cms.prd-aws.spectrumbusiness.net

- Charter Communications -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 7a:46:37:88:24:86:2b:0d:28:c0:d0:d2:ee:c7:e1:6f was issued on by thawte, Inc..

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Charter Communications

Organization: Charter Communications
State / Province: Missouri
Locality: Saint Louis
Country: US

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7a:46:37:88:24:86:2b:0d:28:c0:d0:d2:ee:c7:e1:6f
Serial Number (int): 162530402584719136927984621615929876847
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): d6:ee:cb:77:7c:92:11:c7:d3:37:5b:e9:e5:bc:67:76:bf:2c:cb:92
Fingerprint (sha256): 6d:93:3f:c1:3f:e8:7f:af:4a:62:e9:da:59:ad:2e:7a:fd:d0:eb:dd:29:97:7f:d5:4b:9e:b4:af:54:81:bb:b1

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate cms.prd-aws.spectrumbusiness.net

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cms.prd-aws.spectrumbusiness.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cms.stage-spectrumbusiness.net
cms.engprod-spectrumbusiness.net
cms.dev-spectrumbusiness.net
cms.prd-aws.charter.net
cms.stage-charter.net
cms.aws.charter.net
cms.dev-charter.net
cms.lbf.dev-charter.net
cms.prd-aws.spectrumbusiness.net

Other certificates including the domain name spectrumbusiness.net

(limited to 100 certificates)
east.phone.spectrumbusiness.net
*.portals.spectrumbusiness.net
north.phone.spectrumbusiness.net
south.phone.spectrumbusiness.net
*.spectrumbusiness.net
*.spectrumbusiness.net
xspca08.hv.rr.com
east.phone.spectrumbusiness.net
phone.spectrumbusiness.net
enwd02.phone.spectrumbusiness.net
cms.prd-aws.charter.net
enwd01.phone.spectrumbusiness.net
phone.spectrumbusiness.net
enwd02.phone.spectrumbusiness.net
phone.spectrumbusiness.net
*.spectrumbusiness.net
east.phone.spectrumbusiness.net
east.phone.spectrumbusiness.net
phone.spectrumbusiness.net
xspca08.hv.rr.com
phone.spectrumbusiness.net
*.spectrumbusiness.net
enwd02.phone.spectrumbusiness.net
xspca07.hv.rr.com
*.spectrumbusiness.net
self-care.portals.spectrum.net
pci.spectrumbusiness.net
enwd01.phone.spectrumbusiness.net
*.spectrumbusiness.net
*.spectrumbusiness.net
pci.spectrumbusiness.net
phone.spectrumbusiness.net
*.spectrumbusiness.net
*.spectrumbusiness.net
enwd02.phone.spectrumbusiness.net
smbucep02.hv.rr.com
cms.prd-aws.spectrumbusiness.net
*.portals.spectrumbusiness.net
*.spectrumbusiness.net
*.spectrumbusiness.net
*.spectrumbusiness.net
enwd01.phone.spectrumbusiness.net
*.spectrumbusiness.net
smbucep01.hv.rr.com
west.phone.spectrumbusiness.net
north.phone.spectrumbusiness.net
*.spectrumbusiness.net
pci.spectrumbusiness.net
*.portals.spectrumbusiness.net
pci.spectrumbusiness.net
*.prd.spectrum.net
enwd02.phone.spectrumbusiness.net
xspca07.hv.rr.com
south.phone.spectrumbusiness.net
south.phone.spectrumbusiness.net
apo.spectrum.net
east.phone.spectrumbusiness.net
*.spectrumbusiness.net
south.phone.spectrumbusiness.net
*.spectrum.net
*.portals.spectrum.net
*.spectrum.net
*.spectrumbusiness.net
pci.spectrumbusiness.net
pci.spectrumbusiness.net
phone.spectrumbusiness.net
south.phone.spectrumbusiness.net
east.phone.spectrumbusiness.net
*.spectrumbusiness.net
south.phone.spectrumbusiness.net
general-stage-wildcard.stg.spectrum.net

Certificate

The complete raw certificate details for cms.prd-aws.spectrumbusiness.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xOPuXqI7oxoFwc+kU2l
9mR1D/TZm6BNcj7PzqWLrswz5fvVMzCvB8oAyEKPXS2ZnUDilWXwHw4p3yjNDRkn
P7LphfLoKEU49XeuUFxANEE8ESpoKnLI8M5bzdn/avzKKffvooMAP1Rkh/A7W3Xo
4Zj1E+yrgpzMU2NzI4xMfnW9ZQD7PaWv4HKpGBxejSu33wUjmeGtF2Qt9W+1TxbJ
nty1pX49KkBXbRMkQBD9ruY5yqvLiyCss/VQkGpXXkiSALh/+61iu/QUug2zJB4G
H0mY2weCTJtD67v1tXvyYlaz4ReYDTZWTy4xvOOOWEnRdJBY0fDUXopvFm3akhZR
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 162530402584719136927984621615929876847
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Missouri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Saint Louis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Charter Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'cms.prd-aws.spectrumbusiness.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29170694544814222902965566513835886370019863323351828770723488575321378165635537001013257149697920267099524769710514854318600754105552038453563636451393178492782830107705421579723762443925933975667904626717995462398991150486778192318779963136429809707985998544712353299963838903042995658591428017724467598870515791489031401111328257353933906016628123747484143723817114012325338644187221712686438005776743496986272946446473375219376847428926295976625228551241988849759832572897298372412824228023595924765222362815839354262948412796656578814779801219200346465737227875200620453510534565145538225468693694062115708883287
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (248 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.stage-spectrumbusiness.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.engprod-spectrumbusiness.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.dev-spectrumbusiness.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.prd-aws.charter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.stage-charter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.aws.charter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.dev-charter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.lbf.dev-charter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.prd-aws.spectrumbusiness.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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