*.ns.utk.edu

- University of Tennessee -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number a3:14:a7:24:e6:64:ec:72:c6:2f:c6:8a:99:8e:50:7b was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Tennessee

Organization: University of Tennessee
Organization unit: Office of Information Technology
Address: 800 Andy Holt Tower
Postal code: 37996-1711
State / Province: TN
Locality: Knoxville
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a3:14:a7:24:e6:64:ec:72:c6:2f:c6:8a:99:8e:50:7b
Serial Number (int): 216771399336033205614938574916156280955
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 70:da:2b:fb:95:bb:c9:ba:80:f4:fa:9b:bf:4e:4c:63:78:4d:53:7c
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 58:0f:4d:0d:d9:07:e3:3e:39:ff:eb:aa:52:78:be:44:df:9f:5b:d4
Fingerprint (sha256): 03:0a:4e:ba:ae:a1:b1:34:e4:a0:1d:3b:a7:38:0f:f2:45:15:a5:cd:e0:a5:3a:7d:d8:fc:de:1d:f9:dc:7f:93

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate *.ns.utk.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ns.utk.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ns.utk.edu

Other certificates including the domain name utk.edu

(limited to 100 certificates)
proxy.lib.utk.edu
listserv.utk.edu
accolades.utk.edu
ccyal.cci.utk.edu
cge.utk.edu
tams.nursing.utk.edu
foodsafety-utk-edu.umk.dtd.mybluehost.me
spsf.utk.edu
haslamscholars.utk.edu
contracts.utk.edu
studentloans.utk.edu
curent.utk.edu
volwell.utk.edu
infosci.utk.edu
haslam.utk.edu
stream.lib.utk.edu
radideas.utk.edu
futureut.utk.edu
latte.lib.utk.edu
ef.engr.utk.edu
moodle.pemba.utk.edu
san-28-s12.tlsprovisioning.exacttarget.com
UNIVERSITY OF TENNESSEE
cehhsadvising.utk.edu
ferpa.utk.edu
mathcamp.utk.edu
registrar.utk.edu
onsf.utk.edu
programsforminors.utk.edu
law.utk.edu
eap.utk.edu
ombuds.utk.edu
studyabroad.utk.edu
wutkradio.cci.utk.edu
securedns1.planmygift.org
securedns1.planmygift.org
etbsp.utk.edu
recsports.utk.edu
cee.utk.edu
cmp.utk.edu
publichealth.utk.edu
ipamxk.ns.utk.edu
transfer.utk.edu
advising.utk.edu
etbsp.utk.edu
deanslist.utk.edu
journey.utk.edu
sci.utk.edu
universitywomensclub.utk.edu
linuxdevelop3.ips.utk.edu
diversitycouncil.utk.edu
wellness.utk.edu
news.utk.edu
pipes.utk.edu
*.ns.utk.edu
afrotc.utk.edu
centerondeafness.utk.edu
experiencelearning.utk.edu
sds.utk.edu
infosci.utk.edu
eli.utk.edu
pridecenter.utk.edu
ccyal.utk.edu
lib.utk.edu
clee.utk.edu
programsforminors.utk.edu
fnetpublic.utk.edu
ferpa.utk.edu
5655869022797824-fe2.pantheonsite.io
admin.icl.utk.edu
recycle.utk.edu
cluster.technolutions.net
www.rmc.utk.edu
securedns1.planmygift.org
www.archdesign.utk.edu
volcommunity.utk.edu
studentsuccess.utk.edu
wutkradio.cci.utk.edu
sds.utk.edu
movi1.ites.utk.edu
achieve.escoffier.edu
web.offcampuspartners.com
studentmedia.utk.edu
info.supplychainmanagement.utk.edu
parking.utk.edu
archdesign.utk.edu
facultycentral.utk.edu
gse.utk.edu
auction.utk.tennessee.edu
san-28-s12.tlsprovisioning.exacttarget.com
ccyal.utk.edu
225.utk.edu
onestop.utk.edu
servicelearning.utk.edu
cce.utk.edu
conezone.utk.edu
cehhsadvising.utk.edu
bigorangetix.utk.edu
somo.chem.utk.edu
servicelearning.utk.edu

Certificate

The complete raw certificate details for *.ns.utk.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DbmgoGmN2ndzFr54PPF
/zfuB8ozWkgEubmfko3H/mIhKy8XShA93ZzKYLNBqPPnkcR8K/MzmLEqCfpnmrfa
0BKR1QlIbvnlW4fhJGlYAeK8t8sO5VOk4KJDF89jk4JKfJ0ir4PNgQQhqTATGEsc
xjYRLp6VSMIFeC6wvvxjBLWKPddSHzw+Ng01N9OZkWGgOkKslOh3x9Vq3hKi3RRe
4/n4QOIJ8G4K+mJxeZHueZCpQG83+Txq+8GK07u0YXO6XAuiv5J5x2k0QmXxMVTG
2Vew6CJuR3gM00RAn6j857egAOxgsM0aCEB1GGMcyLKvmwVTxhmyOJX7/0ibI6Zh
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 216771399336033205614938574916156280955
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '37996-1711'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Knoxville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '800 Andy Holt Tower'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Tennessee'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Office of Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ns.utk.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26789593063282918198899239356933461997667198511261219385671970583214812291186986483679620051589036247153343425165270525081443186324543630712787872441608108997821174170120188456495958072524433629888092189362796298916358479983258472282011085857196546573077726682102874393355765867129671782002026181600405024878059451830903709886885595456910206090602254781947996367997057397943912828905782295295643091291782004909682787525162129733963899295740933656522190989222372317286811374447506950745479330319554743461270223094168123295284121528745853669608835157426139829647249800246775169940133152153502526754564410680875866808713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							70da2bfb95bbc9ba80f4fa9bbf4e4c63784d537c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ns.utk.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008ac5f66fa75fe726a5d2ee74253c5daf53eae49f7bcd4c1d86811f5d120ddfaa89353966fa636919ae0078558293bb731aeb6f0b63a6816a102756732c828e825bfe44102ff66e7102b9aa54d15e821b5da2f351573085645c1ac2c30a62733a801f355979e1053707f5657751a83499d99d8f41c35b6fbfd08fbc72a94a13fb81cbd4839c4993cdac9f84eb7539f67db61aa6728366577416afc1fc97649d228d3fd73aad46e0d48f0fb0da53e6b0e0bd6975861cde26e0a8b3412ed80978e82d35b6db5274488445cb0324f67d3fd37f65ea4a564cf4d1169b57b43788afa027b9b36dbc90ec707dcd69ce13982d907c40ecd3cdeec461e2be21557a73cb87