curent.utk.edu

- University of Tennessee -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 51:d7:5c:05:54:47:da:2b:85:e8:ae:a4:25:47:d7:b9 was issued on by Internet2.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Tennessee

Organization: University of Tennessee
Organization unit: CURENT
Address: 800 Andy Holt Tower
Postal code: 37996-1711
State / Province: TN
Locality: Knoxville
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 51:d7:5c:05:54:47:da:2b:85:e8:ae:a4:25:47:d7:b9
Serial Number (int): 108785677887071127007281159126445971385
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 28:b5:a5:69:6a:8d:4c:34:ff:14:8b:39:5b:df:51:36:14:b7:a3:30
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): a1:0d:d0:cc:a8:05:2c:93:c4:2e:fd:01:66:99:bc:5e:40:c4:a0:80
Fingerprint (sha256): 00:69:73:68:41:0f:95:83:87:da:8c:69:75:db:89:36:ea:b2:e9:0e:b2:19:2e:a5:96:fb:aa:dc:60:55:1d:f5

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate curent.utk.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for curent.utk.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

curent.utk.edu
*.curent.utk.edu

Other certificates including the domain name utk.edu

(limited to 100 certificates)
proxy.lib.utk.edu
listserv.utk.edu
accolades.utk.edu
ccyal.cci.utk.edu
cge.utk.edu
tams.nursing.utk.edu
foodsafety-utk-edu.umk.dtd.mybluehost.me
spsf.utk.edu
haslamscholars.utk.edu
contracts.utk.edu
studentloans.utk.edu
curent.utk.edu
volwell.utk.edu
infosci.utk.edu
haslam.utk.edu
stream.lib.utk.edu
radideas.utk.edu
futureut.utk.edu
latte.lib.utk.edu
ef.engr.utk.edu
moodle.pemba.utk.edu
san-28-s12.tlsprovisioning.exacttarget.com
UNIVERSITY OF TENNESSEE
cehhsadvising.utk.edu
ferpa.utk.edu
mathcamp.utk.edu
registrar.utk.edu
onsf.utk.edu
programsforminors.utk.edu
law.utk.edu
eap.utk.edu
ombuds.utk.edu
studyabroad.utk.edu
wutkradio.cci.utk.edu
securedns1.planmygift.org
securedns1.planmygift.org
etbsp.utk.edu
recsports.utk.edu
cee.utk.edu
cmp.utk.edu
publichealth.utk.edu
ipamxk.ns.utk.edu
transfer.utk.edu
advising.utk.edu
etbsp.utk.edu
deanslist.utk.edu
journey.utk.edu
sci.utk.edu
universitywomensclub.utk.edu
linuxdevelop3.ips.utk.edu
diversitycouncil.utk.edu
wellness.utk.edu
news.utk.edu
pipes.utk.edu
*.ns.utk.edu
afrotc.utk.edu
centerondeafness.utk.edu
experiencelearning.utk.edu
sds.utk.edu
infosci.utk.edu
eli.utk.edu
pridecenter.utk.edu
ccyal.utk.edu
lib.utk.edu
clee.utk.edu
programsforminors.utk.edu
fnetpublic.utk.edu
ferpa.utk.edu
5655869022797824-fe2.pantheonsite.io
admin.icl.utk.edu
recycle.utk.edu
cluster.technolutions.net
www.rmc.utk.edu
securedns1.planmygift.org
www.archdesign.utk.edu
volcommunity.utk.edu
studentsuccess.utk.edu
wutkradio.cci.utk.edu
sds.utk.edu
movi1.ites.utk.edu
achieve.escoffier.edu
web.offcampuspartners.com
studentmedia.utk.edu
info.supplychainmanagement.utk.edu
parking.utk.edu
archdesign.utk.edu
facultycentral.utk.edu
gse.utk.edu
auction.utk.tennessee.edu
san-28-s12.tlsprovisioning.exacttarget.com
ccyal.utk.edu
225.utk.edu
onestop.utk.edu
servicelearning.utk.edu
cce.utk.edu
conezone.utk.edu
cehhsadvising.utk.edu
bigorangetix.utk.edu
somo.chem.utk.edu
servicelearning.utk.edu

