coxhealth.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 01:ae:17:49:a3:3c:ad:36:d1:61:08:52:38:03:3f:29 was issued on by Amazon.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=coxhealth.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:ae:17:49:a3:3c:ad:36:d1:61:08:52:38:03:3f:29
Serial Number (int): 2233159978766133540653698294499983145
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 7d:78:83:4a:7b:e8:a5:d7:71:01:8d:04:b5:c4:ca:a2:16:93:8b:bc
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): f4:00:60:b3:18:e1:e8:90:64:d4:c7:8c:85:da:e9:9f:97:86:b9:93
Fingerprint (sha256): c6:b4:ed:bf:bd:e7:38:d3:af:12:95:9c:f6:bb:28:b2:9a:a9:71:8f:3c:8f:d1:0e:71:0f:bd:c8:0c:15:fe:a5

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate coxhealth.com

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for coxhealth.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

coxhealth.com
*.coxbranson.com
*.ferrellduncan.com
*.coxfmr.com
skaggs.net
coxhealth.net
*.coxhealthnetwork.com
coxfmr.com
*.skaggs.net
coxhealth-redirect.mostlyserious.io
coxhealthnetwork.com
ferrellduncan.com
coxbranson.com
*.coxhealth.net
*.coxhealth.com
*.coxbranson.net
coxbranson.net

Other certificates including the domain name coxhealth.com

(limited to 100 certificates)
*.coxhealth.com
doctors.coxhealth.com
home2.coxhealth.com
*.coxhealth.com
coxhealth.com
coxhealth.com
coxhealth.com
media.coxhealth.com
shop1906.coxhealth.com
doctors.coxhealth.com
*.coxhealth.com
doctors.coxhealth.com
*.coxhealth.com
*.coxhealth.com
www.coxhealth.com
*.coxhealth.com
coxhealth.com
*.coxhealth.com
coxhealth.com
access.coxhealth.com
shop1906.coxhealth.com
static.coxhealth.com
doctors.coxhealth.com
*.coxhealth.com
www.coxhealth.com
*.coxhealth.com
coxhealth.com
provisionserver.coxhealth.com
*.coxhealth.com
*.coxhealth.com
blackboardapp.coxhealth.com
*.coxhealth.com
*.coxhealth.com
coxhealth.com
*.coxhealth.com
coxhealth.com
staffweb.coxhealth.com
coxhealth.com
*.coxhealth.com
*.coxhealth.com
coxdocs2.coxhealth.com
*.coxhealth.com
*.coxhealth.com
coxhealth.com
imperva.com
doctors.coxhealth.com
static.coxhealth.com
*.coxhealth.com
media.coxhealth.com
*.coxhealth.com
*.coxhealth.com
static.coxhealth.com
*.coxhealth.com
access.coxhealth.com
*.coxhealth.com
*.coxhealth.com
media.coxhealth.com
www.coxhealth.com
*.coxhealth.com
www.coxhealth.com
webmail.coxhealth.com
webmail.coxhealth.com
webmail.coxhealth.com
mail.coxhealth.com
*.coxhealth.com
*.coxhealth.com
*.coxhealth.com
imaging.coxhealth.com
home.coxhealth.com
lyncaccess01.coxhealth.com
coxhealth.com
lyncaccess01.coxhealth.com
home.coxhealth.com
*.coxhealth.com
mft.coxhealth.com
shop1906.coxhealth.com
*.coxhealth.com
coxhealth.com
*.coxhealth.com
shop1906.coxhealth.com
*.coxhealth.com
*.coxhealth.com
media.coxhealth.com
webmail.coxhealth.com
media.coxhealth.com
jobs.coxhealth.com
shop1906.coxhealth.com
webmail.coxhealth.com
*.coxhealth.com
imaging.coxhealth.com
*.coxhealth.com
staffweb.coxhealth.com
*.coxhealth.com
*.coxhealth.com
static.coxhealth.com
*.coxhealth.com
coxhealth.com
coxhealth.com
static.coxhealth.com
coxhealth.com

Certificate

The complete raw certificate details for coxhealth.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvokopvwAgqAv9WZHzKxO
YWZS2BnQqAfZQtf+13l3eearsdKBl0lm6rNVQ1jEvenB8mEF1hi0LOvKYIqNu5iB
BlRsmBz9e3wZIQXxWnctNzc3W+bb5tBL8PGQBhB0Oi9PARlo48uCZ79mRtfHyAYg
HvhBeBKaLXVxme9LRWntCS6nuphlFAfrbOeCiQosveilmPhbV/1e34hILanZZnwa
8WIxJmc3NCo4NfxHGnMQM07bkd1FXheq6iDn/jgq0eXAMd7VUU7nxQ2xkjWQ+HNI
RSM1koz0m6w0q7gUJgYUgMBG4N/Og/9m8UwXVuMBMOmdVkyXZ4VgBqkemwl6+Dwh
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2233159978766133540653698294499983145
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'coxhealth.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24052913467645321126653747329639618997571048500255616735748697942214408676339129921669096077074891546130896779480152737394305644929936344594097344490141509770605244791616421676247904590357059331639088189513505610426176033484406342087093515774996329100298257552508064985315607704219399730958603416363678730569232946108368320672145271001275233409159895449752654421381894327258279627525718694481695648516369920723120279645329472243278614493470702376590027314319123212474682187365435367927594668842535198798981703520365055889220610122664958263567771207835974099530869913011051739500731784334687527543668382610729631228233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d78834a7be8a5d771018d04b5c4caa216938bbc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (311 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coxhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coxbranson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ferrellduncan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coxfmr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skaggs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coxhealth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coxhealthnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coxfmr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skaggs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coxhealth-redirect.mostlyserious.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coxhealthnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferrellduncan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coxbranson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coxhealth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coxhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coxbranson.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coxbranson.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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