mow-g-mrly-001.afgate.ad.af.mil

- U.S. Government -

Issued by DOD CA-27

About this certificate

This digital certificate with serial number 01:05:ac was issued on by U.S. Government.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Organization unit: PKI
Organization unit: USAF
Country: US

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Organization unit: PKI
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:05:ac
Serial Number (int): 66988
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId: 4e:39:7f:c3:7c:0e:33:5f:49:3f:e2:c0:9b:b7:b7:79:f0:aa:72:27
AuthorityKeyId: 1b:04:04:40:45:5e:7d:2b:5e:0b:cc:99:65:4d:f3:a4:de:90:77:17

Fingerprint (sha1): 72:d9:98:e2:81:f7:15:2a:ad:46:36:1c:15:e3:09:07:7e:5c:b4:a4
Fingerprint (sha256): 01:b7:17:d7:3c:17:5d:88:a3:81:0a:5c:8a:32:2e:46:f2:60:2c:56:a3:9f:4f:09:16:73:7a:ae:37:33:93:0a

Issuing Certificate URL: http://crl.disa.mil/sign/DODCA_27.cer

Revocation information

OCSP Server: http://ocsp.disa.mil
CRL Distribution Point: http://crl.disa.mil/crl/DODCA_27.crl
CRL Distribution Point: ldap://crl.gds.disa.mil/cn%3dDOD%20CA-27%2cou%3dPKI%2cou%3dDoD%2co%3dU.S.%20Government%2cc%3dUS?certificaterevocationlist;binary

Check the revocation status for certificate mow-g-mrly-001.afgate.ad.af.mil

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mow-g-mrly-001.afgate.ad.af.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Any

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mow-g-mrly-001.afgate.ad.af.mil

Other certificates including the domain name af.mil

(limited to 100 certificates)
sso.nasiccloud.af.mil
angelfire.vdl.afrl.af.mil
www.honorguard.af.mil
apc3-ec-01.ang.ds.af.mil
cqmap.cce.af.mil
www.afncr.hq.af.mil
coins9iapp.scott.af.mil
www.afcyber.af.mil
www.afrc.af.mil
ar.afcec-cloud.af.mil
*.coder-gov.nasic.af.mil
oars189.dng.cie.af.mil
mdm.test.cce.af.mil
afbrac.hq.af.mil
WEDNG11645.dng.cie.af.mil
52arty-ws-005v.afrc.af.mil
www.af.mil
efoia.cce.af.mil
www.gil.cetl.gunter.af.mil
hcloginorigin.maxwell.af.mil
lrt2.my.af.mil
mow-g-mrly-001.afgate.ad.af.mil
deamsbpel.cie.af.mil
portal.jbsa.af.mil
ej-crl2.my.af.mil
ihs.afrc.af.mil
UAT.MEDXS.AF.MIL
owscollab.barksdale.af.mil
deamsoam0010a.cie.af.mil
acesdsso.cie.af.mil
deamsgrdintconsole.cie.af.mil
www.ang.af.mil
asli.af.mil
wargaming.hq.af.mil
wildcard.cce.af.mil
PETERSON-MAIL1.afnoc.af.mil
cie-sdp-dp.cie.af.mil
www.uat.medxs.af.mil
www.damis.afaa.hq.af.mil
netdev.hq.af.mil
afrcdesktops.us.af.mil
kir-g-mrly-002.afgate.ad.af.mil
bermuda.af.mil
crosslink.af.mil
development.lcmp.af.mil
remote1.afwa.af.mil
armsweb.afpc.randolph.af.mil
aiportal.acc.af.mil
f16ocm.hill.af.mil
diode.nasic.af.mil
aftoc.hill.af.mil
glens0057-web8.frontrange.afspc.ds.af.mil
ows.sembach.af.mil
www.honorguard.af.mil
pass.hq.af.mil
w40.afpc.randolph.af.mil
wecstclnt85.gateway.cie.af.mil
www.airforcefaptest.af.mil
52tymx-ws-200.randolph.aetc.ds.af.mil
www.afcyber.af.mil
www.airforcehollywood.af.mil
apims.af.mil
bsds.cie.af.mil
www.af.mil
www.af.mil
www.af.mil
adapts2.test.cce.af.mil
webmail.clear.af.mil
itsrd.cie.af.mil
www.afrc.af.mil
esgweb.afccc.af.mil
aflegalassistance.law.af.mil
deamsdisint1console.cie.af.mil
mocc.vandenberg.af.mil
52vejx-ucpool-001.area52.afnoapps.usaf.mil
deamsobiint2.cie.af.mil
bermuda.af.mil
www.af.mil
widds.afwa.af.mil
mail.ok.afmc.af.mil
teams.afsoc.af.mil
*.bermuda.af.mil
www.airforcehollywood.af.mil
c5galaxy.robins.af.mil
jagusaf.jag.af.mil
teleport.nasic.af.mil
nssi.cce.af.mil
digitalu.af.mil
mxprod.hq.af.mil
mail.kirtland.af.mil
etca.randolph.af.mil
www.my.af.mil
asli.af.mil
reports.arpc.afrc.af.mil
cx.hanscom.af.mil
software.af.mil
webmail.ajab.nosc.afcent.af.mil
afaems.us.af.mil
owsjet17.us.af.mil
bipweather.afwa.af.mil

Certificate

The complete raw certificate details for mow-g-mrly-001.afgate.ad.af.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/PQWNEoVMOfAR8FCNQw
C/EzUKbrMgxLnBB/BFzk64H9qtkAhgKcEFGUKGyWLE7I9jZ8GUq5+RjaAnWjp+76
+tZcyBj7azh1PGz3EEn6IbNHKL+ZuC0NxqwtHwgOV0D7Acv0GOesTHY/1AvIswRC
vRpWry+WUE5fF9jPA4xT5J6N0j/tlFuLpL+W667pGELQscQGRkzmqs+Dpj17FER4
FLE7WK49P+0KJxMBWRDW6Vl7PQd5FdRdvUYR2Z+qKQ34jolYy/lrSf3lKcANcBH4
g5iwo6dWZGlJWIsDmF4zrwQ3UmN5+dQkoun+K+Jf3X/xtoG3jQisuZC9PwfC4KQl
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 66988
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOD CA-27'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-03-06 17:09:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-06 17:09:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USAF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mow-g-mrly-001.afgate.ad.af.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24736698561400035475091881550687741884507389769446962702526287693399037621454182625199200715808105273676277532327300243508910564244171512935747692610677319924154395092386034044190503702599619054454840777864949954617723010026960915263586233694975993417630237036245153256506529574708501630420801849341320356575380171281648193373341987701477244359994276674099617441203751189811345158085164001995653458209217330376441243530777136363498158353645456801532260292695732446875434835750869624662116960616059075093417737738800441977999453609208510286276726615275983760050789612041582429643310813326321451045984510483999993636197
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1b040440455e7d2b5e0bcc99654df3a4de907717
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4e397fc37c0e335f493fe2c09bb7b779f0aa7227
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/sign/DODCA_27.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.disa.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (187 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/crl/DODCA_27.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://crl.gds.disa.mil/cn%3dDOD%20CA-27%2cou%3dPKI%2cou%3dDoD%2co%3dU.S.%20Government%2cc%3dUS?certificaterevocationlist;binary'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mow-g-mrly-001.afgate.ad.af.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.2.1.11.5 (usDODClass3)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.2.1.11.18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.8.2.2 (iKEIntermediate)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37.0 (anyExtendedKeyUsage)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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