login.coxbusiness.com

- Cox Communications, Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 20:fb:6a:cf:4a:9f:11:cc:92:a8:cd:42:d1:04:78:bc was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Cox Communications, Inc.

Organization: Cox Communications, Inc.
State / Province: Georgia
Locality: Atlanta
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 20:fb:6a:cf:4a:9f:11:cc:92:a8:cd:42:d1:04:78:bc
Serial Number (int): 43840728735351371183497983937451686076
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 16:28:2a:04:d2:36:3d:63:61:41:54:9a:ec:d0:bf:19:26:da:23:4f
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 45:21:61:c1:08:7f:cf:6b:38:15:d6:77:c9:9e:33:a4:89:b2:bb:80
Fingerprint (sha256): 69:c7:e8:fa:45:76:16:c5:0e:7e:88:8c:af:85:93:8e:38:6f:d9:57:3a:5a:ff:e8:77:74:fa:8d:e1:e9:fb:19

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate login.coxbusiness.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for login.coxbusiness.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

login.coxbusiness.com

Other certificates including the domain name coxbusiness.com

(limited to 100 certificates)
www.two.qa.cox.com
malblock.coxbusiness.com
email.coxbusiness.com
im1.voice.coxbusiness.com
myaccount-messenger.qa3.coxbusiness.com
admin-tollfree.coxbusiness.com
*.staging1.services.coxlab.net
ausea06.uc.coxbusiness.com
hospitalitysw.coxbusiness.com
tollfree.dev1.coxbusiness.com
retail-prod-fmc6.coxbusiness.com
prod-mwifi.coxbusiness.com
bhds.coxbusiness.com
tollfree.qa1.coxbusiness.com
idm.qa1.coxbusiness.com
smartbill.coxbusiness.com
retail-prod-pmr.coxbusiness.com
wholesale-portal.coxbusiness.com
mwifi-portal.coxbusiness.com
email.coxbusiness.com
myaccount.coxbusiness.com
images.coxbusiness.com
admin-tollfree.coxbusiness.com
cg.coxbusiness.com
www.one.qa.cox.com
framework.pve.qa.cox.com
myaccount.qa1.coxbusiness.com
www.int.dev.cox.com
smartbill.coxbusiness.com
login.qa.coxbusiness.com
console.coxbusiness.com
malblock.coxbusiness.com
idm.coxbusiness.com
www.pve.qa.cox.com
email.one.qa.coxbusiness.com
myvoicemanager1.coxbusiness.com
myvoicemanager5.coxbusiness.com
www.pve.qa.cox.com
www.onlinebackup.coxbusiness.com
*.staging1.services.coxlab.net
framework.one.staging.cox.net
www.coxbusiness.com
dg-prod-mwifi.coxbusiness.com
www.coxbusiness.com
bhds.coxbusiness.com
www.uat.cox.com
myaccount.coxbusiness.com
achxb01.uc.coxbusiness.com
malblock.coxbusiness.com
malblock.coxbusiness.com
myadmin.coxbusiness.com
SAN-myaccount-messenger-prod.coxbusiness.com
myvoicemanager1.coxbusiness.com
malblock.coxbusiness.com
bhds.coxbusiness.com
framework.int.dev.cox.com
retail-prod-mrs.coxbusiness.com
www.cox.com
www.int.dev.cox.com
www.cci.cox.com
core.coxbusiness.com
www.cox.com
idm.dev.coxbusiness.com
*.coxbusiness.com
myadmin.qa3.coxbusiness.com
console.coxbusiness.com
enterpriseportal.coxbusiness.com
login.qa.coxbusiness.com
malblock.coxbusiness.com
www.two.qa.cox.com
pop.qa.coxbusiness.com
www.one.qa.cox.com
myvoicemanager4.coxbusiness.com
console.coxbusiness.com
myaccount.qa2.coxbusiness.com
smartbill.coxbusiness.com
www.one.staging.cox.com
myaccount-ppe.coxbusiness.com
idm.qa1.coxbusiness.com
myaccount.coxbusiness.com
login.dev.coxbusiness.com
imperva.com
email.coxbusiness.com
malblock.coxbusiness.com
retail-prod-pmr.coxbusiness.com
www.onlinebackup.coxbusiness.com
tollfree.qa1.coxbusiness.com
webmail.coxbusiness.com
framework.cox.com
dg-prod-mwifi.coxbusiness.com
wholesale-portal.coxbusiness.com
myaccount-messenger.qa1.coxbusiness.com
bhds.coxbusiness.com
framework.cox.com
retail-prod-fmc5.coxbusiness.com
smartbill.coxbusiness.com
Smartbill.coxbusiness.com
login.coxbusiness.com
SAN-myaccount-messenger-prod.coxbusiness.com
www.cox.com

Certificate

The complete raw certificate details for login.coxbusiness.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23eQK92KiOjCK4f1wOCH
VY5T2HUYrcbB6DZR/bEEXcjJRZm41IsUV3jb1+JNN3gSdeWcjkjj4pIDW06vzHDL
6t8ui7B2mST4UqBlY6597YmIqmsbYhK22ymzqSOnxIXgIkhNu618PsuEB+xsHt61
r9qR7C0ciaI6BJah5Fcoz08r6C/0TqZADU7dnLCtRBivYkQNCu31kmFI9OVMuE/h
v5/o7TuggKdMi9XfGMM8/IJ53x2LslIPUYYqyWJIYJFF05TcVye7BVvRgIM92pYF
pfFrPtTWXbNPOxqoAvs94JOK/ckrHF0nZwEsYyf1MstjRu3+5XANXrkSp5RLWKlR
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 43840728735351371183497983937451686076
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-05 08:00:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-18 08:00:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atlanta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cox Communications, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'login.coxbusiness.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27705147583789275559896327293265964900472794402881255022781721025822764838071490392243949529641401958047413603543462207776233731518162544880221038767453881470536668801939018135665287132570709800629477163773088873341129378599755824396775281354714473678807636682712590074338237080473599180466172689576465433897717878728495305346418504148491890480227503752653807673473508438391688918547144609500284884932232662736794337936724178872701721738841052969286906869336631873102848536923391280077180820050451166243026660502689322846593839593511119120240315944567449136595904397142970457031294528847393702677348928447567167574393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							16282a04d2363d636141549aecd0bf1926da234f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.coxbusiness.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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