www.afrc.af.mil

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b2:85:59:55:43:20:06:58:57:93:61:4b:c1:b4:a8:d9:11 was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.afrc.af.mil

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b2:85:59:55:43:20:06:58:57:93:61:4b:c1:b4:a8:d9:11
Serial Number (int): 322084370274390604237008158647534517541137
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c8:f3:da:e8:d9:72:a3:44:e9:7f:4b:cc:c4:3a:50:df:13:1a:67:86
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1e:7f:ee:7f:5b:41:09:5f:8e:22:83:62:fa:98:3a:c1:3b:35:64:8c
Fingerprint (sha256): 00:c2:6b:48:c5:59:b6:da:c2:95:7d:6d:67:c5:7f:67:3b:59:e6:a9:5c:28:93:a4:51:ba:94:9b:25:a3:b3:0d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.afrc.af.mil

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.afrc.af.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pdg.af.mil
www.10af.afrc.af.mil
www.12af.acc.af.mil
www.15wing.af.mil
www.1af.acc.af.mil
www.22af.afrc.af.mil
www.24sow.af.mil
www.25af.af.mil
www.301fw.afrc.af.mil
www.302aw.afrc.af.mil
www.307bw.afrc.af.mil
www.310sw.afrc.af.mil
www.315aw.afrc.af.mil
www.349amw.afrc.af.mil
www.352sow.af.mil
www.353sog.af.mil
www.37trw.af.mil
www.388fw.acc.af.mil
www.403wg.afrc.af.mil
www.419fw.afrc.af.mil
www.433aw.afrc.af.mil
www.442fw.afrc.af.mil
www.445aw.afrc.af.mil
www.446aw.afrc.af.mil
www.459arw.afrc.af.mil
www.477fg.afrc.af.mil
www.4af.afrc.af.mil
www.505ccw.acc.af.mil
www.507arw.afrc.af.mil
www.512aw.afrc.af.mil
www.514amw.afrc.af.mil
www.552acw.acc.af.mil
www.59mdw.af.mil
www.624rsg.afrc.af.mil
www.908aw.afrc.af.mil
www.913ag.afrc.af.mil
www.916arw.afrc.af.mil
www.919sow.afrc.af.mil
www.920rqw.afrc.af.mil
www.926wing.afrc.af.mil
www.927arw.afrc.af.mil
www.931arw.afrc.af.mil
www.932aw.afrc.af.mil
www.940arw.afrc.af.mil
www.943rqg.afrc.af.mil
www.944fw.afrc.af.mil
www.960cyber.afrc.af.mil
www.acc.af.mil
www.aetc.af.mil
www.afcent.af.mil
www.afgsc.af.mil
www.afhistory.af.mil
www.afhistoryandmuseums.af.mil
www.afimsc.af.mil
www.afrc.af.mil
www.afsoc.af.mil
www.airman.af.mil
www.altus.af.mil
www.andersen.af.mil
www.arpc.afrc.af.mil
www.barksdale.af.mil
www.basictraining.af.mil
www.beale.af.mil
www.cannon.af.mil
www.citamn.afrc.af.mil
www.columbus.af.mil
www.creech.af.mil
www.dm.af.mil
www.dobbins.afrc.af.mil
www.dyess.af.mil
www.eielson.af.mil
www.ellsworth.af.mil
www.goodfellow.af.mil
www.gosere.af.mil
www.grissom.afrc.af.mil
www.holloman.af.mil
www.homestead.afrc.af.mil
www.hurlburt.af.mil
www.jber.af.mil
www.keesler.af.mil
www.kunsan.af.mil
www.laughlin.af.mil
www.luke.af.mil
www.march.afrc.af.mil
www.maxwell.af.mil
www.minneapolis.afrc.af.mil
www.moody.af.mil
www.mountainhome.af.mil
www.nasic.af.mil
www.nationalmuseum.af.mil
www.nellis.af.mil
www.niagara.afrc.af.mil
www.offutt.af.mil
www.osan.af.mil
www.pacaf.af.mil

Other certificates including the domain name af.mil

(limited to 100 certificates)
sso.nasiccloud.af.mil
angelfire.vdl.afrl.af.mil
www.honorguard.af.mil
apc3-ec-01.ang.ds.af.mil
cqmap.cce.af.mil
www.afncr.hq.af.mil
coins9iapp.scott.af.mil
www.afcyber.af.mil
www.afrc.af.mil
ar.afcec-cloud.af.mil
*.coder-gov.nasic.af.mil
oars189.dng.cie.af.mil
mdm.test.cce.af.mil
afbrac.hq.af.mil
WEDNG11645.dng.cie.af.mil
52arty-ws-005v.afrc.af.mil
www.af.mil
efoia.cce.af.mil
www.gil.cetl.gunter.af.mil
hcloginorigin.maxwell.af.mil
lrt2.my.af.mil
mow-g-mrly-001.afgate.ad.af.mil
deamsbpel.cie.af.mil
portal.jbsa.af.mil
