moderator.cfer.com

- Level 3 Communications, Inc -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 1f:b1:d6:fd:dc:fa:69:a8:8c:cc:08:36:50:60:17:17 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Level 3 Communications, Inc

Organization: Level 3 Communications, Inc
Organization unit: GTI
State / Province: Colorado
Locality: Broomfield
Country: US

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:b1:d6:fd:dc:fa:69:a8:8c:cc:08:36:50:60:17:17
Serial Number (int): 42129464962062786689894823796366382871
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 6d:af:6c:86:8c:6c:5e:83:57:ea:38:a0:dc:b9:e8:7d:2e:c7:7f:1a
Fingerprint (sha256): 2a:2a:99:36:96:ab:00:77:cb:d3:61:65:63:c2:e2:66:3f:f6:75:e6:8e:e8:be:6e:19:4f:ba:6d:47:90:05:bb

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate moderator.cfer.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for moderator.cfer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

moderator.cfer.com

Other certificates including the domain name cfer.com

(limited to 100 certificates)
enrollment.cfer.com
opal.cfer.com
ecd.lumen.com
conf-cert.cfer.com
moderator.cfer.com
opal.cfer.com
capi.cfer.com
wbx1.cfer.com
moderator.cfer.com
ecd.cfer.com
ecd.cfer.com
iwr.cfer.com
conf.cfer.com
capi.cfer.com
capi.cfer.com
gclm.cfer.com
conf.cfer.com
opal.cfer.com
moderator.cfer.com
collaboration-sso.cfer.com
capi.cfer.com
capi-cert.cfer.com
confsummary.cfer.com
moderator.cfer.com
conf.cfer.com
iwr.cfer.com
enrollment.cfer.com
moderator.cfer.com
capi-cert.cfer.com
conf-cert.cfer.com
capi-cert.cfer.com
iwr.cfer.com
moderator-cert.cfer.com
ecd.level3.com
capi-sb.cfer.com
opal.cfer.com
moderator-cert.cfer.com
collaboration-sso.cfer.com
iwr.cfer.com
iwr.cfer.com
moderator-cert.cfer.com
moderator-cert.cfer.com
capi-sb.cfer.com
g8.cfer.com
iwr.cfer.com
calendar.cfer.com
moderator.cfer.com
training.iwr.cfer.com
conf.cfer.com
conf.cfer.com
opal.cfer.com
gclm.cfer.com
conf.cfer.com
moderator-island-idc.cfer.com
iwr.cfer.com
opal.cfer.com
enrollment.cfer.com
moderator.cfer.com
collaboration-sso.cfer.com
autorecord.cfer.com
iwr.cfer.com
ecd.cfer.com
enrollment.cfer.com
moderator.cfer.com
opal.cfer.com
emeetingapi.cfer.com
capi-cert.cfer.com
collaboration-sso.cfer.com
capi-cert.cfer.com
livemeeting.cfer.com
autorecord.cfer.com
livemeeting.cfer.com
moderator-cert.cfer.com
capi-cert.cfer.com
livemeeting.cfer.com
enrollment.cfer.com
collaboration-sso-cert.cfer.com
ecd.cfer.com
ecd.cfer.com
moderator.cfer.com
ecd.cfer.com
collaboration-sso.cfer.com
conf.cfer.com
enrollment.cfer.com
conf.cfer.com
moderator-island-idc.cfer.com
autorecord.cfer.com
capi.cfer.com
conf.cfer.com
autorecord.cfer.com
capi.cfer.com
capi.cfer.com
gclm.cfer.com
g8.cfer.com
iwr.cfer.com
collaboration-sso.cfer.com
ecd.cfer.com
enrollment.cfer.com
ecd.cfer.com
enrollment.cfer.com

Certificate

The complete raw certificate details for moderator.cfer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK2U9bcoPBaabnPF9g41
y4fqC4eUx8zgW8a0ZdPrO0q7jx9JinIaXwtMcUYy2ObPp3/bpF0GQqxHWP1tU4C7
Q6LaNzujcbQ3+Dhf+O3Yh5z7B8rfUnIXdUgWpGBXOHQ1H8i0CWHPUSQVbpuJpHbY
PFjJFTFDdLQFrhcGjkaV9WIegB9cdw6gFRTLemy/VL65B2xLq8BCg8uP5SGwaAfq
mXwjlThfqeDV4SvrJJ41dFe75xOM5J7GOuHRIUBvBRksVArx5AQAX4UtqO3/mWmL
IJ0I9wd12ashAmXvfRfyUurXWdreTF+h5ANozJB2eURAEDeoFORRXNKm4PxWPZbm
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 42129464962062786689894823796366382871
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Colorado'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Broomfield'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Level 3 Communications, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'GTI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'moderator.cfer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25838210625525298439534153810438209967811247522748220788203070126376765460767608091365368063603231036040286370430696407894254425462348254214451593182711690304317811102550737992970066815905366458778964250665937478848184290864668022618825897350406854429005863866952115067021208392804911483783305936542303992684070954092511778486868374462088653803275224800374808434372600784642188197124481077484312295726820956327330505749658744222904178579116291746319998029860052569107698640706014106499470088700867707452395444556469115411467270777286172218173443168058124405140241401548975788736643423258023335435021678476907997750861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moderator.cfer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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