projects.cmf.nrl.navy.mil

Issued by R3

About this certificate

This digital certificate with serial number 04:20:96:87:62:e1:5c:05:8d:c3:4a:17:f5:a6:e1:dc:95:38 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=projects.cmf.nrl.navy.mil

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:20:96:87:62:e1:5c:05:8d:c3:4a:17:f5:a6:e1:dc:95:38
Serial Number (int): 359538266633485614058550975633814007354680
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 78:27:ca:9d:2c:24:92:86:03:f1:20:32:2c:ef:d6:18:e7:ac:69:a1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b9:07:f3:57:3a:55:0a:b0:96:fb:17:a9:d9:4b:d0:96:25:13:34:0b
Fingerprint (sha256): 02:e9:eb:1b:30:8d:ca:3f:bf:1a:c3:bf:d9:e8:ec:34:7d:43:b9:5d:37:4e:01:2a:01:97:a9:e8:60:1b:a3:2f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate projects.cmf.nrl.navy.mil

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for projects.cmf.nrl.navy.mil

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

projects.cmf.nrl.navy.mil

Other certificates including the domain name navy.mil

(limited to 100 certificates)
pmohq.nmci.navy.mil
mysites.scms.navy.mil
ux.dontracker.navy.mil
ep6.erp.navy.mil
nhhc.collections.dc3n.navy.mil
www.housing.navy.mil
simdis.nrl.navy.mil
j2.anchordesk.navy.mil
rdais.platform.milcloud.mil
soatest.navsup.navy.mil
gfmosd.ffc.navy.mil
sftp.ncsc.navy.mil
preprod.beta.np2.navy.mil
rom.usno.navy.mil
stats.nel.navy.mil
opnavqa.ahfq.nmci.navy.mil
cwaybo.sscno.nmci.navy.mil
citrix-sson-session.ablcda.navy.mil
C27PD2CNLAP14W.ahds.nmci.navy.mil
applications.ahf.nmci.navy.mil
C27PD2CNLAP15W.ahds.nmci.navy.mil
vhexpressweb.navair.navy.mil
wtstaging.navair.navy.mil
*.navy.mil
vhweb.navair-rdte.navy.mil
www.lisseis.navsea.navy.mil
test.ide.portal.navy.mil
ile-lms-adelws.nko.navy.mil
netcentric.spawar.navy.mil
www.navyband.navy.mil
columbo.nrlssc.navy.mil
csg.navairlab.navair.navy.mil
www.navy.mil
ssd1.nrl.navy.mil
www.navy.mil
widjit.navair-rdte.navy.mil
mydev.navsup.navy.mil
www.marines.mil
aux-qa.cetars.ncdc.navy.mil
grl-ctx.netc.navy.mil
www10.nemoc.navy.mil
ciif.nrl.navy.mil
app4-p.nde.navy.mil
homepages.navair.navy.mil
web.tsb.cranrdte.navy.mil
smmisqual.submepp.navy.mil
survey.jag.navy.mil
nll2.ahf.nmci.navy.mil
bumed-smartdev.med.navy.mil
www.cotf.navy.mil
waspweb1.navair-rdte.navy.mil
www.navy.mil
inavywildcard.portal.navy.mil
apps01.onr.navy.mil
gosnet.navair.navy.mil
www.nescdw.navsea.navy.mil
airworthinessbetared.navair.navy.mil
pdmurdg.aw3s.navy.mil
test.ide.tce.navy.mil
ogconline.navy.mil
pki.navfac.navy.mil
stg-web1.mfom.nmci.navy.mil
locker.private.navyreserve.navy.mil
staynavytools.bol.navy.mil
mrrstestwebsrv.sscno.nmci.navy.mil
nrdwtest.navyreserve.navy.mil
www.defense.gov
gss.navair.navy.mil
windchill.chs.spawar.navy.mil
projects.cmf.nrl.navy.mil
bathcitrixgw.peosnap.navy.mil
vpn.nvspdren.navy.mil
dencas.med.navy.mil
IATS.NMCI.NAVY.MIL
www.navy.mil
airwatch.navair.navy.mil
ossp.eu.navy.mil
cyberspacece.cnrc.navy.mil
www.navsea.navy.mil
doors.chs.spawar.navy.mil
C27NMDCNLAT1W.AHDS.NMCI.NAVY.MIL
www.navsup.navy.mil
www.ssp.navy.mil
tycho.usno.navy.mil
www.navy.mil
nodcam-qa.ncdc.navy.mil
qawebserv9.navair.navy.mil
www.bol.navy.mil
www.aas.prod.nel.training.navy.mil
mrdbws-dev.nmci.navy.mil
inavy.accessrequest.portal.navy.mil
nmpbsoam1.n10.npc.navy.mil
erms.navsup.navy.mil
geonet.chs.spawar.navy.mil
Paxcoi.navair1.navy.mil
nefp.bol.navy.mil
ipdm.navy.mil
spider.dc3n.navy.mil
wepp.bol.navy.mil
iraps.nmci.navy.mil

Certificate

The complete raw certificate details for projects.cmf.nrl.navy.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 359538266633485614058550975633814007354680
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-03 07:32:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-02 07:32:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'projects.cmf.nrl.navy.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 938338248292918320941324952758622838549462934260385075139714404365599592867692965862909466283966071299433728259755654380764470511520582957166215329188337315745372250491086929816323862905387143887446508330643275545604978004543897150796271592747568722630440460708452129819928093588979722823989465472281051677046092236801989971715659219335604673729667069567564579734910789640078803451505549312814647533633352673726307522733269919674401234592380634159356716339303524447562008559336712487203739703991576152900996249034553530021985743107286476601457538216290377265984384968783824732410660511842960002285868489203729160017617659742472230579067346036995401653739478288016395904197302804732182533380015366119093500796902038236247194119461833691921684790062289089574838700505180088594892837031010571437502947593351963199103886926453870724247066653700489554161709772940591379274217403597754363672771662943773896143617397103750945988002407653464939702212109506554694736851075273480956528133171373689105527152411648273859010061437042390379856012338770524847089407639367455684373831832959437474854835084561308570877377460433219345433551535393735104894269993299892096586007873393493704352261163758760932109476187767780082016423097120906588115543951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7827ca9d2c24928603f120322cefd618e7ac69a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.cmf.nrl.navy.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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