veterans.oneok.com

Issued by R3

About this certificate

This digital certificate with serial number 04:fa:87:61:ae:a6:c0:46:3c:74:07:ad:b7:4b:43:02:22:1b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=veterans.oneok.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fa:87:61:ae:a6:c0:46:3c:74:07:ad:b7:4b:43:02:22:1b
Serial Number (int): 433699688431852496018395200948534021071387
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 18:61:25:b8:6f:9c:87:7b:81:53:18:63:43:ea:38:c9:47:ee:36:ab
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0f:e4:08:9a:64:bb:56:c9:75:eb:b9:86:20:22:84:d7:95:bd:f4:21
Fingerprint (sha256): 0b:62:28:1c:cb:dd:62:53:25:14:0a:7e:a5:bd:7c:39:1e:92:a7:c9:cc:fa:45:38:ae:2f:20:70:a2:46:84:11

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate veterans.oneok.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for veterans.oneok.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

veterans.oneok.com

Other certificates including the domain name oneok.com

(limited to 100 certificates)
srvise01poke.oneok.com
*.crm.oneok.com
veterans.oneok.com
securemail.oneok.com
*.oneok.com
mobile-t.oneok.com
veterans.oneok.com
veterans.oneok.com
bomgar.oneok.com
*.crm.oneok.com
sp.crmtest.oneok.com
veterans.oneok.com
yourtgsaccount.oneok.com
remote.oneok.com
*.testcrm.oneok.com
*.oneok.com
bomgar.oneok.com
sip.oneok.com
wireless.oneok.com
mail.oneok.com
*.crmlab1.oneok.com
camweb-kmcmc.oneok.com
veterans.oneok.com
apps.oneok.com
*.crm.oneok.com
securemail.oneok.com
citrix.oneok.com
mail.oneok.com
*.testcrm.oneok.com
*.crmlab1.oneok.com
bomgar.oneok.com
*.crmlab1.oneok.com
camweb-kmcmc.oneok.com
oneokadfstest.oneok.com
mail.oneok.com
sp.crm.oneok.com
www.oneok.com
vpn.oneok.com
notificationpostback.oneok.com
bomgar.oneok.com
*.testcrm.oneok.com
oneokadfs3.oneok.com
*.oneok.com
opcapps.oneok.com
oneokadfs3.oneok.com
*.dyn.oneok.com
mobile.oneok.com
sip.oneok.com
mobile.oneok.com
video.oneok.com
yourkgsaccount.oneok.com
*.crmlab1.oneok.com
veterans.oneok.com
sp.crm.oneok.com
*.oneok.com
TDCISEASX11POKE.oneok.com
video.oneok.com
ess.oneok.com
veterans.oneok.com
*.oneok.com
veterans.oneok.com
ir.oneok.com
veterans.oneok.com
sip.oneok.com
apps.oneok.com
mail.oneok.com
mail.oneok.com
mobile.oneok.com
veterans.oneok.com
veterans.oneok.com
remote.oneok.com
oneok.com
ppsyslog.oneok.com
*.dyn.oneok.com
keeper.oneok.com
mail.oneok.com
swamrv50.oneok.com
*.dyn.oneok.com
*.gis.oneok.com
exchange.oneok.com
vpn.oneok.com
keeperdev.oneok.com
oneok.com
mail.oneok.com
veterans.oneok.com
ir.oneok.com
ir.oneok.com
notificationpostback.oneok.com
wireless.oneok.com
test.oneok.com
veterans.oneok.com
git.oneok.com
veterans.oneok.com
veterans.oneok.com
TDCISEASX11POKE.oneok.com
*.dyn.oneok.com
*.CRM1.ONEOK.COM
yourongaccount.oneok.com
camweb-ofs.oneok.com
*.oneok.com

Certificate

The complete raw certificate details for veterans.oneok.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 433699688431852496018395200948534021071387
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-07 00:26:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-06 00:26:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'veterans.oneok.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 910544977944297224087612836783136501400489310880188100125771055195572806685079568787966891258484601409514887787157692786331099137988371766746651328293899113145658040478486726739891870620152756910562682843878516342606026642718490799312966472283985294458893963336778471266833215645676764966972776305854551066110024364385599291112579048808183384787723373621749648616162083454479093555251491353575576047280915311133003398421409032795353074303763902086546219871947250789060013647392723488224675420509167512216491841143650462530675824525046714062542819420446693998163440563821509211630250001228907937888953369565793863215345607433831054742373111639769888483368886775154164309773363656320110432305346405774181654844817554337234141826344018847580948247170158331545424129475423458060836800796190165930449276407765229280762735599115317523249286331233957977314557972407914798536708049322208235187857075222343491161274807074311007807681597850743001278974619187510903956504306934160938804453569777963943838154904989152146822131922470055772880207636833565260684217061453421883712566669754332940665748329534929710702421898572315547509297599111863351713162632121015994664353726074126980092284306099656530114394118355594402881691324702361979000493189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							186125b86f9c877b8153186343ea38c947ee36ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veterans.oneok.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c200000178a9f07f3d00000403004730450220210f37baced8024eccf47aa87446817323029592fb0628977ef1f94ba8e8c226022100f3fced28d7510d8c128eb9aab68d065757bb46e4895c28be2e9a60ab837c92220077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000178a9f07f680000040300483046022100c464c3dd2122a4a288c6c618b43c266a8cfef5e819d68002a79df2a9b20e82a90221008bfee8f864091d08c6cb1ea14bac031dbd501e8af46dffa052fbbe686916f6e7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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