twc.com

- Charter Communications Operating, LLC -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0b:82:9b:e9:85:52:c4:ac:42:ac:20:df:cc:a6:e6:a2 was issued on by DigiCert Inc.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Charter Communications Operating, LLC

Organization: Charter Communications Operating, LLC
State / Province: Missouri
Locality: St. Louis
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:82:9b:e9:85:52:c4:ac:42:ac:20:df:cc:a6:e6:a2
Serial Number (int): 15299668820155601011079381214879475362
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 82:a5:2a:09:77:79:43:42:a6:e7:38:c3:68:c1:6f:60:a7:7f:0a:1f
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 32:f5:12:50:64:94:9c:54:4d:9e:a7:25:aa:ca:ed:e8:bf:a9:21:24
Fingerprint (sha256): a4:aa:88:15:4a:46:28:55:76:c5:ef:53:4e:c9:d7:5e:02:9e:b9:41:4e:a2:fd:ea:79:9b:a7:8e:58:c2:47:dc

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl

Check the revocation status for certificate twc.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for twc.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

twc.com
www.twcbc.com
www.twc.com
www.timewarnercable.com
www.grandstrandnow.com
www.elpaq.com
www.crystalcoastnow.com
www.contractbuyout.com
www.coastalcarolinanow.com
www.capefearnow.com
www.cablewifi.com
twcbc.com
timewarnercable.com
grandstrandnow.com
elpaq.com
crystalcoastnow.com
contractbuyout.com
coastalcarolinanow.com
capefearnow.com
cablewifi.com

Other certificates including the domain name twc.com

(limited to 100 certificates)
sport.twc.com
www.timewarnercable.com
timewarnercable.com
registration.rr.com
sport.twc.com
sport.twc.com
mail.twc.com
registration.rr.com
spectrum.com
mail.twc.com
twc.com
mail.twc.com
spectrum.com
webmail.twc.com
mail.twc.com
sport.twc.com
sport.twc.com
mail.twc.com
sport.twc.com
timewarnercable.com
spectrum.com
sport.twc.com
spectrum.com
spectrum.com
twc.com
mail.twc.com
timewarnercable.com
timewarnercable.com
spectrum.com
spectrum.com
webmail.twc.com
mail.twc.com
registration.rr.com
spectrum.com
mail.twc.com
webmail.twc.com
mail.twc.com
spectrum.com
sport.twc.com
webmail.twc.com
sport.twc.com
registration.rr.com
mail.twc.com
timewarnercable.com
spectrum.com
mail.twc.com
spectrum.com
mail.twc.com
mobile.charter.net
sport.twc.com
webmail.twc.com
spectrum.com
twc.com
registration.rr.com
spectrum.com
spectrum.com
sport.twc.com
spectrum.com
timewarnercable.com
mail.twc.com
registration.rr.com
spectrum.com
mail.twc.com
timewarnercable.com
timewarnercable.com
sport.twc.com
registration.rr.com
timewarnercable.com
sport.twc.com
timewarnercable.com
twc.com
spectrum.com
sport.twc.com
spectrum.com
spectrum.com
spectrum.com
spectrum.com
spectrum.com
mail.twc.com
mail.twc.com
sport.twc.com
spectrum.com
timewarnercable.com
timewarnercable.com
spectrum.com
registration.rr.com
spectrum.com
spectrum.com

Certificate

The complete raw certificate details for twc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEbSOjZkX5vxf91kWDjNHumFw3/f7F
k+8ckAffRdP1Au+bJpmJpz+FvMa5N+Z9qzHnSORILYQFkj2mH3k+3YuwEQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15299668820155601011079381214879475362
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Missouri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St. Louis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Charter Communications Operating, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'twc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00046d23a36645f9bf17fdd645838cd1ee985c37fdfec593ef1c9007df45d3f502ef9b269989a73f85bcc6b937e67dab31e748e4482d8405923da61f793edd8bb011
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							82a52a0977794342a6e738c368c16f60a77f0a1f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (382 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twcbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timewarnercable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandstrandnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elpaq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crystalcoastnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contractbuyout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coastalcarolinanow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capefearnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cablewifi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twcbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timewarnercable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandstrandnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elpaq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crystalcoastnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contractbuyout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coastalcarolinanow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capefearnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cablewifi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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