survey.jag.navy.mil

- U.S. Government -

Issued by DOD ID SW CA-38

About this certificate

This digital certificate with serial number 02:6e:5a was issued on by U.S. Government.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: subject:localityName MUST appear if subject:organizationName, subject:givenName, or subject:surname fields are present but the subject:stateOrProvinceName field is absent. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: subject:stateOrProvinceName MUST appear if the subject:organizationName, subject:givenName, or subject:surname fields are present and subject:localityName is absent. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Organization unit: PKI
Organization unit: USN
Country: US

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Organization unit: PKI
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:6e:5a
Serial Number (int): 159322
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: 70:1c:38:c8:69:cb:a7:b7:d3:dd:bc:ab:a9:e1:92:af:da:61:ac:4f
AuthorityKeyId: 8e:c5:b9:cc:fc:ce:8e:53:b4:2a:ce:e8:11:2a:cf:9b:29:6c:67:ca

Fingerprint (sha1): b5:53:5c:66:69:ca:7c:e2:b2:9a:e5:79:23:62:3e:d5:04:12:20:5d
Fingerprint (sha256): 01:d4:39:de:ca:76:07:7b:e4:93:92:a4:d0:05:54:a7:56:be:2a:66:7b:47:56:8d:27:2b:96:1a:87:6d:bc:4d

Issuing Certificate URL: http://crl.disa.mil/sign/DODIDSWCA_38.cer

Revocation information

OCSP Server: http://ocsp.disa.mil
CRL Distribution Point: http://crl.disa.mil/crl/DODIDSWCA_38.crl

Check the revocation status for certificate survey.jag.navy.mil

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for survey.jag.navy.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

survey.jag.navy.mil

Other certificates including the domain name navy.mil

(limited to 100 certificates)
pmohq.nmci.navy.mil
mysites.scms.navy.mil
ux.dontracker.navy.mil
ep6.erp.navy.mil
nhhc.collections.dc3n.navy.mil
www.housing.navy.mil
simdis.nrl.navy.mil
j2.anchordesk.navy.mil
rdais.platform.milcloud.mil
soatest.navsup.navy.mil
gfmosd.ffc.navy.mil
sftp.ncsc.navy.mil
preprod.beta.np2.navy.mil
rom.usno.navy.mil
stats.nel.navy.mil
opnavqa.ahfq.nmci.navy.mil
cwaybo.sscno.nmci.navy.mil
citrix-sson-session.ablcda.navy.mil
C27PD2CNLAP14W.ahds.nmci.navy.mil
applications.ahf.nmci.navy.mil
C27PD2CNLAP15W.ahds.nmci.navy.mil
vhexpressweb.navair.navy.mil
wtstaging.navair.navy.mil
*.navy.mil
vhweb.navair-rdte.navy.mil
www.lisseis.navsea.navy.mil
test.ide.portal.navy.mil
ile-lms-adelws.nko.navy.mil
netcentric.spawar.navy.mil
www.navyband.navy.mil
columbo.nrlssc.navy.mil
csg.navairlab.navair.navy.mil
www.navy.mil
ssd1.nrl.navy.mil
www.navy.mil
widjit.navair-rdte.navy.mil
mydev.navsup.navy.mil
www.marines.mil
aux-qa.cetars.ncdc.navy.mil
grl-ctx.netc.navy.mil
www10.nemoc.navy.mil
ciif.nrl.navy.mil
app4-p.nde.navy.mil
homepages.navair.navy.mil
web.tsb.cranrdte.navy.mil
smmisqual.submepp.navy.mil
survey.jag.navy.mil
nll2.ahf.nmci.navy.mil
bumed-smartdev.med.navy.mil
www.cotf.navy.mil
waspweb1.navair-rdte.navy.mil
www.navy.mil
inavywildcard.portal.navy.mil
apps01.onr.navy.mil
gosnet.navair.navy.mil
www.nescdw.navsea.navy.mil
airworthinessbetared.navair.navy.mil
pdmurdg.aw3s.navy.mil
test.ide.tce.navy.mil
ogconline.navy.mil
pki.navfac.navy.mil
stg-web1.mfom.nmci.navy.mil
locker.private.navyreserve.navy.mil
staynavytools.bol.navy.mil
mrrstestwebsrv.sscno.nmci.navy.mil
nrdwtest.navyreserve.navy.mil
www.defense.gov
gss.navair.navy.mil
windchill.chs.spawar.navy.mil
projects.cmf.nrl.navy.mil
bathcitrixgw.peosnap.navy.mil
vpn.nvspdren.navy.mil
dencas.med.navy.mil
IATS.NMCI.NAVY.MIL
www.navy.mil
airwatch.navair.navy.mil
ossp.eu.navy.mil
cyberspacece.cnrc.navy.mil
www.navsea.navy.mil
doors.chs.spawar.navy.mil
C27NMDCNLAT1W.AHDS.NMCI.NAVY.MIL
www.navsup.navy.mil
www.ssp.navy.mil
tycho.usno.navy.mil
www.navy.mil
nodcam-qa.ncdc.navy.mil
qawebserv9.navair.navy.mil
www.bol.navy.mil
www.aas.prod.nel.training.navy.mil
mrdbws-dev.nmci.navy.mil
inavy.accessrequest.portal.navy.mil
nmpbsoam1.n10.npc.navy.mil
erms.navsup.navy.mil
geonet.chs.spawar.navy.mil
Paxcoi.navair1.navy.mil
nefp.bol.navy.mil
ipdm.navy.mil
spider.dc3n.navy.mil
wepp.bol.navy.mil
iraps.nmci.navy.mil

Certificate

The complete raw certificate details for survey.jag.navy.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5V9moED3CoE1y1Bj8C9w
9rMMObGLXlUkOaNjLnR3IZYuPsA58L7iRxHEkdLlZYG2SCiYB32aDq5c78O1vRYW
qhM2aU65EGG5ZkwpSRaEaDciY/UCUTPVglfqkid/MWLBcM2XgVRFh+yYNCBBumaF
1RoY4/WqWp+HNtvCkjLyqasN33zUyVtQQw2pphrAgp5TOiV5tR6nI1uS66WeMR4T
+wiuYPEN9LB3mdJx8UnXSnSVJ2kmo1cI0kSNzZBNLKNk16ihR15KKg+8JzdV9H/Y
C32L3WyEvUpxstAbJj5c9QygZDHCLPhYBkA2Ma+LvLlBTe6D/hYPnrDojqwjUrOw
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 159322
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOD ID SW CA-38'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-31 18:11:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-31 18:11:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'survey.jag.navy.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28955615765876718247525596535987541655512524420126768201672704227420099868091077139192235538352949825794589633049857847121256704911798041674427496411834278574084313938421536551390660568868310129354883022940557097014073238576412557367072549884272745913987521123319897597586074083500911637355743935929991233888857041212226174066611447678326080929270675134447420882878122347360376646455391847925132213065983437989026098747955788329751517339121472128582399105276257018889900396876422149685938471742653449134141512101692978356551190960661961081097167296232651201986566024521109951883064338103427623767654555496923127853233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8ec5b9ccfcce8e53b42acee8112acf9b296c67ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							701c38c869cba7b7d3ddbcaba9e192afda61ac4f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/sign/DODIDSWCA_38.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.disa.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/crl/DODIDSWCA_38.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.jag.navy.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.2.1.11.39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.8.2.2 (iKEIntermediate)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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