onestop.utk.edu

Issued by R3

About this certificate

This digital certificate with serial number 03:54:8a:8e:82:ab:58:db:64:f8:0a:eb:d9:47:2f:c7:f4:a7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=onestop.utk.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:54:8a:8e:82:ab:58:db:64:f8:0a:eb:d9:47:2f:c7:f4:a7
Serial Number (int): 290104750036500565383866500826843841033383
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3b:60:bd:a5:15:13:c3:4a:20:f6:64:0f:d5:f3:69:f3:1a:a5:e9:10
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ed:39:be:58:c4:44:5f:b2:bc:b9:c4:99:b8:4c:31:1f:2c:01:c9:fb
Fingerprint (sha256): 04:c0:63:bd:aa:de:91:84:5a:25:c4:b2:10:c3:f0:07:1b:7a:5c:a1:2d:e5:7d:8c:7d:ef:ee:c3:75:f6:f6:2f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate onestop.utk.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for onestop.utk.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

onestop.utk.edu

Other certificates including the domain name utk.edu

(limited to 100 certificates)
proxy.lib.utk.edu
listserv.utk.edu
accolades.utk.edu
ccyal.cci.utk.edu
cge.utk.edu
tams.nursing.utk.edu
foodsafety-utk-edu.umk.dtd.mybluehost.me
spsf.utk.edu
haslamscholars.utk.edu
contracts.utk.edu
studentloans.utk.edu
curent.utk.edu
volwell.utk.edu
infosci.utk.edu
haslam.utk.edu
stream.lib.utk.edu
radideas.utk.edu
futureut.utk.edu
latte.lib.utk.edu
ef.engr.utk.edu
moodle.pemba.utk.edu
san-28-s12.tlsprovisioning.exacttarget.com
UNIVERSITY OF TENNESSEE
cehhsadvising.utk.edu
ferpa.utk.edu
mathcamp.utk.edu
registrar.utk.edu
onsf.utk.edu
programsforminors.utk.edu
law.utk.edu
eap.utk.edu
ombuds.utk.edu
studyabroad.utk.edu
wutkradio.cci.utk.edu
securedns1.planmygift.org
securedns1.planmygift.org
etbsp.utk.edu
recsports.utk.edu
cee.utk.edu
cmp.utk.edu
publichealth.utk.edu
ipamxk.ns.utk.edu
transfer.utk.edu
advising.utk.edu
etbsp.utk.edu
deanslist.utk.edu
journey.utk.edu
sci.utk.edu
universitywomensclub.utk.edu
linuxdevelop3.ips.utk.edu
diversitycouncil.utk.edu
wellness.utk.edu
news.utk.edu
pipes.utk.edu
*.ns.utk.edu
afrotc.utk.edu
centerondeafness.utk.edu
experiencelearning.utk.edu
sds.utk.edu
infosci.utk.edu
eli.utk.edu
pridecenter.utk.edu
ccyal.utk.edu
lib.utk.edu
clee.utk.edu
programsforminors.utk.edu
fnetpublic.utk.edu
ferpa.utk.edu
5655869022797824-fe2.pantheonsite.io
admin.icl.utk.edu
recycle.utk.edu
cluster.technolutions.net
www.rmc.utk.edu
securedns1.planmygift.org
www.archdesign.utk.edu
volcommunity.utk.edu
studentsuccess.utk.edu
wutkradio.cci.utk.edu
sds.utk.edu
movi1.ites.utk.edu
achieve.escoffier.edu
web.offcampuspartners.com
studentmedia.utk.edu
info.supplychainmanagement.utk.edu
parking.utk.edu
archdesign.utk.edu
facultycentral.utk.edu
gse.utk.edu
auction.utk.tennessee.edu
san-28-s12.tlsprovisioning.exacttarget.com
ccyal.utk.edu
225.utk.edu
onestop.utk.edu
servicelearning.utk.edu
cce.utk.edu
conezone.utk.edu
cehhsadvising.utk.edu
bigorangetix.utk.edu
somo.chem.utk.edu
servicelearning.utk.edu

Certificate

The complete raw certificate details for onestop.utk.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy36T1USGeHSC12F1NQv9
IxoEQBWuWu9DIeo5W+hbXIHopjABgLm3gxDMwOAJ+GDzx5valMqUEDeywP0sdNEA
PFTnrBBTy6T4+F675Zu05+NOveaJDZe6dDZtqIRC7FRJk3o6ZwONmrre76PGLPoV
AUvVz4DLS8nQ2ib+g+QY5wrkUUyNWfVrAiWRtJoeW5t1E8w6b3s7dsdp2BzI+1vD
jDIz1uMceVIIwldwoU/j32+aSJSUBbVC+HhrCUUs0To6Jt05vCsCYtO7+SZN1Rr2
Z442h0apBV31LmpuzCWs7CJS0Zm+gKQt9UjBuUTuCjAHfxYSyPf250kJS0IwhTr7
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290104750036500565383866500826843841033383
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-05 16:27:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 16:27:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'onestop.utk.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25688793586363474757348859640998082332490607678903054887365470853838766651152911588731141027460194771643725248296205117969841614240910442616254547901978544884373360318655857577611829965045786194111929827761219409740900861022418585080234942313359092619045753373807615424482023199602015421268923208317069889575797721736850968854670753761992626917296442347233188059672906293571217204409008081303040384426738290617194331606469921027571766061314829958334091297932169539556454571131842776354204580957487399130725820548848909490955798904822854867333873409948012943505944990724381638550526662747237417064569984190102432840453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b60bda51513c34a20f6640fd5f369f31aa5e910
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onestop.utk.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a6662d4120000040300463044022047c4b2022838646488d2025603faa8cb424bf32d4df425c67f5a1e4e98edab9f022049644dbee7ca1280642fa0e50981ac2cdb0b7cbd74443487691484ed6e7a51c20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a6662d45f0000040300483046022100bb36d3d09c4aecb3bd8a308ae8c8c546e2da537a29b9b2450fb101d1ba1b212c022100a8e907d71546bfcb391963f8bb7d3392821fea33dc2af9a5c2bb295edbfc7000
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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