retail-prod-pmr.coxbusiness.com

- Cox Communications, Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 57:d9:91:21:cd:a8:2f:de:e3:c9:67:fa:a1:76:8f:c3 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Cox Communications, Inc.

Organization: Cox Communications, Inc.
State / Province: Georgia
Locality: Atlanta
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 57:d9:91:21:cd:a8:2f:de:e3:c9:67:fa:a1:76:8f:c3
Serial Number (int): 116772507679159383614843585556070698947
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 79:3f:d0:39:a2:85:b6:0d:4b:c2:20:bf:69:ef:64:a0:ec:9b:aa:a1
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 09:da:07:ce:7a:28:b1:b6:2d:81:5f:02:2f:c0:e6:61:c1:d8:59:e4
Fingerprint (sha256): 6b:b8:2d:4d:7e:01:2a:4d:8d:de:02:ff:f8:4d:68:a5:4d:79:c0:10:51:2c:a5:e9:c6:94:cd:12:21:ff:ac:c6

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate retail-prod-pmr.coxbusiness.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for retail-prod-pmr.coxbusiness.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

retail-prod-pmr.coxbusiness.com

Other certificates including the domain name coxbusiness.com

(limited to 100 certificates)
www.two.qa.cox.com
malblock.coxbusiness.com
email.coxbusiness.com
im1.voice.coxbusiness.com
myaccount-messenger.qa3.coxbusiness.com
admin-tollfree.coxbusiness.com
*.staging1.services.coxlab.net
ausea06.uc.coxbusiness.com
hospitalitysw.coxbusiness.com
tollfree.dev1.coxbusiness.com
retail-prod-fmc6.coxbusiness.com
prod-mwifi.coxbusiness.com
bhds.coxbusiness.com
tollfree.qa1.coxbusiness.com
idm.qa1.coxbusiness.com
smartbill.coxbusiness.com
retail-prod-pmr.coxbusiness.com
wholesale-portal.coxbusiness.com
mwifi-portal.coxbusiness.com
email.coxbusiness.com
myaccount.coxbusiness.com
images.coxbusiness.com
admin-tollfree.coxbusiness.com
cg.coxbusiness.com
www.one.qa.cox.com
framework.pve.qa.cox.com
myaccount.qa1.coxbusiness.com
www.int.dev.cox.com
smartbill.coxbusiness.com
console.coxbusiness.com
malblock.coxbusiness.com
idm.coxbusiness.com
www.pve.qa.cox.com
email.one.qa.coxbusiness.com
myvoicemanager1.coxbusiness.com
myvoicemanager5.coxbusiness.com
www.pve.qa.cox.com
www.onlinebackup.coxbusiness.com
*.staging1.services.coxlab.net
framework.one.staging.cox.net
www.coxbusiness.com
dg-prod-mwifi.coxbusiness.com
www.coxbusiness.com
bhds.coxbusiness.com
www.uat.cox.com
myaccount.coxbusiness.com
achxb01.uc.coxbusiness.com
malblock.coxbusiness.com
malblock.coxbusiness.com
myadmin.coxbusiness.com
SAN-myaccount-messenger-prod.coxbusiness.com
myvoicemanager1.coxbusiness.com
malblock.coxbusiness.com
bhds.coxbusiness.com
framework.int.dev.cox.com
retail-prod-mrs.coxbusiness.com
www.cox.com
www.int.dev.cox.com
www.cci.cox.com
core.coxbusiness.com
www.cox.com
idm.dev.coxbusiness.com
*.coxbusiness.com
myadmin.qa3.coxbusiness.com
console.coxbusiness.com
enterpriseportal.coxbusiness.com
malblock.coxbusiness.com
www.two.qa.cox.com
pop.qa.coxbusiness.com
www.one.qa.cox.com
myvoicemanager4.coxbusiness.com
console.coxbusiness.com
myaccount.qa2.coxbusiness.com
smartbill.coxbusiness.com
www.one.staging.cox.com
myaccount-ppe.coxbusiness.com
idm.qa1.coxbusiness.com
myaccount.coxbusiness.com
login.dev.coxbusiness.com
email.coxbusiness.com
malblock.coxbusiness.com
retail-prod-pmr.coxbusiness.com
www.onlinebackup.coxbusiness.com
tollfree.qa1.coxbusiness.com
webmail.coxbusiness.com
framework.cox.com
dg-prod-mwifi.coxbusiness.com
wholesale-portal.coxbusiness.com
myaccount-messenger.qa1.coxbusiness.com
bhds.coxbusiness.com
framework.cox.com
retail-prod-fmc5.coxbusiness.com
smartbill.coxbusiness.com
Smartbill.coxbusiness.com
login.coxbusiness.com
SAN-myaccount-messenger-prod.coxbusiness.com
www.cox.com
preprod-mwifi.coxbusiness.com
tollfree.coxbusiness.com
SAN-myaccount-prod.cox.com

Certificate

The complete raw certificate details for retail-prod-pmr.coxbusiness.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFraubSKQCmUZ7+rWyX7
FUTr1DtdzbEXIND/MrxqYuODca9m3F5PvR4xGMttWHU2NY4ZY4L+epQcn2/kfWXo
ivJpnw47Lvt+ZpF3YbCoat3/iqL9xAE5mR+DBGLU4pGD2Ai8cZl4MAI1/wKONo+s
u1TJEZlFqGjrN8M2ZqgalClIcrvxRBhjuUAHOEuRiaZ1PaCyfP70QTF69n9n1Np+
OLlzdJLAg+9jy8Yc9Orq6f2/5Elre+dr1Tbd3ZnBy+zTLY3a39mYzzU3stWERPtJ
1RDUCPjgNVWhv3pLEErSEVZIX5I4qxVhcs5XSBo65SQNbp8V3g8hQhN8/o1fZ5mI
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 116772507679159383614843585556070698947
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 19:30:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-28 19:30:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atlanta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cox Communications, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'retail-prod-pmr.coxbusiness.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19233024327368449284724189762478862884889176732452359945967934181159811830402686185272244782155295729424284733333269680762202738441963470107623261348454168921137561960409863136463392304220559284669619050833915502987894291538809423639402894470067338340214373426293483865117599261838977391789134820172954014526639809867128799374816691351533099411194906736188604493722521897184574505709025468261891387881320869689893429812128199425041471970352631057591062708866492476244583318896934410350896139499614719997984481570705414035150375803117177950135411498659124329147071827769028259806442595266456275688216332668230218385649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							793fd039a285b60d4bc220bf69ef64a0ec9baaa1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retail-prod-pmr.coxbusiness.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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