*.coxhealth.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:bf:54:e8:d1:b1:e4:b3:7b:23:aa:f0:57:7c:53:e0 was issued on by Amazon.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.coxhealth.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:bf:54:e8:d1:b1:e4:b3:7b:23:aa:f0:57:7c:53:e0
Serial Number (int): 14285730826067147788860644513596330976
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6d:04:fd:a3:ea:28:be:98:a4:c3:76:90:fa:8b:69:2f:39:a0:9b:aa
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 37:f4:76:99:b8:16:ca:89:b8:25:07:c9:53:87:74:e1:93:f9:88:5a
Fingerprint (sha256): 68:d9:08:41:e9:5f:0b:d7:13:c4:b7:89:8d:1a:c1:35:dc:e6:2d:f7:00:4b:b8:39:1c:35:c9:94:c6:9e:9e:c4

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.coxhealth.com

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.coxhealth.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.coxhealth.com
coxhealth.com
skaggs.net
*.skaggs.net
coxbranson.com
*.coxbranson.com
coxbranson.net
*.coxbranson.net
ferrellduncan.com
*.ferrellduncan.com
coxhealth.net
*.coxhealth.net
coxhealth-redirect.mostlyserious.io
bcmh.net
*.bcmh.net
coxhealthnetwork.com
*.coxhealthnetwork.com
coxfmr.com
*.coxfmr.com

Other certificates including the domain name coxhealth.com

(limited to 100 certificates)
*.coxhealth.com
doctors.coxhealth.com
home2.coxhealth.com
*.coxhealth.com
coxhealth.com
coxhealth.com
coxhealth.com
media.coxhealth.com
shop1906.coxhealth.com
doctors.coxhealth.com
*.coxhealth.com
doctors.coxhealth.com
*.coxhealth.com
*.coxhealth.com
www.coxhealth.com
*.coxhealth.com
coxhealth.com
*.coxhealth.com
coxhealth.com
access.coxhealth.com
shop1906.coxhealth.com
static.coxhealth.com
doctors.coxhealth.com
*.coxhealth.com
www.coxhealth.com
*.coxhealth.com
coxhealth.com
provisionserver.coxhealth.com
*.coxhealth.com
*.coxhealth.com
blackboardapp.coxhealth.com
*.coxhealth.com
*.coxhealth.com
coxhealth.com
*.coxhealth.com
coxhealth.com
staffweb.coxhealth.com
coxhealth.com
*.coxhealth.com
*.coxhealth.com
coxdocs2.coxhealth.com
*.coxhealth.com
*.coxhealth.com
coxhealth.com
imperva.com
doctors.coxhealth.com
static.coxhealth.com
*.coxhealth.com
media.coxhealth.com
*.coxhealth.com
*.coxhealth.com
static.coxhealth.com
*.coxhealth.com
access.coxhealth.com
*.coxhealth.com
*.coxhealth.com
media.coxhealth.com
www.coxhealth.com
*.coxhealth.com
www.coxhealth.com
webmail.coxhealth.com
webmail.coxhealth.com
webmail.coxhealth.com
mail.coxhealth.com
*.coxhealth.com
*.coxhealth.com
*.coxhealth.com
imaging.coxhealth.com
home.coxhealth.com
lyncaccess01.coxhealth.com
coxhealth.com
lyncaccess01.coxhealth.com
home.coxhealth.com
*.coxhealth.com
mft.coxhealth.com
shop1906.coxhealth.com
*.coxhealth.com
coxhealth.com
*.coxhealth.com
shop1906.coxhealth.com
*.coxhealth.com
*.coxhealth.com
media.coxhealth.com
webmail.coxhealth.com
media.coxhealth.com
jobs.coxhealth.com
shop1906.coxhealth.com
webmail.coxhealth.com
*.coxhealth.com
imaging.coxhealth.com
*.coxhealth.com
staffweb.coxhealth.com
*.coxhealth.com
*.coxhealth.com
static.coxhealth.com
*.coxhealth.com
coxhealth.com
coxhealth.com
static.coxhealth.com
coxhealth.com

Certificate

The complete raw certificate details for *.coxhealth.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4A1noPimOT1AnoH5JGQg
lOrL2DVeaF4krjuCNCSLNtgL+5XSxkdPPSMIwbLqhgXhWSEvMVQzgQBi+Se/3ox0
TXOLYwuhIjFCACfcRkhaS3I0kztV74xK4vbVXQuxai8tbAX1dkWiAx/jUqGKEi4p
RIwkp+xlk0JLtpvTFWdDM4In+G/FzPBwstyYSIYsCGlFTdAtoaYbVEV0ryo4a4Ly
Ovn5TZV0/rIrlgpDk+V6j0dYABR+DCVAFr/RK6adnCA7MGpYCoF2DiqW/4omp0kq
1H4cSlFMh7+peiFGM/zkhPHj6v36jye2NXeWDvZWVIeKeKiNiVoxFcvbIt1KgDYJ
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14285730826067147788860644513596330976
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.coxhealth.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28283990465629527496667314130990677723215896635925951096756470745327010189820151305581973846095084046425525675267911009460516880302402630329656410592747518941563444583974163213531421403294817846798989812323650292319122368431270141891636930617309599739179506153965170741382502245379289623713118412081056976744275145006467984341035129218841820766684166987184236382375319044914730835468135807987727303069279340050410844311455171297396685334961356375745175295030142141715617718103199654576979407386907832673250157926531526633585380760687178567112963933413173013027105935481013871793958723950898696194745793605410907097589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6d04fda3ea28be98a4c37690fa8b692f39a09baa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (333 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coxhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coxhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skaggs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skaggs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coxbranson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coxbranson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coxbranson.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coxbranson.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferrellduncan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ferrellduncan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coxhealth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coxhealth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coxhealth-redirect.mostlyserious.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcmh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bcmh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coxhealthnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coxhealthnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coxfmr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coxfmr.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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