platform.ecs-ddtc.cloud.cox.com

- Cox Communications, Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 60:1e:f1:cf:b9:9b:e0:04:1d:d9:2a:86:f3:68:eb:30 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Cox Communications, Inc.

Organization: Cox Communications, Inc.
State / Province: Georgia
Locality: Atlanta
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 60:1e:f1:cf:b9:9b:e0:04:1d:d9:2a:86:f3:68:eb:30
Serial Number (int): 127766561019495257337930487215621204784
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 8c:9b:57:ab:4f:c2:3c:2a:1a:fe:f9:fc:6d:49:51:f6:43:ad:8c:f1
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 44:09:8d:fb:fd:71:1d:2a:78:8f:c1:0a:d0:9c:dd:a9:6a:a3:97:5d
Fingerprint (sha256): 0b:62:c9:17:24:17:80:63:38:fe:60:d2:80:fe:d3:76:d6:84:c6:6d:6d:1a:18:b6:47:18:bf:a4:57:4a:5e:8c

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate platform.ecs-ddtc.cloud.cox.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for platform.ecs-ddtc.cloud.cox.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

platform.ecs-ddtc.cloud.cox.com
platform.ecs-east.cloud.cox.com

Other certificates including the domain name cox.com

(limited to 100 certificates)
newsroom.cox.com
media.cox.com
www.privacy.dev.cox.com
lbtest20.cox.com
mail-content.rm.cox.com
*.ecs-np.cloud.cox.com
chat1dev.cox.com
unifyoffcycle.cei.cox.com
connect2.cox.com
www.two.qa.cox.com
CATL5PWSM20122.corp.cox.com
testinglemur.cox.com
measurementapp-origin.nonprod.aws.cox.com
m.mc.cox.com
newsroom.cox.com
*.eps-nonprd.corp.cox.com
duketrdd113.corp.cox.com
widget.qaint.cox.com
measurementapp-origin.prod.aws.cox.com
issues.stg.cox.com
cxc.cox.com
mobile.store.cox.com
jobs.cox.com
dark-voicetools.cox.com
DT-VOIP-2801-3.cox.com
mail-content.rmt.cox.com
jenkins.stg.cox.com
m-intercept.cox.com
publ.one.qa.cox.com
bi-discovery.corp.cox.com
porting.cox.com
nops.cox.com
www.cox.com
portal.cxqa.corp.cox.com
uwp-wifi-access-portal.cox.com
measurementapp.cox.com
sso.cox.com
cmac.dev.cox.com
*.ossprov-np.corp.cox.com
issues.corp.cox.com
idm.cox.com
wifi.cox.com
m-idm-east.cox.com
publ.one.staging.cox.com
idm-extread-qa.cox.net
ccirecruit.cox.com
dev-webview.wifi.cox.com
myaccount-business.qaa4.cox.com
webapi-svc.int.dev.cox.com
*.staging1.services.coxlab.net
atmos.cox.com
platform.ecs-ddtc.cloud.cox.com
privacy.dev.cox.com
test.cox.com
cxconnect-stage.cox.com
chat1.cox.com
bi.cox.com
coxmule.cox.com
login.cox.com
DUKEISEC15.corp.cox.com
oa.mail.cox.com
CATL0PWAS10933.CORP.COX.COM
ccidev.cox.com
ewfmm3.cox.com
wfo.cox.com
mobile.console.cox.com
webview.wifi.cox.com
secure06.lithium.com
porting-qa2.cox.com
coxlaw.cox.com
UCEEPOOL01.corp.cox.com
wfo.cox.com
capdev.sb.cox.com
OSPVault.cox.com
reportsdev.cox.com
api-load.cox.com
repo.corp.cox.com
*.modops-dvtc.cloud.cox.com
forums.cox.com
sip.cox.com
portal.cxdev.corp.cox.com
idm.east.one.qa.cox.com
jump.cox.com
wfo.cox.com
serv-boundless.dev.cox.com
uet.corp.cox.com
mdm.cox.com
es.mobile.store.cox.com
connect2.cox.com
psp6cwaaaqv99.corp.cox.com
dukencwgqv99.corp.cox.com
csap-stg.bbd-np.corp.cox.com
testlemurcert.cox.com
secure06.stage.lithium.com
login.qa.cox.com
fbc-qa.cox.com
portal.cx.corp.cox.com
caps.cox.com
wam-stg.cox.com
ww3.cox.com

Certificate

The complete raw certificate details for platform.ecs-ddtc.cloud.cox.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLAGDsNaoFUI+R4feL9o
WE2OCBfIW+9Q9HzvTBydJo/2LPHekJYIN+EYlf66rIbbAhG8tYOTI1xLHad4A1cR
Ua2I2iW3II3QVeJH5pZ4M6rwXKCaemai+BpEC8Nb5I26/m6mcvgIHXdjUK293Nye
qury/ZOcN0jA+nYiiUsBGhNUtYAU1DDW2JYWCN66fHzFpHmvU33UnvEXBmm3UDqZ
gv1OstsORKKi2YTcwrpHV6AGSIIRYjvAoVWfgtLBiACnjL1GLFawZvHodeNwGRNO
HMgFww614uqNGZ9VCsBQF/vSpRUBWMTe9cxZP1G1JSOs5qPllGbTh0mE6wD01b5D
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 127766561019495257337930487215621204784
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-04 05:48:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-17 05:48:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atlanta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cox Communications, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'platform.ecs-ddtc.cloud.cox.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21799788957371574898685365195378247558530349346422212185436287327435490887100206287829210820563360374195822909683859320381182955336482633585488233461439856669930558309470947349090021312302680641919279002498531468976481079277723022485540368894980125758128683078387110566836615225168332192395483539061516410915193943285309167148862581938396083210039086427795046278259433476627368131203335675733850559870171129160428191305111597329835364973500008019151342612464082271593004500954616751301032864848247485833459040476192083383322211155812393225331368614402449403700964164437454296440590723214388452304069108813997000246103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c9b57ab4fc23c2a1afef9fc6d4951f643ad8cf1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform.ecs-ddtc.cloud.cox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform.ecs-east.cloud.cox.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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