ej-crl2.my.af.mil
ihs.afrc.af.mil
UAT.MEDXS.AF.MIL
owscollab.barksdale.af.mil
deamsoam0010a.cie.af.mil
acesdsso.cie.af.mil
deamsgrdintconsole.cie.af.mil
www.ang.af.mil
asli.af.mil
wargaming.hq.af.mil
wildcard.cce.af.mil
PETERSON-MAIL1.afnoc.af.mil
cie-sdp-dp.cie.af.mil
www.uat.medxs.af.mil
www.damis.afaa.hq.af.mil
netdev.hq.af.mil
afrcdesktops.us.af.mil
kir-g-mrly-002.afgate.ad.af.mil
bermuda.af.mil
crosslink.af.mil
development.lcmp.af.mil
remote1.afwa.af.mil
armsweb.afpc.randolph.af.mil
aiportal.acc.af.mil
f16ocm.hill.af.mil
diode.nasic.af.mil
aftoc.hill.af.mil
glens0057-web8.frontrange.afspc.ds.af.mil
ows.sembach.af.mil
www.honorguard.af.mil
pass.hq.af.mil
w40.afpc.randolph.af.mil
wecstclnt85.gateway.cie.af.mil
www.airforcefaptest.af.mil
52tymx-ws-200.randolph.aetc.ds.af.mil
www.afcyber.af.mil
www.airforcehollywood.af.mil
apims.af.mil
bsds.cie.af.mil
www.af.mil
www.af.mil
www.af.mil
adapts2.test.cce.af.mil
webmail.clear.af.mil
itsrd.cie.af.mil
www.afrc.af.mil
esgweb.afccc.af.mil
aflegalassistance.law.af.mil
deamsdisint1console.cie.af.mil
mocc.vandenberg.af.mil
52vejx-ucpool-001.area52.afnoapps.usaf.mil
deamsobiint2.cie.af.mil
bermuda.af.mil
www.af.mil
widds.afwa.af.mil
mail.ok.afmc.af.mil
teams.afsoc.af.mil
*.bermuda.af.mil
www.airforcehollywood.af.mil
c5galaxy.robins.af.mil
jagusaf.jag.af.mil
teleport.nasic.af.mil
nssi.cce.af.mil
digitalu.af.mil
mxprod.hq.af.mil
mail.kirtland.af.mil
etca.randolph.af.mil
www.my.af.mil
asli.af.mil
reports.arpc.afrc.af.mil
cx.hanscom.af.mil
software.af.mil
webmail.ajab.nosc.afcent.af.mil
afaems.us.af.mil
owsjet17.us.af.mil
bipweather.afwa.af.mil

Certificate

The complete raw certificate details for www.afrc.af.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINQjCCDCqgAwIBAgISA7KFWVVDIAZYV5NhS8G0qNkRMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMDkxOTEzMjNaFw0y
MDA0MDgxOTEzMjNaMBoxGDAWBgNVBAMTD3d3dy5hZnJjLmFmLm1pbDCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAJxv1OXOUwc8SPEYhBcEE35qIaK7yQ3y
PkG94ZS9myh1xm+jyrsxAWVd23yX89USFa4Tbt/gKPoXGNlUPMlJnkDi8558vxyo
veatfdAbig29ZVXULyOlLrzvNUlkmh9t9EK94j+DLOFxNQ5yKxWltGOEdadjtRXv
2H79jEk+SFPM1vlw8+EPd8f9o1h8BdqYy0gQAnz31h+LDZGe+kTYCYQi383PegQM
YAODXzN1HB4cCFkInn21M0mYK1z+QcEtv3G9l4hy6uLoEetQNb6wfq6Pc8B0UFYB
vlMUpuNjLrzTE1W8I9Tmp1UlLgOrhPDuM6ATn0anD5Ca5O4CHuOzWm8CAwEAAaOC
ClAwggpMMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUyPPa6Nlyo0Tpf0vMxDpQ3xMa
Z4YwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE
YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnLzCCCAQGA1UdEQSCB/swggf3ggpwZGcuYWYubWlsghR3d3cuMTBhZi5hZnJj
LmFmLm1pbIITd3d3LjEyYWYuYWNjLmFmLm1pbIIRd3d3LjE1d2luZy5hZi5taWyC
End3dy4xYWYuYWNjLmFmLm1pbIIUd3d3LjIyYWYuYWZyYy5hZi5taWyCEHd3dy4y
NHNvdy5hZi5taWyCD3d3dy4yNWFmLmFmLm1pbIIVd3d3LjMwMWZ3LmFmcmMuYWYu
bWlsghV3d3cuMzAyYXcuYWZyYy5hZi5taWyCFXd3dy4zMDdidy5hZnJjLmFmLm1p
bIIVd3d3LjMxMHN3LmFmcmMuYWYubWlsghV3d3cuMzE1YXcuYWZyYy5hZi5taWyC
Fnd3dy4zNDlhbXcuYWZyYy5hZi5taWyCEXd3dy4zNTJzb3cuYWYubWlsghF3d3cu
MzUzc29nLmFmLm1pbIIQd3d3LjM3dHJ3LmFmLm1pbIIUd3d3LjM4OGZ3LmFjYy5h
Zi5taWyCFXd3dy40MDN3Zy5hZnJjLmFmLm1pbIIVd3d3LjQxOWZ3LmFmcmMuYWYu
bWlsghV3d3cuNDMzYXcuYWZyYy5hZi5taWyCFXd3dy40NDJmdy5hZnJjLmFmLm1p
bIIVd3d3LjQ0NWF3LmFmcmMuYWYubWlsghV3d3cuNDQ2YXcuYWZyYy5hZi5taWyC
Fnd3dy40NTlhcncuYWZyYy5hZi5taWyCFXd3dy40NzdmZy5hZnJjLmFmLm1pbIIT
d3d3LjRhZi5hZnJjLmFmLm1pbIIVd3d3LjUwNWNjdy5hY2MuYWYubWlsghZ3d3cu
NTA3YXJ3LmFmcmMuYWYubWlsghV3d3cuNTEyYXcuYWZyYy5hZi5taWyCFnd3dy41
