*.portals.stage-spectrum.net

Issued by Amazon

About this certificate

This digital certificate with serial number 02:a5:5c:73:ae:41:65:57:b2:1c:c3:01:e1:db:78:c8 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.portals.stage-spectrum.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:a5:5c:73:ae:41:65:57:b2:1c:c3:01:e1:db:78:c8
Serial Number (int): 3517060120079753862497816971870697672
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 53:65:3c:bf:54:d0:11:b4:6a:d3:0f:bf:cd:e7:71:3e:24:d5:db:35
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 79:33:4f:a8:2a:a9:07:2e:25:4c:4c:20:7f:a9:24:e0:b5:8f:18:bb
Fingerprint (sha256): a6:0c:f5:b7:30:6e:f6:b7:8e:21:86:1a:b6:26:77:95:fd:6b:95:f9:29:8d:32:22:c5:cf:80:0f:55:d6:2c:66

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.portals.stage-spectrum.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.portals.stage-spectrum.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.portals.stage-spectrum.net

Other certificates including the domain name stage-spectrum.net

(limited to 100 certificates)
privacy.portals.stage-spectrum.net
pci.stage-spectrum.net
*.eos.stage-spectrum.net
*.eos.stage-spectrum.net
pci.stage-spectrum.net
stage-spectrum.net
sdptpsiproxyvip.charter.com
stage-spectrum.net
*.stage-spectrum.net
*.portals.stage-spectrum.net
stage-spectrum.net
sdptpsiproxyvip.charter.com
stage-spectrum.net
*.spectrum.net
drupal-cms.stage-spectrum.net
sdptpsiproxyvip.charter.com
api.spectrum.net
*.portals.stage-spectrum.net
*.eos.stage-spectrum.net
stage-spectrum.net
*.stage-spectrum.net
tveauthn.spectrum.net
*.stage-spectrum.net
sdptpsiproxyvip.charter.com
*.eos.stage-spectrum.net
stage-spectrum.net
stage-spectrum.net
sdptpsiproxyvip.charter.com
stage-spectrum.net
api.spectrum.net
stage-spectrum.net
troubleshooting.stage-spectrum.net
*.stage-spectrum.net
tve.spectrum.net
*.eos.stage-spectrum.net
drupal-cms.spectrum.net
pci.stage-spectrum.net
stage-spectrum.net
advisor2.stage-spectrum.net
api.spectrum.net
troubleshooting.stage-spectrum.net
*.portals.stage-spectrum.net
*.spectrum.net
api.spectrum.net
*.portals.stage-spectrum.net
sdptpsiproxyvip.charter.com
*.stage-spectrum.net
stage-spectrum.net
*.stage-spectrum.net
stage-spectrum.net
device.cm.stage-spectrum.net
drupal-cms.stage-spectrum.net
pci.stage-spectrum.net
cm-policy.cm.stage-spectrum.net
stage-spectrum.net
*.stage-spectrum.net
stage-spectrum.net
*.portals.stage-spectrum.net
advisor2.stage-spectrum.net
drupal-cms.prd.spectrum.net
*.stage-spectrum.net
stage-spectrum.net
general-stage-wildcard.stg.spectrum.net
stage-spectrum.net
*.eos.stage-spectrum.net

Certificate

The complete raw certificate details for *.portals.stage-spectrum.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5iK/QF2tC3XARVu9dEA
ZOiMOsAWIkVkqS7DnjTVd/246HFwYGMRypMgCXpYXf9w/v4RSPxpASYtuyt2tnxa
kboZp5zIgIh9Gj5YdPVcHidFuoBurt1O9oosqXShOTVdy8QjYu2w3jdu+gTVBRI1
ZDipCeOzTPEWFseYUR6Dlb7U91cSrXsdKLugJvRaRyuCeJ0nLV+E+/nHQ5gdb8Nm
+mjKqmcBlhD9gSBMtoT+EQdj7zpsdU0weNTB3jw10wO9UuhtrSl15c7qgqF6w3D1
N7L0npS/WTEhCj8PP6X1i1crw1Frwb5MyA7rzMS2qj1w0Djx59kTRAi9s+X9nEhZ
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3517060120079753862497816971870697672
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.portals.stage-spectrum.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22671878307837668379849294272934427542866677030766522685991949248169634663993729019895091420560745881179255202405239643701429592252449089397308357375328854632370753538840990998237005378171397523496145417607819363695393075663007544866088851599275749958065755725255418773890966012283996960047009090330043388653135561953403569247650057178081918543419118884461721295228702286890217914938402477156578083663361833167648823833349623853825064300336241313499334717736636716978529699899246791628199795585723449982207985401182707129609557773008100815109014695623751948563724163439477251250012308155984176909039971384371404364213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							53653cbf54d011b46ad30fbfcde7713e24d5db35
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portals.stage-spectrum.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001683ee205460000040300473045022014dc06fcfecffef647a0fc85e99f636dedd570a1a9e963d62dfa37b3827ff908022100f7a2dcdea87f589e68c45c45b7281c27b8d9fc317cf7dff48c9025de3c5b36c00075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001683ee206190000040300463044022061ceed9ab649deffdefdd9a21aa986d33a250d73ae0cfb4154685bb8d553c21c02201437ea882700639587315d22b848b3de41759ab041564c34c31fd577807a3c33
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00646334fea1bcc41347f1be924f9e32bcfaf8a5ad3ac4f91a72c06621d5d7567287d2505894e992d2e6dfa9547b372e65488174d40b717c5cfa4dd91e219838d44ef8a864faf84ccb31d21b6a617456bab5bca6f1365589d20135eff6b6198ef7bd464b7818d9c15610acc58f334b08743b1d1878f5328fc7536e46d870573a65795fc388aaa8da8b2a013b195588666fdeb0d4caec8f1f06701ce77247d2eb3d2651fb6828376393eccd7712ab290ca093946a8febbc670d2734a98457fe3cd43591bc48c91f5f4ea96248b011106ce793d6f346522e59ef92137c049b0e6f75ddd5aea7c5f570aa44db5bc30948a4118fc54b17e6f1bd0dfd44a94a918dbbdc