support.elauwit.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ba:9f:5f:85:81:86:bf:6e:77:80:9e:69:42:70:2c:2a:bf was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=support.elauwit.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ba:9f:5f:85:81:86:bf:6e:77:80:9e:69:42:70:2c:2a:bf
Serial Number (int): 324841221269929269244300407398825460509375
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6a:e5:b4:a7:e6:a0:5b:ed:c6:97:5d:7c:97:a5:f2:f2:2f:b2:cd:67
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 03:06:d5:fe:28:ae:0b:bc:4e:e9:a2:84:97:e3:64:69:3d:e7:7d:3a
Fingerprint (sha256): 42:a0:6c:33:a6:38:68:a2:98:ec:5b:b4:97:c4:06:32:b1:70:d5:26:7e:28:b6:73:c9:ba:97:d8:4f:4f:35:e4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate support.elauwit.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for support.elauwit.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

support.communitywifi-ep.cox.com
support.elauwit.com
support.mainstream.elauwit.com
support.sol.elauwit.com
support.twc.elauwit.com
support.xfinity.elauwit.com

Other certificates including the domain name elauwit.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for support.elauwit.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324841221269929269244300407398825460509375
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-25 23:38:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-24 23:38:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'support.elauwit.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 770903806280061759375856109327418276091561848124386971700292302618807249477073246637572090276996444917067122653566185436876492568194511414460318508459268950440134743723445131196529052918141102944019610467717034714583265551059152672386069285593467869768851120133269876778887965916825697774789821592074144278621906404876674142753781036792843405671148851618317761409326293199435866399504772364642343649809372042020081678158326461824240470425484591920762427999741577688355254533710169766710766619186304829544080211709331666961353605598697758995465741371502982610508937938919931295719598134204966748172295817872331918457262322962602521410986909079173870133180365501833587383460001400502512700380266802209669243076925251627081278261671617963668740245265953391834046762669720156265126276113000207509641007568377762240305443415696930426058291116080742649857727648200330688116285913441029840387897181788920419127950969685578395911227341119633214759510446733845039896956416063277082853232561574767603136523417432041578912583390198335087603885017223225934965672606055367803881503741708272667894983077962107804038683756081841717808499051158316339422614929687869063645931301100972027382122944481109944651031464621450745199775164239350299028012001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ae5b4a7e6a05bedc6975d7c97a5f2f22fb2cd67
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.communitywifi-ep.cox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.elauwit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mainstream.elauwit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.sol.elauwit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.twc.elauwit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.xfinity.elauwit.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016613501f40000004030047304502210089367d5fd6745593c9b3f8cc4bba8c39769731b3c9b4c5308bf737b7faa7a56f022056998d6d831e84b4bad20a7dbc08a72fbd78900a7c2c02239aa715b106b18bb4007700a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a250000016613501f190000040300483046022100e7809249952b61d07e3ded5b383817aad0f883c2b16e7993ce79e7ab108b2c97022100ca3d8a857b3ee665cd09d33f6db66b5046129acd323610b5f1e1992e048fdadc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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