*.stage-spectrum.net

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0f:f2:52:b7:6a:fb:8e:ee:03:19:d2:f5:d5:46:d3:b9 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.stage-spectrum.net

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:f2:52:b7:6a:fb:8e:ee:03:19:d2:f5:d5:46:d3:b9
Serial Number (int): 21196633465989932315384977159015027641
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a4:a1:9c:89:1a:6e:46:d8:04:f4:00:db:80:c8:1a:52:ca:f5:5c:9b
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 2e:de:9b:ee:da:0c:17:d2:b9:19:a2:eb:92:47:33:ae:35:1b:11:6a
Fingerprint (sha256): 34:ba:32:3e:69:b7:d4:c7:5d:d2:9a:50:36:8c:dc:06:fb:98:52:a9:d7:15:8d:ec:d4:98:56:02:35:90:34:9d

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.stage-spectrum.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.stage-spectrum.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.stage-spectrum.net
*.stage-spectrumbusiness.net

Other certificates including the domain name stage-spectrum.net

(limited to 100 certificates)
privacy.portals.stage-spectrum.net
pci.stage-spectrum.net
*.eos.stage-spectrum.net
*.eos.stage-spectrum.net
pci.stage-spectrum.net
stage-spectrum.net
sdptpsiproxyvip.charter.com
stage-spectrum.net
*.stage-spectrum.net
*.portals.stage-spectrum.net
stage-spectrum.net
*.stage-spectrum.net
sdptpsiproxyvip.charter.com
stage-spectrum.net
*.spectrum.net
drupal-cms.stage-spectrum.net
sdptpsiproxyvip.charter.com
api.spectrum.net
*.portals.stage-spectrum.net
*.eos.stage-spectrum.net
stage-spectrum.net
*.stage-spectrum.net
tveauthn.spectrum.net
*.stage-spectrum.net
sdptpsiproxyvip.charter.com
*.eos.stage-spectrum.net
stage-spectrum.net
wifiprofile.stage-spectrum.net
stage-spectrum.net
sdptpsiproxyvip.charter.com
stage-spectrum.net
api.spectrum.net
stage-spectrum.net
troubleshooting.stage-spectrum.net
*.stage-spectrum.net
tve.spectrum.net
*.eos.stage-spectrum.net
drupal-cms.spectrum.net
pci.stage-spectrum.net
stage-spectrum.net
advisor2.stage-spectrum.net
api.spectrum.net
troubleshooting.stage-spectrum.net
*.portals.stage-spectrum.net
tve.spectrum.net
*.spectrum.net
api.spectrum.net
*.portals.stage-spectrum.net
sdptpsiproxyvip.charter.com
*.stage-spectrum.net
stage-spectrum.net
*.stage-spectrum.net
stage-spectrum.net
device.cm.stage-spectrum.net
*.stage-spectrum.net
drupal-cms.stage-spectrum.net
pci.stage-spectrum.net
cm-policy.cm.stage-spectrum.net
stage-spectrum.net
*.stage-spectrum.net
stage-spectrum.net
*.portals.stage-spectrum.net
tve.spectrum.net
advisor2.stage-spectrum.net
drupal-cms.prd.spectrum.net
*.stage-spectrum.net
stage-spectrum.net
general-stage-wildcard.stg.spectrum.net
stage-spectrum.net
*.eos.stage-spectrum.net

Certificate

The complete raw certificate details for *.stage-spectrum.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRT74H2mg2PqcqhC09TD
Qo2GybIxrsLZcdAQygtM5I3Ux88vfJuW72/nbT/atJ53DBVU0NTGOTIShfufqMyV
MteoUabFEHO4sYQDt/xwCMRhApmNYK9ce4FmKvn8ye1oEyYZ5WOxbVVgrIFY7Y0T
KsuZQ1uuoOo87n0lGZqBJuQw8QELUQYHF0elLx/EsLLWp4NxDhJDD4Up1/xP7XWE
HtyE78s8FTDpeNZ2ttD/dOE4v9HG2sPqrDB9D4oOcCtjeX1Ar5odH8hz6ATX1phL
yEb8hA7v7E5ucBzLJjN2/KSLd9dJzxNp0kK2Mbqh2NrEb8Ps6+lS5g2IOsOBbWua
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21196633465989932315384977159015027641
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.stage-spectrum.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20839667863291929067991482957639459760772306521406746178734901871770917417076493620128253237238486686219497995351688544705745401613689247153895492770682635331824192485383776292247543289694079418009729838695212153380553518666923373053328464445627352894201543015890418323208568348924742068283365796137270660227093257059451197243033239665990738973743987769816965995617180420769728551476693813542873643343287649577777859153445956046877627357410978187452235627747847158751547477987575925713770284849058226633719862817562223775098210205189746814258746657715990635586326909906333655366725638322318853907449911350050887014991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a4a19c891a6e46d804f400db80c81a52caf55c9b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage-spectrum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage-spectrumbusiness.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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