sugar.wavebroadband.net

- WaveDivision Holdings, LLC -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 06:14:f6:65:89:8d:fc:66:8b:50:78:1d:aa:07:a3:83 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

WaveDivision Holdings, LLC

Organization: WaveDivision Holdings, LLC
State / Province: Washington
Locality: Kirkland
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:14:f6:65:89:8d:fc:66:8b:50:78:1d:aa:07:a3:83
Serial Number (int): 8084211429258200855666011696129352579
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: fe:2f:08:0e:06:52:fc:12:82:34:69:f8:3f:4c:2c:51:93:10:f3:33
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 81:d3:a2:02:f6:3d:c3:2a:2c:f2:79:f7:76:db:0e:53:22:99:2d:14
Fingerprint (sha256): 4c:65:7a:a9:cb:1f:d9:29:c4:9d:77:80:d7:59:cb:ee:aa:20:bb:30:4e:b8:7a:a9:19:70:a9:61:20:c6:9c:4d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate sugar.wavebroadband.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sugar.wavebroadband.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sugar.wavebroadband.net

Other certificates including the domain name wavebroadband.net

(limited to 100 certificates)
intranet.wavebroadband.net
ctx.wavebroadband.net
help.rts.bz
intranet.wavebroadband.net
sugar.wavebroadband.net
tbi.wavebroadband.net
anchorline.wavebroadband.net
mysites.wavebroadband.net
sugar.wavebroadband.net
osp.wavebroadband.net
assist.alnafitha.com
intranet.wavebroadband.net
*.wavebroadband.net
help.rts.bz
ctx.wavebroadband.net
sspr.wavebroadband.net
prdassfbrp001.wavebroadband.net
assist.wavebroadband.net
help.rts.bz
help.rts.bz
oos.wavebroadband.net
tbi.wavebroadband.net
access1.wavebroadband.net
*.wavebroadband.net
ctx.wavebroadband.net

Certificate

The complete raw certificate details for sugar.wavebroadband.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8084211429258200855666011696129352579
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kirkland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WaveDivision Holdings, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sugar.wavebroadband.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 762079869639411138449200056570806312970166074428083324432158904778285427678841249475951546303078465297354071339411255863713858879622967338811335159842466311428341466203086769493922979829731391812586714664766270138715675897358291476979040237088045881269560368177853417246210405142640133655405249610423465765883722544494852782398004682926835232526325433452529249219249357731482182423266588898295648007360830093795107184225702117887882417337004547081076914687670578216714463301068325475457702787777728818973787054513914490963349428973247067293718725445498722558136019628301807435502020849311244062612639310212892527480269672497793152129917094807591333013165431974328401198083920537515074362808544779165650585822552036225227930429487026432722901803678413747290091638184138320391934822502524429957347307003949791917745721184936637883084070538355106707884030869381164463819399502254273105900696173618892485590249864368718809788370948390929282524252556900082909958074503445334283248488212950650501830139256121014103378462858348978202785443410054559173624408083794460873295823862243108391039817036184399038112352202693064938817617955718863788337069367836788424234538680090406762387992606496728657631545786167094183339550754932538599536052931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe2f080e0652fc12823469f83f4c2c519310f333
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sugar.wavebroadband.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005d0ff9f09e8913fcac273e534aa915aac92c3314ff0b5d51f737c1bb5106c4fe1ed30a17f2bf03ec09a2e039ea1c97045310824a08200c981b0e9ede717e22d7cc24084d63d709795da11f3210ae086f63a6aa2f795ae39aebda030d3857291848465c9b74eabb16f914e0e9a8d03f76cad871a539bb3164edeb506cf7221e216a7497c34b51cbfcd1ea12a469c645315a0f3b81a2705750bacfb52422b0403c58c4c2b904532b6d9b7e1e90c20a29205f913292e6e8d2dcb7334339fc8ef4ba29b2da82d4aa5904d51acdb3dd85e568203c00a02471c87b9ffe1e0c5c8fb7020be4495ff94b92312dc45db4ce5d59a110cd5c8ab3fbc9a56b5cbc14c1889a5d