Certificate

The complete raw certificate details for curent.utk.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGmTCCBYGgAwIBAgIQUddcBVRH2iuF6K6kJUfXuTANBgkqhkiG9w0BAQsFADB2
MQswCQYDVQQGEwJVUzELMAkGA1UECBMCTUkxEjAQBgNVBAcTCUFubiBBcmJvcjES
MBAGA1UEChMJSW50ZXJuZXQyMREwDwYDVQQLEwhJbkNvbW1vbjEfMB0GA1UEAxMW
SW5Db21tb24gUlNBIFNlcnZlciBDQTAeFw0xODA0MDUwMDAwMDBaFw0xOTA0MDUy
MzU5NTlaMIGtMQswCQYDVQQGEwJVUzETMBEGA1UEERMKMzc5OTYtMTcxMTELMAkG
A1UECBMCVE4xEjAQBgNVBAcTCUtub3h2aWxsZTEcMBoGA1UECRMTODAwIEFuZHkg
SG9sdCBUb3dlcjEgMB4GA1UEChMXVW5pdmVyc2l0eSBvZiBUZW5uZXNzZWUxDzAN
BgNVBAsTBkNVUkVOVDEXMBUGA1UEAxMOY3VyZW50LnV0ay5lZHUwggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQDI6d5+xUEAfETBcjd9Brnkazgao0PHLxfl
HYkzZbZBHg/2H3Wh+fXqttF4xYjmppucr/3+Rle2pSEprtrkUtwHZTemY8tq7PzL
BUtIbcGrLKEQkL2s1vAqavfP5Y3ACtSq/qg8jWrPtFhJEORuCZRyrEyv9E8rV93d
9szgQeqm89QkC64lbMR0nbw9tjsfioUzXGUWstK/1aapOkT43fv1FEa6GzLOGuwa
oeUuQgEywRZRVFA+eZxlMNUMC3d88o/+Vp4sXL4GMF0/YLICWs1iiuHqb5ENa3Ke
gXY9tyMVB0l282ym7TMbn+lJOjQ4IoKmf1iE7lDUlhc7TijuOLcqyCzDBF0ic+46
SNmEui6H0zWLuornzPMriDv/l3BTgsXF2KABBMjdNWZ18mHmH9NNAGUMDLXLSdk2
QfQDQp/lqozPMduWuVb0Ol9xpTckZDg7sX5xhXdMBgrdojT/QsD5U2IRWbbOJfZJ
gYFajP2z+iPIteOzWqrGsyVY5UuDJJkqDGaF+RNeEkNwmnv0amhHTz0LDR+ydpdt
QWknd4NN3ZRiUo/U9El30Xufkt2BkG36+s+zSD4M3reN7FXO0QWaq/KwXJTx10ir
FR2lF6O/7exw1XhTmMjzLqRDwCGbqmvTq3/Q51fSBg+56yyB7uBsbiFWPPugEEyg
t3fwe7qopQIDAQABo4IB6TCCAeUwHwYDVR0jBBgwFoAUHgWjd49sluJbh0umtIas
cQAM5zgwHQYDVR0OBBYEFCi1pWlqjUw0/xSLOVvfUTYUt6MwMA4GA1UdDwEB/wQE
AwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjBnBgNVHSAEYDBeMFIGDCsGAQQBriMBBAMBATBCMEAGCCsGAQUFBwIBFjRodHRw
czovL3d3dy5pbmNvbW1vbi5vcmcvY2VydC9yZXBvc2l0b3J5L2Nwc19zc2wucGRm
MAgGBmeBDAECAjBEBgNVHR8EPTA7MDmgN6A1hjNodHRwOi8vY3JsLmluY29tbW9u
LXJzYS5vcmcvSW5Db21tb25SU0FTZXJ2ZXJDQS5jcmwwdQYIKwYBBQUHAQEEaTBn
MD4GCCsGAQUFBzAChjJodHRwOi8vY3J0LnVzZXJ0cnVzdC5jb20vSW5Db21tb25S
U0FTZXJ2ZXJDQV8yLmNydDAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNlcnRy
dXN0LmNvbTATBgorBgEEAdZ5AgQDAQH/BAIFADArBgNVHREEJDAigg5jdXJlbnQu
dXRrLmVkdYIQKi5jdXJlbnQudXRrLmVkdTANBgkqhkiG9w0BAQsFAAOCAQEADFLc
HIedEongyDykJ5O1uTU5u4eiZudZk8AJThlZ0y0BeQOdoVXZFT8MdPqG8BaB/ec7
VfWbcXucVVi/VHcsCDVh5/zwMroePPiatLDVzVTjEToBov0Xm6IpIQWRPmvcozFL
wzRkx8oCz2Qb309ADGDe2lOk8h1juR6peXLrxO0uZV1EFx9IZuzhArDEMBfX/2l7
8I/BmoaKmbJqrW8sF/UBidzXVOzbGLuPWFZU6828jT5uhHWuA9+QA3/68FNPx2Vr
hs3QlAOnvRE+cNSpgM3ZXeGwHaY+BI4bk+NZcERqHTMy6rsLaE/j/SB5LclBbj0N
F+O2BOAduU6399f+zA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 108785677887071127007281159126445971385
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '37996-1711'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Knoxville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '800 Andy Holt Tower'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Tennessee'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CURENT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'curent.utk.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 819655777571635874624095206805414686483283021504434188485943465235118349936973040113451904880307223534171955753996291607548722451459344780108925395256286151185097242154172239329881917984344778157390445079802570065911906790396663353326557079364244929001260874635692187430606878310598330373762785525373307976018905191963941489509938865329675729448330882463947400350321959330300429615066386236359009083948757178340559994393363876536833095573316178909348110267140938337280516514278878724584983833021635105682080285280947438614524866768037990518321667250750706124604706898967010565886195523254415657110199365216570955575103898265391940618827651513788792400129328287113726598559201456609361271541269550000048824122356241994952724005546931429527866840885947202089647545933588198483754544231455903590486773906211471603365089817950853702329785935084166793158330194525908749390212098720392665600937104925396766846563404490593092506800994438050779594646403113429863928262095896234221288057206649408784699150203312238773935088511354554222553343215616869322178272542354222767893486022990965946382183204803255763762171763844913419844531067661653749073048295589900730124207763159771595209430012125758262672948063533260057249316106706656063542438053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							28b5a5696a8d4c34ff148b395bdf513614b7a330
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curent.utk.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.curent.utk.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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