login.qa.cox.com

- Cox Communications, Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 72:63:ef:7d:0c:29:70:b6:14:db:0b:e1:91:f5:77:19 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Cox Communications, Inc.

Organization: Cox Communications, Inc.
State / Province: Georgia
Locality: Atlanta
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 72:63:ef:7d:0c:29:70:b6:14:db:0b:e1:91:f5:77:19
Serial Number (int): 152050886311654862818848697994968397593
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 91:43:13:47:1c:ac:b2:4e:60:f7:5b:4a:23:28:1e:88:28:a0:6d:d2
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 6a:51:8c:1f:d0:ea:a4:24:a7:45:d6:0f:75:7d:a9:48:1d:7a:cd:0a
Fingerprint (sha256): 12:78:ba:cd:3b:40:b2:51:98:94:87:df:08:6a:ba:e2:3a:0f:0b:e9:0f:27:72:c4:b3:6c:16:9c:56:e1:3e:e4

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate login.qa.cox.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for login.qa.cox.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

login.qa.cox.com

Other certificates including the domain name cox.com

(limited to 100 certificates)
newsroom.cox.com
media.cox.com
www.privacy.dev.cox.com
lbtest20.cox.com
mail-content.rm.cox.com
*.ecs-np.cloud.cox.com
chat1dev.cox.com
unifyoffcycle.cei.cox.com
connect2.cox.com
www.two.qa.cox.com
CATL5PWSM20122.corp.cox.com
testinglemur.cox.com
measurementapp-origin.nonprod.aws.cox.com
m.mc.cox.com
newsroom.cox.com
*.eps-nonprd.corp.cox.com
duketrdd113.corp.cox.com
widget.qaint.cox.com
measurementapp-origin.prod.aws.cox.com
issues.stg.cox.com
cxc.cox.com
mobile.store.cox.com
jobs.cox.com
dark-voicetools.cox.com
DT-VOIP-2801-3.cox.com
mail-content.rmt.cox.com
jenkins.stg.cox.com
m-intercept.cox.com
publ.one.qa.cox.com
bi-discovery.corp.cox.com
porting.cox.com
nops.cox.com
www.cox.com
portal.cxqa.corp.cox.com
uwp-wifi-access-portal.cox.com
measurementapp.cox.com
sso.cox.com
cmac.dev.cox.com
*.ossprov-np.corp.cox.com
issues.corp.cox.com
idm.cox.com
wifi.cox.com
m-idm-east.cox.com
publ.one.staging.cox.com
idm-extread-qa.cox.net
ccirecruit.cox.com
dev-webview.wifi.cox.com
myaccount-business.qaa4.cox.com
webapi-svc.int.dev.cox.com
*.staging1.services.coxlab.net
atmos.cox.com
platform.ecs-ddtc.cloud.cox.com
privacy.dev.cox.com
test.cox.com
cxconnect-stage.cox.com
plantview2.cox.com
chat1.cox.com
bi.cox.com
coxmule.cox.com
login.cox.com
DUKEISEC15.corp.cox.com
oa.mail.cox.com
CATL0PWAS10933.CORP.COX.COM
ccidev.cox.com
ewfmm3.cox.com
wfo.cox.com
mobile.console.cox.com
webview.wifi.cox.com
secure06.lithium.com
porting-qa2.cox.com
coxlaw.cox.com
UCEEPOOL01.corp.cox.com
wfo.cox.com
capdev.sb.cox.com
OSPVault.cox.com
reportsdev.cox.com
api-load.cox.com
repo.corp.cox.com
*.modops-dvtc.cloud.cox.com
forums.cox.com
sip.cox.com
portal.cxdev.corp.cox.com
idm.east.one.qa.cox.com
jump.cox.com
wfo.cox.com
serv-boundless.dev.cox.com
uet.corp.cox.com
mdm.cox.com
es.mobile.store.cox.com
awx.corp.cox.com
connect2.cox.com
psp6cwaaaqv99.corp.cox.com
dukencwgqv99.corp.cox.com
csap-stg.bbd-np.corp.cox.com
testlemurcert.cox.com
secure06.stage.lithium.com
login.qa.cox.com
fbc-qa.cox.com
portal.cx.corp.cox.com
caps.cox.com

Certificate

The complete raw certificate details for login.qa.cox.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiQr0xjjPnxErm/opYfB
5qH3aaXbysX+po/xKSYJNOI6FoFWoAp5iDBOu1SePPAyaqhh7F22BYrzzeHW2xim
YkyVO2K38m1j+SGDQNGgjjZou6Ld0UEea0aKqoonHhXOYliR5YZRnuPUhrPhAY3E
340iQKND8cGeKdT+72kjokxlNXcIvLuAZLHYkF0EbLfeslAv5176OKbIxXZ4JDfr
NfeZQBIDmENcfvhZjuH/TEK5MT4KnujsDxt6aZT1MH8HgYAUvkQziPjjZBd2trbo
fpOuyJCG1g2IIF6m6tXsyW4XzwYvyxf4EjHoywEdK1VmMDD5KYAqUGoXESGz+wrX
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 152050886311654862818848697994968397593
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-28 08:00:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-11 08:00:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atlanta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cox Communications, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'login.qa.cox.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20468442082992683010403864040118028483929572513472603659855768311173535176778457658538476849446506291420187436712530370002848577420052172815540383473414169523624738819475443601721694996028050056510461481039680916010911016509421905410623801278835779592598125313805345789466210687976353062830803442611654035006893790040803022332382690898862779149893688633420966286802658838938172762527873713752905288715149422256281129729553740429865539433942372009708847341825580419803153195146220510918401661006864254890580034822500483736328645944783144353614815264775554282546900198563929171988995228189147132447538444935096877897563
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							914313471cacb24e60f75b4a23281e8828a06dd2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.qa.cox.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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