*.twtelecom.com

- TW Telecom Inc. -

Issued by DigiCert High Assurance CA-3

About this certificate

This digital certificate with serial number 07:16:fa:af:c0:b9:e7:9a:d5:b0:33:2f:e9:bb:54:77 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

TW Telecom Inc.

Organization: TW Telecom Inc.
Organization unit: IT
State / Province: Colorado
Locality: Littleton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:16:fa:af:c0:b9:e7:9a:d5:b0:33:2f:e9:bb:54:77
Serial Number (int): 9423911028357397117200339262869558391
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: c7:c7:85:d8:00:3a:e2:cd:9c:6b:ce:66:09:91:bf:99:c2:db:c3:24
AuthorityKeyId: 50:ea:73:89:db:29:fb:10:8f:9e:e5:01:20:d4:de:79:99:48:83:f7

Fingerprint (sha1): 21:3e:77:92:36:30:a7:54:5d:70:16:11:99:35:fb:6d:09:09:76:db
Fingerprint (sha256): e7:bb:0a:95:42:2b:de:74:9b:1a:14:da:11:cf:39:d4:b6:e1:db:d0:0a:43:7d:35:5f:d3:b8:34:9f:c1:97:c2

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ca3-g27.crl
CRL Distribution Point: http://crl4.digicert.com/ca3-g27.crl

Check the revocation status for certificate *.twtelecom.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.twtelecom.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.twtelecom.com
twtelecom.com

Other certificates including the domain name twtelecom.com

(limited to 100 certificates)
PICCARE.TWTELECOM.COM
Securemail.twtelecom.com
ddos.twtelecom.com
ocsfarm.twtelecom.com
myportal.level3.com
clearpass.twtelecom.com
agents.twtelecom.com
SIP.TWTELECOM.COM
sandbox.twtelecom.com
assets.level3.com
sandbox.twtelecom.com
tw-captiveportal.twtelecom.com
im.twtelecom.com
EMAIL.TWTELECOM.COM
*.twtelecom.com
im.twtelecom.com
customerportal.twtelecom.com
sandbox.twtelecom.com
developer.twtelecom.com
EMAIL.TWTELECOM.COM
ocsfarm.twtelecom.com
*.twtelecom.com
email.twtelecom.com
customerportal.twtelecom.com
Director.Twtelecom.com
b2b.twtelecom.com
EMAIL.TWTELECOM.COM
api.twtelecom.com
api.twtelecom.com
billing.twtelecom.com
email.twtelecom.com
clearpass.twtelecom.com
customerportal.twtelecom.com
remote.twtelecom.com
ADFS.TWTELECOM.COM
Lync.twtelecom.com
assets.level3.com
email.twtelecom.com
billing.twtelecom.com
assets.level3.com
*.twtelecom.com
billing.twtelecom.com
webconf.twtelecom.com
sslvpn.twtelecom.com
webconf.twtelecom.com
myportal.level3.com
sso.twtelecom.com
EMAIL.TWTELECOM.COM
sip.twtelecom.com
sslvpn.twtelecom.com
*.twtelecom.com
legacy.twtelecom.com
ADFS.TWTELECOM.COM
EMAIL.TWTELECOM.COM
PricingModule.twtelecom.com
sip.twtelecom.com
Director.Twtelecom.com
www.twtelecom.com

Certificate

The complete raw certificate details for *.twtelecom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9423911028357397117200339262869558391
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert High Assurance CA-3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-21 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colorado'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Littleton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TW Telecom Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.twtelecom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 789379336821221113512387431099922410847296821846980415123044834032246397418480710166274378453847359534704246264562518927527495664060262782486922502937542924974537632975244576482914562277248196217169022777536032243560793450120631000537401273970329772722647142073332713573467209848096402074070300993663162761547384096793880171929267339747240858814479646432941500297370638329833656151256592626100221737423283697127815499353974405237526445565104311059076024733047410260283251906670959986149007949126960798061207974662449728483394528201019766695053775073308209118695056514705605800817935816759944722442299801542771740279555544712458846830472038605040872475006962806843091211128275711276483331511503669581989250831228581628535217800016735677273321988476903775323369819048473730268121524183858637859946156710387310095697900269967115298584282565989281819134829968662586332375544428958404399640872339484763173401985112974739363643720762029910525950537631478389891728572558011006447109723227240188102761717210874726485315651753907403383461944046593763835778316484995129238847128408111074550320209860656867817721153443616942444177204485884223557792001891515360045030638557113306046484390272010602342313466708501350068046526060897404463651304663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 50ea7389db29fb108f9ee50120d4de79994883f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c7c785d8003ae2cd9c6bce660991bf99c2dbc324
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twtelecom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twtelecom.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ca3-g27.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ca3-g27.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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