myafn.dodmedia.osd.mil

Issued by R3

About this certificate

This digital certificate with serial number 03:85:02:51:cb:d3:e0:e7:69:4a:41:55:6b:07:0a:57:6e:0b was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=myafn.dodmedia.osd.mil

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:85:02:51:cb:d3:e0:e7:69:4a:41:55:6b:07:0a:57:6e:0b
Serial Number (int): 306597495761918562966365670998040601128459
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 36:48:f8:7c:72:ac:49:b5:af:9a:c4:36:87:05:46:f4:e5:a8:7e:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0f:a2:85:83:00:89:6c:52:48:8b:49:c8:86:7f:62:60:f3:54:d2:10
Fingerprint (sha256): 00:09:09:60:33:45:27:1b:95:7c:33:d3:cf:dc:59:e5:eb:bc:45:a3:b5:45:1f:95:db:76:eb:58:a6:7d:01:ad

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate myafn.dodmedia.osd.mil

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for myafn.dodmedia.osd.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn.myafn.dodmedia.osd.mil
doha.ogc.osd.mil
imp.myafn.dodmedia.osd.mil
media.myafn.dodmedia.osd.mil
myafn.dodmedia.osd.mil
tasa.dodmedia.osd.mil
v3.myafn.dodmedia.osd.mil
www.test-evaluation.osd.mil

Other certificates including the domain name osd.mil

(limited to 100 certificates)
myafn.dodmedia.osd.mil
secureapps.osd.mil
eRoom.tma.osd.mil
stg.service.cade.osd.mil
kbs.nsoc.health.mil
nmcp-root.med.osd.mil
www.dma.mil
bea.osd.mil
repi.osd.mil
nmcsd-root.med.osd.mil
www.dma.mil
afnconnect.myafn.dodmedia.osd.mil
mhse2e.med.osd.mil
cade.osd.mil
titus.cpms.osd.mil
opmverify.dmdc.osd.mil
dtsproweb.defensetravel.osd.mil
compos.dcpds.cpms.osd.mil
www.dma.mil
www.defense.gov
www.dma.mil
repi.osd.mil
www.pentagon.mil
www.dma.mil
afnconnect.myafn.dodmedia.osd.mil
dodmerb.tricare.osd.mil
webct2.dmdc.osd.mil
CAPE eRoom
cade.osd.mil
citrixsg.osd.mil
www.pentagon.mil
web-06-r-p.fhppub.dhhq.local
repi.osd.mil
jacks.jpeocbd.army.mil
jds.cape.osd.mil
repi.osd.mil
dach-era.med.osd.mil
guidanceweb.ousdc.osd.mil
afnconnect.myafn.dodmedia.osd.mil
pentagontours.osd.mil
dmdc.osd.mil
rcc.osd.mil
www.usace.army.mil
myafn.dodmedia.osd.mil
repi.osd.mil
www.pentagon.mil
systemarchitect.tma.osd.mil
*.jacks.jpeocbrnd.army.mil
secureapps.osd.mil
dtscdcvpn02.defensetravel.osd.mil
snap.cape.osd.mil
fermion.dmea.osd.mil
*.jacks.jpeocbrnd.army.mil
myafn.dodmedia.osd.mil
www.usace.army.mil
lms.dcpas.osd.mil
denix.osd.mil
fermion.dmea.osd.mil
SNAP.CAPE.OSD.MIL
bach-era.med.osd.mil
denix.osd.mil
lrmc-root.med.osd.mil
listserver.tma.osd.mil
godefense.dcpas.osd.mil
service.cade.osd.mil
guidanceweb.ousdc.osd.mil
fcom.cape.osd.mil
macstg.ousdc.osd.mil
login.myafn.dodmedia.osd.mil
hrnetapps.cpms.osd.mil
kbs.nsoc.health.mil
jsp-ipm.osd.mil
sepsii.tricare.osd.mil
DORWARD.jte.osd.mil
jcoc.osd.mil
uranus.cpms.osd.mil
itbudget.osd.mil
dod-executiveagent.osd.mil
cerebro-ct.dmdc.osd.mil
denix.osd.mil
dodcioext.osd.mil
www.public.navy.mil
mhse2erecv.med.osd.mil
www.dma.mil
afnconnect.myafn.dodmedia.osd.mil
www.pentagon.mil
ircmstrn.cpms.osd.mil
bolly.cpms.osd.mil
repi.osd.mil
wasp-ad.dmdc.osd.mil
art.tma.osd.mil
webst.dmdc.osd.mil
fmonline.ousdc.osd.mil
fsm.cape.osd.mi
repi.osd.mil
dmdc.mil
dmdc.mil
dmdc.mil
www.dma.mil
learning1.dmdc.osd.mil

Certificate

The complete raw certificate details for myafn.dodmedia.osd.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2AAZPcnSz0+oYzzC67g
4kUJprrgxvxx2uoMJO6L2ywcnhkGBcAIDmp6CntffuO15PSYN2Dyvyq2UyCH889b
lrObSXprhQMwIfJ3IRMs5wh1aok5p8nRLMhG6MqOfmcFgcgUHbycpKY0Ny3386w9
Ks56OE0hU+3EXjaD2UNMIkEkvsidOmkDGxNp/zmM5gkdVAtBHyw9KvnQblsFnD93
GdLFAQN98qRdGSr6WBfuuJ7apm6LNcpDYE8CSFihxcKe2dFh3xPWQ4wCiEKe3Sj8
266LaiY6VGkYqEAv8HoXYtmU6duPM+5/H32haO5hdyXco//3yf2CxIVy5+8oBdpz
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306597495761918562966365670998040601128459
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-28 16:34:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-26 16:34:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'myafn.dodmedia.osd.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21634090273261600312191712630255013784259044990855218784159651647921958022386702106260468510498479207138024904961384527734214958787227703954940936406246346684247708372503896783231856325789000473507076354579308907500143010950228842392021127701837667227097342789661411589831894935283816184621771938449572850016832786873686229542863730455209093978617946966435304452404114920407275835375881551511747570060621711571603658280357094587203525652285142273090906394396342035531428856724819784542002872129467098132970820722596980470133894506237593264614470932801005406340458119868668414833202373092258846262148463493889149006677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3648f87c72ac49b5af9ac436870546f4e5a87ed5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (210 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.myafn.dodmedia.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doha.ogc.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp.myafn.dodmedia.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.myafn.dodmedia.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myafn.dodmedia.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasa.dodmedia.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v3.myafn.dodmedia.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-evaluation.osd.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001872949297b000004030047304502210090cfc69bfbef40229224720cd78c98b58a5b8d8a9970115673bffa384d296783022011044622c349e7621f8c12a900d58f56a42adc8694960ab09c50423ed254d6cd007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187294929710000040300473045022100dd2c774eeff27e0374298f36ac6c8a41021737a358f0131882029b77014c335a0220542a8ede78d5967ef741402c57953dd28e8a3fc4a916dfc6b6b65a94e1433ba1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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