veterans.oneok.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:10:9c:cc:d1:34:7c:27:ab:a9:6d:8a:d0:b6:a3:77:85:ec was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=veterans.oneok.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:10:9c:cc:d1:34:7c:27:ab:a9:6d:8a:d0:b6:a3:77:85:ec
Serial Number (int): 266989798705099239050210643938006674146796
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7b:1d:58:fb:dc:24:15:f0:6a:36:19:dd:d0:c8:8c:52:aa:a8:3c:f1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 34:55:88:83:1a:4d:23:ac:a9:6b:cf:b6:1f:8d:9c:1f:6c:c1:fd:fe
Fingerprint (sha256): 87:b5:a1:7c:37:83:9d:05:70:e7:41:23:52:ae:fa:41:80:9c:42:19:6e:94:08:b9:83:5c:3d:0e:c5:c2:20:66

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate veterans.oneok.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for veterans.oneok.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

veterans.oneok.com

Other certificates including the domain name oneok.com

(limited to 100 certificates)
srvise01poke.oneok.com
*.crm.oneok.com
veterans.oneok.com
securemail.oneok.com
*.oneok.com
mobile-t.oneok.com
veterans.oneok.com
veterans.oneok.com
bomgar.oneok.com
*.crm.oneok.com
sp.crmtest.oneok.com
veterans.oneok.com
yourtgsaccount.oneok.com
remote.oneok.com
*.testcrm.oneok.com
*.oneok.com
bomgar.oneok.com
sip.oneok.com
wireless.oneok.com
mail.oneok.com
*.crmlab1.oneok.com
camweb-kmcmc.oneok.com
veterans.oneok.com
apps.oneok.com
*.crm.oneok.com
securemail.oneok.com
citrix.oneok.com
mail.oneok.com
*.testcrm.oneok.com
*.crmlab1.oneok.com
bomgar.oneok.com
*.crmlab1.oneok.com
camweb-kmcmc.oneok.com
oneokadfstest.oneok.com
mail.oneok.com
sp.crm.oneok.com
www.oneok.com
vpn.oneok.com
notificationpostback.oneok.com
bomgar.oneok.com
*.testcrm.oneok.com
oneokadfs3.oneok.com
*.oneok.com
opcapps.oneok.com
oneokadfs3.oneok.com
*.dyn.oneok.com
mobile.oneok.com
sip.oneok.com
mobile.oneok.com
video.oneok.com
yourkgsaccount.oneok.com
*.crmlab1.oneok.com
veterans.oneok.com
sp.crm.oneok.com
*.oneok.com
TDCISEASX11POKE.oneok.com
video.oneok.com
ess.oneok.com
veterans.oneok.com
*.oneok.com
veterans.oneok.com
ir.oneok.com
veterans.oneok.com
sip.oneok.com
apps.oneok.com
mail.oneok.com
mail.oneok.com
mobile.oneok.com
veterans.oneok.com
veterans.oneok.com
remote.oneok.com
oneok.com
ppsyslog.oneok.com
*.dyn.oneok.com
keeper.oneok.com
mail.oneok.com
swamrv50.oneok.com
*.dyn.oneok.com
*.gis.oneok.com
exchange.oneok.com
vpn.oneok.com
keeperdev.oneok.com
oneok.com
mail.oneok.com
veterans.oneok.com
ir.oneok.com
ir.oneok.com
notificationpostback.oneok.com
wireless.oneok.com
test.oneok.com
veterans.oneok.com
git.oneok.com
veterans.oneok.com
veterans.oneok.com
TDCISEASX11POKE.oneok.com
*.dyn.oneok.com
*.CRM1.ONEOK.COM
yourongaccount.oneok.com
camweb-ofs.oneok.com
*.oneok.com

Certificate

The complete raw certificate details for veterans.oneok.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266989798705099239050210643938006674146796
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-06 11:38:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-04 11:38:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'veterans.oneok.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 744312550994343071723578691310753307413269832958358079188650541305481829625778003043168053288553709945530695787311086242541183638385244326894406304416930060927581872999487123729616107988606389322091063002723952566447030882994342478236042150237724912285025347089367984748858508207652158395374429273378091267035196797107426348543670214836927816397281322784552638016521348453743053994877908823277945382089136507821740046052393338893420146621315677064234789598029587326424926835181385964230483910841158319850722852078652033239139553294228953896483608499841239388677319773502448265952295182325471684660237017468891346219782500906394973760765613847840788763555329552966898279633957648030335748474784988082560704221198530633670773605519987867281587750554876014260369119541722228681220976828352703569376825045948466161123635907269717246287932780797947767649196768582710774671821109044773792487933108646529052491603695587596559778959736567534542490333072008650788803732772629001437993445471787168694880096803920079537535706013748128406774965051817785341490996179742200594221286014212257899528782629436377693222118820356113554140970956549167207765779449547506393662458669009401413722085161986163056115807740791806203133055714478741463872949407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b1d58fbdc2415f06a3619ddd0c88c52aaa83cf1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veterans.oneok.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000174fdebd809000004030047304502205bfcbdb8cd797d2429108ee96c9cd19c6004d0cc6d3be565b5de5c57ff038488022100aca96cedf3164d2f255d954655e59248370ab86f53910b288cce28bbfdd2742c007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000174fdebd7dd0000040300483046022100b5857f39d7c0416deec5f49edfdc16a716aebb2dfab7d36baba225385e255a60022100eba6fc977e971a95687574aff071fce926f90fa5575dcf6a59d922a3ca378f13
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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