api-oauth-nce.spectrummobile.com

- Charter Communications Operating, LLC -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0e:aa:b6:67:db:47:cb:1c:e3:97:02:be:ec:5e:52:c1 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Charter Communications Operating, LLC

Organization: Charter Communications Operating, LLC
State / Province: Missouri
Locality: St. Louis
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:aa:b6:67:db:47:cb:1c:e3:97:02:be:ec:5e:52:c1
Serial Number (int): 19495582033852356548119058665755792065
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b3:44:fa:bd:b8:0d:3b:8e:e4:c4:bc:a4:6c:a6:ee:04:d6:1b:63:ac
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): cd:26:61:28:bb:69:cb:81:85:e5:bd:cd:c8:72:ca:4d:57:ae:c3:80
Fingerprint (sha256): 88:5f:21:2a:36:b6:94:b5:7c:6d:b6:c4:54:86:e2:6b:54:bc:40:da:17:73:ce:51:53:f4:66:d7:3c:e7:6c:49

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl

Check the revocation status for certificate api-oauth-nce.spectrummobile.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api-oauth-nce.spectrummobile.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-oauth-nce.spectrummobile.com

Other certificates including the domain name spectrummobile.com

(limited to 100 certificates)
mobileapi.spectrummobile.com
mobileapi.spectrummobile.com
buy.spectrummobile.com
spectrumtvchoice.com
int-api-nceb.spectrummobile.com
buy-uat.spectrummobile.com
spectrumtvchoice.com
buy-dev1.spectrummobile.com
spectrumtvchoice.com
mobileapi-uat.spectrummobile.com
Portal-api.spectrummobile.com
spectrumtvchoice.com
spectrumtvchoice.com
qa01-entapi.spectrummobile.com
buy.spectrummobile.com
buy.spectrummobile.com
api-nceb.spectrummobile.com
buy-uat.spectrummobile.com
spectrumtvchoice.com
mobileapi-uat.spectrummobile.com
spectrumtvchoice.com
sit.amdocs.spectrummobile.com
api-ncwa.spectrummobile.com
spectrum.com
spectrumtvchoice.com
dev2.amdocs.spectrummobile.com
buy.spectrummobile.com
dev1-entapi.spectrummobile.com
spectrum.com
uat1-entapi.spectrummobile.com
spectrumtvchoice.com
mobileapi-dev2.spectrummobile.com
spectrumtvchoice.com
retail.spectrummobile.com
uat1-entapi.spectrummobile.com
spectrum.com
spectrum.com
srvc-api-nce.spectrummobile.com
Hotfix-entapi.spectrummobile.com
spectrum.com
spectrum.com
buy.spectrummobile.com
srvc-api-ncw.spectrummobile.com
int-apib.spectrummobile.com
int-api.spectrummobile.com
mobileapi-sit.spectrummobile.com
portal-api-nce.spectrummobile.com
uat2-entapi.spectrummobile.com
spectrumtvchoice.com
buy.spectrummobile.com
retail.spectrummobile.com
uat2-entapi.spectrummobile.com
spectrumtvchoice.com
spectrumtvchoice.com
sit-entapi.spectrummobile.com
dev1-entapi.spectrummobile.com
mobileapi-sit.spectrummobile.com
dev.amdocs.spectrummobile.com
int-api-ncwb.spectrummobile.com
spectrumtvchoice.com
buy.spectrummobile.com
spectrum.com
spectrumtvchoice.com
spectrumtvchoice.com
mobileapi-uat.spectrummobile.com
spectrumtvchoice.com
buy.spectrummobile.com
portal-api-ncw.spectrummobile.com
dev.amdocs.spectrummobile.com
spectrumtvchoice.com
mobileapi.spectrummobile.com
api-ncea.spectrummobile.com
spectrumtvchoice.com
mobileapi.spectrummobile.com
buy.spectrummobile.com
api-oauth-nce.spectrummobile.com
mobileapi-dev2.spectrummobile.com
spectrumtvchoice.com
elastic-api-nce.spectrummobile.com
int-apia.spectrummobile.com
sit.amdocs.spectrummobile.com
spectrumtvchoice.com
spectrum.com
dev1-entapi.spectrummobile.com
spectrumtvchoice.com
qa1-entapi.spectrummobile.com
mobileapi.spectrummobile.com
buy.spectrummobile.com
buy.spectrummobile.com
spectrum.com
spectrumtvchoice.com
buy.spectrummobile.com
mobileapi.spectrummobile.com
spectrumtvchoice.com
official.spectrummobile.com
qa2-entapi.spectrummobile.com
spectrumtvchoice.com
uat2-entapi.spectrummobile.com
official.spectrummobile.com
spectrum.com

Certificate

The complete raw certificate details for api-oauth-nce.spectrummobile.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+zmpJRD0lgcc8s5oGS3
HBYHmNly1O6JZxNFnscI5CC3WK+OE+MNJNX7IKIySxSuhog6mFrFtDx68PKPv0JC
mu8AAfZBx5t8BJOTib5g3pbERKvp8eeWydcSsjng7rP/opWSYZawpIgRfo9ItTeI
hLj8elE1l7jBNIKpGM/MS13/X3QQ5ZkmBhqbaDPvcKbHAXY45OAPEDZGExjy6tTr
C2cajY1LgTIGp7erkV0KpxT8CJhD8hb4lwm4mh58vQa2YZuYhl1uzaSabknfjdZx
CGLUzrmzI1izw4VNKrYON5sBrkUbqS8+7MxTveBnNBcIClw6flZWEanCgGF0OIVF
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19495582033852356548119058665755792065
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Missouri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St. Louis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Charter Communications Operating, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-oauth-nce.spectrummobile.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21703570360987712783259414370734428573192953965601336456462487159932531212342894589146858045153704176413397572008726896406488257220569123722640923016618191263888225799288637207823978039213736905193421689565524006128434927038038772563592579053150999737831110475527272381694435181494046041671773339651838385835251143147929320037641955543659792278946615675463901414271390439864249099299896017367449203139502699023535317915397768643921449719434907337013853071869638304009049326892399584295268044501858969072201005851050546131885119340946353312605265286865038062857865139050558020520147048479976340842199879580520764753403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b344fabdb80d3b8ee4c4bca46ca6ee04d61b63ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-oauth-nce.spectrummobile.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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