvpas1i.twcable.com
prvhas1f.twcable.com
osmsdp.corp.chartercom.com
ctap-uat.chartercom.com
prvhas1c.twcable.com
collections-uat.chartercom.com
eqa.chartercom.com
coin.chartercom.com
prvhas1c.twcable.com
tqa.chartercom.com
cppt02.chartercom.com
spt01.chartercom.com
files.chartercom.com
coin2010uat.chartercom.com
realworxvala.chartercom.com
prvbas1c.twcable.com
sopt02.chartercom.com
files.chartercom.com

Certificate

The complete raw certificate details for recom.chartercom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mX8HQb5yPvG1Iq6I+rG
Wpjj2THS34JfR79aLG045oAel+1TdZcoCzz3miZLSuKVkfW6lRrPiACcXaTqmZh5
BURwLe/AbqOO1NcncWDME1jX3ttb5jcGPVCVEK6pc8S0rcawR4WZyxVFFAMViahg
9aPaernTEw1uZQZ5AeSIfeaL4tXWnzKIVCJnZr5tV5NbMCnVE2lpHUzt9wFevL9K
522k08EDVqP9r1RyJcWYv2vPXU3nyYxq9UHMVhEoFviJ7SPUceJL3riLtB/AFnSQ
oKi/EerGD24dIj4rQ9HeYn8v/jMw4nMQ8S2KP6yBi3IC8jt324bhY5svo4mivjQC
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 90516437080269671171359351789748717400
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Missouri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'St. Louis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Charter Communications Holding Company LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Charter Communications Holding Company LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'recom.chartercom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27570241070673347178124113868827079664920187104545131130497008949283066317366255608029906966123576434977137457931074145253729915127287532167282428497708999295393040213965494754066534527839226208665243270461680867525020624763209322063046619129480807831784293888479419827081566180752294750404995463813697836588132370152083309827332846592800549439274138319240929783271082846812851246819790960162401470462341098544405472696209059236597286582921953935230553905411057431079307754845908379205407379789689344300802667135907309796781997502923845476365126800173880212045455121964176492689351615162198133909172229052548091478711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recom.chartercom.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002a946eef9df31a41aead1396af1c7bff2f9914ddb9a1dae29f5536dc93ada7d8f002a25ae57634f69683d848549ecdabdf3ff65aaf6c9b1e986a95265be32c7c8c58f2e9ad9236fc25bb8dcfa97e0ef7a15c85abc07aa559d9d6b3c81a3aae27c9e4fa4b9a736f52ff0e15c7be2be7a1fc77cf5fc268195753353dd17b8c83e077b160eb04ab0f1d4f66a999fd0a2bfb801ac3c46f04654aed8331aa69b3ea01bd1fd877d71f340ee046bac5fc88920017a49b92db81d1778eaeac6c2565e576844233e4cdd75ebbd78f4cd77f26317e07fd23f63cfcd24a6028a71d260245df1014667c10d0a3b8043ef964df78c256aebf6e070e8f49a89c037fc7fa07d89f