widjit.navair-rdte.navy.mil

- U.S. Government -

Issued by DOD ID SW CA-38

About this certificate

This digital certificate with serial number 01:32:80 was issued on by U.S. Government.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: subject:localityName MUST appear if subject:organizationName, subject:givenName, or subject:surname fields are present but the subject:stateOrProvinceName field is absent. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: subject:stateOrProvinceName MUST appear if the subject:organizationName, subject:givenName, or subject:surname fields are present and subject:localityName is absent. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Organization unit: PKI
Organization unit: USN
Country: US

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Organization unit: PKI
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:32:80
Serial Number (int): 78464
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId: 12:34:98:70:77:0f:3a:c6:4c:e3:90:f2:1c:1c:fe:7b:0b:79:8c:38
AuthorityKeyId: 8e:c5:b9:cc:fc:ce:8e:53:b4:2a:ce:e8:11:2a:cf:9b:29:6c:67:ca

Fingerprint (sha1): 5a:32:5b:72:21:27:25:9d:a4:ec:1f:72:e2:e2:b1:c3:6e:c4:f1:1a
Fingerprint (sha256): 01:40:cb:d6:a2:67:5e:37:07:91:7c:f4:8e:40:48:ce:f8:2c:df:2d:90:b3:60:7a:50:79:76:8a:de:11:ca:a8

Issuing Certificate URL: http://crl.disa.mil/sign/DODIDSWCA_38.cer

Revocation information

OCSP Server: http://ocsp.disa.mil
CRL Distribution Point: http://crl.disa.mil/crl/DODIDSWCA_38.crl

Check the revocation status for certificate widjit.navair-rdte.navy.mil

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for widjit.navair-rdte.navy.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

widjit.navair-rdte.navy.mil

Other certificates including the domain name navy.mil

(limited to 100 certificates)
pmohq.nmci.navy.mil
mysites.scms.navy.mil
ux.dontracker.navy.mil
ep6.erp.navy.mil
nhhc.collections.dc3n.navy.mil
www.housing.navy.mil
simdis.nrl.navy.mil
j2.anchordesk.navy.mil
rdais.platform.milcloud.mil
soatest.navsup.navy.mil
gfmosd.ffc.navy.mil
sftp.ncsc.navy.mil
preprod.beta.np2.navy.mil
rom.usno.navy.mil
stats.nel.navy.mil
opnavqa.ahfq.nmci.navy.mil
cwaybo.sscno.nmci.navy.mil
citrix-sson-session.ablcda.navy.mil
C27PD2CNLAP14W.ahds.nmci.navy.mil
applications.ahf.nmci.navy.mil
C27PD2CNLAP15W.ahds.nmci.navy.mil
vhexpressweb.navair.navy.mil
wtstaging.navair.navy.mil
*.navy.mil
vhweb.navair-rdte.navy.mil
www.lisseis.navsea.navy.mil
test.ide.portal.navy.mil
ile-lms-adelws.nko.navy.mil
netcentric.spawar.navy.mil
www.navyband.navy.mil
columbo.nrlssc.navy.mil
csg.navairlab.navair.navy.mil
www.navy.mil
ssd1.nrl.navy.mil
www.navy.mil
widjit.navair-rdte.navy.mil
mydev.navsup.navy.mil
www.marines.mil
aux-qa.cetars.ncdc.navy.mil
grl-ctx.netc.navy.mil
www10.nemoc.navy.mil
ciif.nrl.navy.mil
app4-p.nde.navy.mil
homepages.navair.navy.mil
web.tsb.cranrdte.navy.mil
smmisqual.submepp.navy.mil
survey.jag.navy.mil
nll2.ahf.nmci.navy.mil
bumed-smartdev.med.navy.mil
www.cotf.navy.mil
waspweb1.navair-rdte.navy.mil
www.navy.mil
inavywildcard.portal.navy.mil
apps01.onr.navy.mil
gosnet.navair.navy.mil
www.nescdw.navsea.navy.mil
airworthinessbetared.navair.navy.mil
pdmurdg.aw3s.navy.mil
test.ide.tce.navy.mil
ogconline.navy.mil
pki.navfac.navy.mil
stg-web1.mfom.nmci.navy.mil
locker.private.navyreserve.navy.mil
staynavytools.bol.navy.mil
mrrstestwebsrv.sscno.nmci.navy.mil
nrdwtest.navyreserve.navy.mil
www.defense.gov
gss.navair.navy.mil
windchill.chs.spawar.navy.mil
projects.cmf.nrl.navy.mil
bathcitrixgw.peosnap.navy.mil
vpn.nvspdren.navy.mil
dencas.med.navy.mil
IATS.NMCI.NAVY.MIL
www.navy.mil
airwatch.navair.navy.mil
ossp.eu.navy.mil
cyberspacece.cnrc.navy.mil
www.navsea.navy.mil
doors.chs.spawar.navy.mil
C27NMDCNLAT1W.AHDS.NMCI.NAVY.MIL
www.navsup.navy.mil
www.ssp.navy.mil
tycho.usno.navy.mil
www.navy.mil
nodcam-qa.ncdc.navy.mil
qawebserv9.navair.navy.mil
www.bol.navy.mil
www.aas.prod.nel.training.navy.mil
mrdbws-dev.nmci.navy.mil
inavy.accessrequest.portal.navy.mil
nmpbsoam1.n10.npc.navy.mil
erms.navsup.navy.mil
geonet.chs.spawar.navy.mil
Paxcoi.navair1.navy.mil
nefp.bol.navy.mil
ipdm.navy.mil
spider.dc3n.navy.mil
wepp.bol.navy.mil
iraps.nmci.navy.mil

Certificate

The complete raw certificate details for widjit.navair-rdte.navy.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxU1NSQXaBdnHuyfVdZ/
cGAZ9BH1nOzl7T+tHrKceD/S7OWUZRp0UShyPK92PFSRyq5S8FaLg4VzUNmiUa5R
oUwhSH0YWgx3CnxEAYjkPc/uDmU4/9XGjBkIJQZSgvygD8/uHksi6sbGYzZW8CvP
jEZEVpt5RISxe1Ge4ToutiNSvAGdthLDGxLbIh8A+UKGAtdACLHWM4qY9YgOgaI8
Ny698bUu6eznsUkslSdKbR4uApojjTmz11L3gKVQZJEmzwnShn5B0GYpI2Hk6IS+
ricwbH3MzeeGAFTBHhm1F7QuEmC2LhEj2TV/8MujoLsNBhdANvPOcaE2huXwwjlj
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 78464
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOD ID SW CA-38'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-18 19:11:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-19 19:11:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'widjit.navair-rdte.navy.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22102161345782300213260948734475254710573058338239452918676024659257346214072256240689338803297471115985642799398860966734444471119307492638755221815603823420028248710172005431314328610036699098746839638593658062212193489717229699968646778905245200542344237149799220137552389890101705927592576427433006831160800417475061763084158094808373055197851956944854683038795045865667916791989706745193208554743378327898282332493203977975722662819194409765108481608266505600721784044176643843114506933175376129181544164500468968210858900472310073083388675494168459873473015421606682913991868344707254632346748939028432577716999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8ec5b9ccfcce8e53b42acee8112acf9b296c67ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							12349870770f3ac64ce390f21c1cfe7b0b798c38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/sign/DODIDSWCA_38.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.disa.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/crl/DODIDSWCA_38.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widjit.navair-rdte.navy.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.2.1.11.39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.8.2.2 (iKEIntermediate)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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