smartbill.coxbusiness.com

- Cox Communications, Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 23:c6:52:d1:79:98:e3:58:df:65:3c:87:2c:06:09:45 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Cox Communications, Inc.

Organization: Cox Communications, Inc.
State / Province: Georgia
Locality: Atlanta
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 23:c6:52:d1:79:98:e3:58:df:65:3c:87:2c:06:09:45
Serial Number (int): 47552734384367932869870211948809161029
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 8a:ec:ff:b1:e4:69:e0:b2:a6:ab:3f:e1:78:29:15:79:ae:69:67:f5
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 64:77:7a:cc:3f:61:c0:90:af:5b:73:1b:0b:70:4c:fa:f0:29:4c:4e
Fingerprint (sha256): 68:6e:9c:b1:48:69:00:72:73:f6:57:89:a7:ac:d1:2b:23:99:b0:01:e6:5d:29:6e:11:8a:87:76:54:5d:6d:ae

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate smartbill.coxbusiness.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for smartbill.coxbusiness.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

smartbill.coxbusiness.com

Other certificates including the domain name coxbusiness.com

(limited to 100 certificates)
www.two.qa.cox.com
malblock.coxbusiness.com
email.coxbusiness.com
im1.voice.coxbusiness.com
myaccount-messenger.qa3.coxbusiness.com
admin-tollfree.coxbusiness.com
*.staging1.services.coxlab.net
ausea06.uc.coxbusiness.com
hospitalitysw.coxbusiness.com
tollfree.dev1.coxbusiness.com
retail-prod-fmc6.coxbusiness.com
prod-mwifi.coxbusiness.com
bhds.coxbusiness.com
tollfree.qa1.coxbusiness.com
idm.qa1.coxbusiness.com
smartbill.coxbusiness.com
retail-prod-pmr.coxbusiness.com
wholesale-portal.coxbusiness.com
mwifi-portal.coxbusiness.com
email.coxbusiness.com
myaccount.coxbusiness.com
images.coxbusiness.com
admin-tollfree.coxbusiness.com
cg.coxbusiness.com
www.one.qa.cox.com
framework.pve.qa.cox.com
myaccount.qa1.coxbusiness.com
www.int.dev.cox.com
smartbill.coxbusiness.com
console.coxbusiness.com
malblock.coxbusiness.com
idm.coxbusiness.com
www.pve.qa.cox.com
email.one.qa.coxbusiness.com
myvoicemanager1.coxbusiness.com
myvoicemanager5.coxbusiness.com
www.pve.qa.cox.com
www.onlinebackup.coxbusiness.com
*.staging1.services.coxlab.net
framework.one.staging.cox.net
www.coxbusiness.com
dg-prod-mwifi.coxbusiness.com
www.coxbusiness.com
bhds.coxbusiness.com
www.uat.cox.com
myaccount.coxbusiness.com
achxb01.uc.coxbusiness.com
malblock.coxbusiness.com
malblock.coxbusiness.com
myadmin.coxbusiness.com
SAN-myaccount-messenger-prod.coxbusiness.com
myvoicemanager1.coxbusiness.com
malblock.coxbusiness.com
bhds.coxbusiness.com
framework.int.dev.cox.com
retail-prod-mrs.coxbusiness.com
www.cox.com
www.int.dev.cox.com
www.cci.cox.com
core.coxbusiness.com
www.cox.com
idm.dev.coxbusiness.com
*.coxbusiness.com
myadmin.qa3.coxbusiness.com
console.coxbusiness.com
enterpriseportal.coxbusiness.com
malblock.coxbusiness.com
www.two.qa.cox.com
pop.qa.coxbusiness.com
www.one.qa.cox.com
myvoicemanager4.coxbusiness.com
console.coxbusiness.com
myaccount.qa2.coxbusiness.com
smartbill.coxbusiness.com
www.one.staging.cox.com
myaccount-ppe.coxbusiness.com
idm.qa1.coxbusiness.com
myaccount.coxbusiness.com
login.dev.coxbusiness.com
email.coxbusiness.com
malblock.coxbusiness.com
retail-prod-pmr.coxbusiness.com
www.onlinebackup.coxbusiness.com
tollfree.qa1.coxbusiness.com
webmail.coxbusiness.com
framework.cox.com
dg-prod-mwifi.coxbusiness.com
wholesale-portal.coxbusiness.com
myaccount-messenger.qa1.coxbusiness.com
bhds.coxbusiness.com
framework.cox.com
retail-prod-fmc5.coxbusiness.com
smartbill.coxbusiness.com
Smartbill.coxbusiness.com
login.coxbusiness.com
SAN-myaccount-messenger-prod.coxbusiness.com
www.cox.com
preprod-mwifi.coxbusiness.com
tollfree.coxbusiness.com
SAN-myaccount-prod.cox.com

Certificate

The complete raw certificate details for smartbill.coxbusiness.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7bGd2h6GT4k+BVgfoRC
PSkJlkNiHCawq8MiGyl5rzkT7iyBxUiUk4fkbqCrQaSdwib1tFM3SkZgPfocHFx1
IyuzBKYb050vUk1G3zjgP/qHGo/g4A61Bz+nS8z/5ZCYWxfJUoGRaFQAmSxJkf5b
Z8817D/6qtHGDGZhzH7fyk3D8ThY6OE6Ogdcd9eZyIWSf+anvUk9v1FgalzjykV7
aNuGja2AjVhFHbCw8elAkJT6dv0DEkTy9yGC5419a+Uxj6s1JlpJ3Ytbm6LpQTBm
QhUq+wcXYiPW1eVY972TIpXOk6DtMQUWLAJ0b6PvQA+qB15GzsEc4joRcOwNHQGd
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 47552734384367932869870211948809161029
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 17:29:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-30 17:29:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atlanta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cox Communications, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'smartbill.coxbusiness.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25211552527901687190901232225859861006819140621433444182799650241503782082412574583002353616096471894367626011023686774547063982280377282551392584538669169666820866189034797550203518343848743130685433750340871725750631510049464888931054042319463855622324333353959419651697878747601591187386600880602330300529949815859949624663451057357762896091365998122691759835071287397622430362700963151163900014546724321660702510735593338548398085139495318424876349068593152968972781126458915475029448961592041335072872911217460376892582794174227707249685556999713798581752022805450536217184342589338330639931448301427526979394817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8aecffb1e469e0b2a6ab3fe178291579ae6967f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartbill.coxbusiness.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00452cd8f9ca62b4636fa274f7ba007ab971ddce1a46484205a9cd22c7c9aaf71fea34eac2b768b173cb7e512f049742d2d7c4ac3e6107aef0609ff11bae5bfa2d4ae676eec78ee1cb17fe57409155767a0c39936e4323d77421a2217c6699cfece515f9d89320136f9f75e281f9a4d3e1dcbacc9448c06edb192a4687672f53843ddd5b151e20e0774f4fabd99d3f57332fccaaac86e11df02075041ee3d8bf8f3c117e3972aaad2cb4d03ece872db0a34fc4bf69b54c6aa1a91273ce5312d0c783084085358e9b1eb480007ce865467b6bcb439ba14e6eaaceaf3d612604ed21cceba8d597465515e57a3a9882b2230190b85170b6306ad40970ae4870092cf8