clearpass.twtelecom.com

- tw telecom inc. -

Issued by DigiCert Secure Server CA

About this certificate

This digital certificate with serial number 09:f8:e2:32:07:96:49:8d:52:74:25:8a:71:fe:22:49 was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

tw telecom inc.

Organization: tw telecom inc.
State / Province: Colorado
Locality: Denver
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:f8:e2:32:07:96:49:8d:52:74:25:8a:71:fe:22:49
Serial Number (int): 13255329371307512380119707207541334601
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2c:33:d2:b5:0d:81:b2:11:73:60:40:1a:f5:3f:6f:db:0e:89:59:a3
AuthorityKeyId: 90:71:db:37:eb:73:c8:ef:dc:d5:1e:12:b6:34:ba:2b:5a:a0:a6:92

Fingerprint (sha1): 76:81:a2:7b:f7:22:f6:b0:09:13:06:02:6e:39:59:60:99:08:c3:d4
Fingerprint (sha256): 23:c9:4b:1d:bb:ea:ef:f3:1c:e6:95:07:31:79:8b:e3:c6:8e:2c:93:24:60:09:09:65:6a:7f:88:18:77:e7:2a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-g5.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-g5.crl

Check the revocation status for certificate clearpass.twtelecom.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clearpass.twtelecom.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clearpass.twtelecom.com
wifi.twtelecom.com
srvcppm1.twtelecom.com
srvcppm2.twtelecom.com

Other certificates including the domain name twtelecom.com

(limited to 100 certificates)
PICCARE.TWTELECOM.COM
Securemail.twtelecom.com
ddos.twtelecom.com
ocsfarm.twtelecom.com
myportal.level3.com
clearpass.twtelecom.com
agents.twtelecom.com
SIP.TWTELECOM.COM
sandbox.twtelecom.com
assets.level3.com
sandbox.twtelecom.com
tw-captiveportal.twtelecom.com
im.twtelecom.com
EMAIL.TWTELECOM.COM
*.twtelecom.com
im.twtelecom.com
customerportal.twtelecom.com
sandbox.twtelecom.com
developer.twtelecom.com
EMAIL.TWTELECOM.COM
ocsfarm.twtelecom.com
*.twtelecom.com
email.twtelecom.com
customerportal.twtelecom.com
Director.Twtelecom.com
b2b.twtelecom.com
EMAIL.TWTELECOM.COM
api.twtelecom.com
api.twtelecom.com
billing.twtelecom.com
email.twtelecom.com
clearpass.twtelecom.com
customerportal.twtelecom.com
remote.twtelecom.com
ADFS.TWTELECOM.COM
Lync.twtelecom.com
assets.level3.com
email.twtelecom.com
billing.twtelecom.com
assets.level3.com
*.twtelecom.com
billing.twtelecom.com
webconf.twtelecom.com
sslvpn.twtelecom.com
webconf.twtelecom.com
myportal.level3.com
sso.twtelecom.com
EMAIL.TWTELECOM.COM
sip.twtelecom.com
sslvpn.twtelecom.com
*.twtelecom.com
legacy.twtelecom.com
ADFS.TWTELECOM.COM
EMAIL.TWTELECOM.COM
PricingModule.twtelecom.com
sip.twtelecom.com
Director.Twtelecom.com
www.twtelecom.com

Certificate

The complete raw certificate details for clearpass.twtelecom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TXiIYHETf0PnTDej2EF
n2w6uZESsg55oDYUUoEV6cFmxTOg+Y6JMX1Hwp65oACYPCqQKFR25w/ebgJA2wul
LUMKpUgdCcgp9nQAzESE8zXvaTZNw9ylwyE/w0a2LiTQhV7Aw1cCw19XMqccdM5t
20j74ZedxUJl7e9fwsHMrviG+iM8qpU1yTvu7RAE44fZmxDB1g3ZpXtPK3W6c13y
5Q3PyNYcu7r1re4/xjXWOOYWV7p7iYLBunIEnn185PjPUDvwaN7cCr8kSn/+pxX/
uuBW7hwoswnPHAAWzyJfN2dORdgsNXF0L0dkBfpWKy0f0zl0aoPDLeDp2ZyYpVAZ
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13255329371307512380119707207541334601
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colorado'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Denver'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tw telecom inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clearpass.twtelecom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26915329815033224851553512663396483624989211107737517682333799886121052976966398358385354019449459943403696036429123157860319058610231981877182947101546668796429145291929444457811511368843237888080381637341748732269093339665191307546412832632081822366416617983050132813408229982734033378100821538931837558579612395218028349043804419993737327377024997574672586016914719243335354154996732112136329001081013844756930545507198325373829016184553222185600088291924820770354717858701727261366240368059998564104935328819722728423654182480246899853664904234011675565022622794077027827218080279565693926850927300770025700334029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9071db37eb73c8efdcd51e12b634ba2b5aa0a692
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2c33d2b50d81b2117360401af53f6fdb0e8959a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearpass.twtelecom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wifi.twtelecom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srvcppm1.twtelecom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srvcppm2.twtelecom.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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