MTRhbXcuYWZyYy5hZi5taWyCFXd3dy41NTJhY3cuYWNjLmFmLm1pbIIQd3d3LjU5
bWR3LmFmLm1pbIIWd3d3LjYyNHJzZy5hZnJjLmFmLm1pbIIVd3d3LjkwOGF3LmFm
cmMuYWYubWlsghV3d3cuOTEzYWcuYWZyYy5hZi5taWyCFnd3dy45MTZhcncuYWZy
Yy5hZi5taWyCFnd3dy45MTlzb3cuYWZyYy5hZi5taWyCFnd3dy45MjBycXcuYWZy
Yy5hZi5taWyCF3d3dy45MjZ3aW5nLmFmcmMuYWYubWlsghZ3d3cuOTI3YXJ3LmFm
cmMuYWYubWlsghZ3d3cuOTMxYXJ3LmFmcmMuYWYubWlsghV3d3cuOTMyYXcuYWZy
Yy5hZi5taWyCFnd3dy45NDBhcncuYWZyYy5hZi5taWyCFnd3dy45NDNycWcuYWZy
Yy5hZi5taWyCFXd3dy45NDRmdy5hZnJjLmFmLm1pbIIYd3d3Ljk2MGN5YmVyLmFm
cmMuYWYubWlsgg53d3cuYWNjLmFmLm1pbIIPd3d3LmFldGMuYWYubWlsghF3d3cu
YWZjZW50LmFmLm1pbIIQd3d3LmFmZ3NjLmFmLm1pbIIUd3d3LmFmaGlzdG9yeS5h
Zi5taWyCHnd3dy5hZmhpc3RvcnlhbmRtdXNldW1zLmFmLm1pbIIRd3d3LmFmaW1z
Yy5hZi5taWyCD3d3dy5hZnJjLmFmLm1pbIIQd3d3LmFmc29jLmFmLm1pbIIRd3d3
LmFpcm1hbi5hZi5taWyCEHd3dy5hbHR1cy5hZi5taWyCE3d3dy5hbmRlcnNlbi5h
Zi5taWyCFHd3dy5hcnBjLmFmcmMuYWYubWlsghR3d3cuYmFya3NkYWxlLmFmLm1p
bIIYd3d3LmJhc2ljdHJhaW5pbmcuYWYubWlsghB3d3cuYmVhbGUuYWYubWlsghF3
d3cuY2Fubm9uLmFmLm1pbIIWd3d3LmNpdGFtbi5hZnJjLmFmLm1pbIITd3d3LmNv
bHVtYnVzLmFmLm1pbIIRd3d3LmNyZWVjaC5hZi5taWyCDXd3dy5kbS5hZi5taWyC
F3d3dy5kb2JiaW5zLmFmcmMuYWYubWlsghB3d3cuZHllc3MuYWYubWlsghJ3d3cu
ZWllbHNvbi5hZi5taWyCFHd3dy5lbGxzd29ydGguYWYubWlsghV3d3cuZ29vZGZl
bGxvdy5hZi5taWyCEXd3dy5nb3NlcmUuYWYubWlsghd3d3cuZ3Jpc3NvbS5hZnJj
LmFmLm1pbIITd3d3LmhvbGxvbWFuLmFmLm1pbIIZd3d3LmhvbWVzdGVhZC5hZnJj
LmFmLm1pbIITd3d3Lmh1cmxidXJ0LmFmLm1pbIIPd3d3LmpiZXIuYWYubWlsghJ3
d3cua2Vlc2xlci5hZi5taWyCEXd3dy5rdW5zYW4uYWYubWlsghN3d3cubGF1Z2hs
aW4uYWYubWlsgg93d3cubHVrZS5hZi5taWyCFXd3dy5tYXJjaC5hZnJjLmFmLm1p
bIISd3d3Lm1heHdlbGwuYWYubWlsght3d3cubWlubmVhcG9saXMuYWZyYy5hZi5t
aWyCEHd3dy5tb29keS5hZi5taWyCF3d3dy5tb3VudGFpbmhvbWUuYWYubWlsghB3
d3cubmFzaWMuYWYubWlsghl3d3cubmF0aW9uYWxtdXNldW0uYWYubWlsghF3d3cu
bmVsbGlzLmFmLm1pbIIXd3d3Lm5pYWdhcmEuYWZyYy5hZi5taWyCEXd3dy5vZmZ1
dHQuYWYubWlsgg93d3cub3Nhbi5hZi5taWyCEHd3dy5wYWNhZi5hZi5taWwwTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy
APAAdgAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAW+L8K0iAAAE
AwBHMEUCIQC8eCOxcz5sCcJHNJk3JLmARSHv3gdbDUtMyr2PdCOp3gIgFcqqMo0B
KoyExIG5tYO2jwYACJIdVDbx/0vDFe1TZ1IAdgDwlaRZ8gDRgkAQLS+TiI6tS/4d
R+OZ4dA0prCoqo6ycwAAAW+L8K73AAAEAwBHMEUCIGr2xjmgD+AiJg/u7SJGowyN
NmPGb4yInEMJtz2PDwdaAiEAp5bZVtZGhpLa2PSaIuBS9Pfc9X/l2MD2Qsw8QNOQ
AvIwDQYJKoZIhvcNAQELBQADggEBAJbxbvWWiunlArDAih+nQ50FaWQrAl+epLpW
5LEER2n2ZKVdvqv7Vi5XRA6gRiPxb/4uCC2l9ik51swU8BNDeXBQEbbdk8lpZ1BA
1bf9VZcm9YgSZx5ZpZ/yMKrxvH09MX8StHB5W/S5Ke/tU+jOzeNIhJ++M0Lp4QuK
g/kMnXaSdu1p2YKK2j3lY/ImMuB/XpI4FXhX75hU47gLuPDSaJK4zmS5ajmTt/sz
ZyjgiLrgFMQ81RPJgIEBBkAmT1S/fESlVIPx3Fj64zaEBcmj1kpReKBc+UXYUXSy
iVTHNKA1jz4nSU7UBRp+RAde9XAixmf9Qu1lKH5DKxhRUJjpC6I=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG/U5c5TBzxI8RiEFwQT
fmohorvJDfI+Qb3hlL2bKHXGb6PKuzEBZV3bfJfz1RIVrhNu3+Ao+hcY2VQ8yUme
QOLznny/HKi95q190BuKDb1lVdQvI6UuvO81SWSaH230Qr3iP4Ms4XE1DnIrFaW0
Y4R1p2O1Fe/Yfv2MST5IU8zW+XDz4Q93x/2jWHwF2pjLSBACfPfWH4sNkZ76RNgJ
hCLfzc96BAxgA4NfM3UcHhwIWQiefbUzSZgrXP5BwS2/cb2XiHLq4ugR61A1vrB+
ro9zwHRQVgG+UxSm42MuvNMTVbwj1OanVSUuA6uE8O4zoBOfRqcPkJrk7gIe47Na
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322084370274390604237008158647534517541137
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-09 19:13:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-08 19:13:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.afrc.af.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19748321807555914083391833393777750595034495586162880978995881923804716172330982863649052374727717764908388221791608824977456626939956898349809726661752078736080968252127282572875747760596718451542440739006700981675815692639759134643951089815414551158188863383680526765929006136617149769882369845903178749490539356896257321122788145806422331038468206125751456707774870101708438156631188039319256299414402631326200325166285273555205512159401264053678652996954370352991115717166515614836732218985857711056638426623100089882864950196446538146900921239681035028530718496657310302462489023788023988910589485644751997983343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c8f3dae8d972a344e97f4bccc43a50df131a6786
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2043 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdg.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.10af.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.12af.acc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.15wing.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1af.acc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.22af.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.24sow.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.25af.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.301fw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.302aw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.307bw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.310sw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.315aw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.349amw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.352sow.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.353sog.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.37trw.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.388fw.acc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.403wg.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.419fw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.433aw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.442fw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.445aw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.446aw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.459arw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.477fg.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4af.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.505ccw.acc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.507arw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.512aw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.514amw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.552acw.acc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.59mdw.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.624rsg.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.908aw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.913ag.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.916arw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.919sow.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.920rqw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.926wing.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.927arw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.931arw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.932aw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.940arw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.943rqg.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.944fw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.960cyber.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aetc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afcent.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afgsc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afhistory.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afhistoryandmuseums.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afimsc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afsoc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airman.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altus.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersen.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arpc.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barksdale.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basictraining.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beale.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cannon.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citamn.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbus.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creech.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dm.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dobbins.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dyess.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eielson.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ellsworth.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodfellow.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gosere.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grissom.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holloman.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homestead.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hurlburt.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jber.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keesler.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kunsan.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laughlin.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luke.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.march.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maxwell.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minneapolis.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moody.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountainhome.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nasic.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationalmuseum.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nellis.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.niagara.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offutt.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osan.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pacaf.af.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f8bf0ad220000040300473045022100bc7823b1733e6c09c24734993724b9804521efde075b0d4b4ccabd8f7423a9de022015caaa328d012a8c84c481b9b583b68f060008921d5436f1ff4bc315ed536752007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f8bf0aef7000004030047304502206af6c639a00fe022260feeed2246a30c8d3663c66f8c889c4309b73d8f0f075a022100a796d956d6468692dad8f49a22e052f4f7dcf57fe5d8c0f642cc3c40d39002f2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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