www.af.mil

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:be:f4:cc:30:a0:22:a2:6f:0c:82:a8:d8:a5:bb:ac:13:4e was issued on by Let's Encrypt.

With 74 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.af.mil

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:be:f4:cc:30:a0:22:a2:6f:0c:82:a8:d8:a5:bb:ac:13:4e
Serial Number (int): 326315899356032594414030256270934031471438
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 83:5f:65:6e:73:ee:e0:29:7d:62:34:4a:01:c2:63:a7:a2:b9:17:36
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ac:9f:a3:4b:2d:a5:36:bf:8e:0f:e6:0f:31:69:f8:94:73:64:14:cb
Fingerprint (sha256): 06:3d:b4:72:51:4c:28:fd:27:fc:80:79:23:a3:d6:49:62:b8:4c:67:55:36:58:a8:b3:07:3f:3c:5b:71:cf:37

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.af.mil

74

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.af.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kesselrun.af.mil
static.e-publishing.af.mil
www.125fw.ang.af.mil
www.12ftw.af.mil
www.159fw.ang.af.mil
www.174attackwing.ang.af.mil
www.187fw.ang.af.mil
www.188wg.ang.af.mil
www.189aw.ang.af.mil
www.190arw.ang.af.mil
www.192fw.ang.af.mil
www.193sow.ang.af.mil
www.194wg.ang.af.mil
www.24sow.af.mil
www.2af.aetc.af.mil
www.340ftg.afrc.af.mil
www.413ftg.afrc.af.mil
www.aatc.ang.af.mil
www.af.mil
www.afcec.af.mil
www.afhra.af.mil
www.afmc.af.mil
www.afpa.af.mil
www.afsbirsttr.af.mil
www.afsc.af.mil
www.aftc.af.mil
www.afwerx.af.mil
www.airforcebes.af.mil
www.airforcemedicine.af.mil
www.airforcesmallbiz.af.mil
www.airforcespecialtactics.af.mil
www.airuniversity.af.mil
www.alpenacrtc.ang.af.mil
www.amc.af.mil
www.angtec.ang.af.mil
www.bmtflightphotos.af.mil
www.doctrine.af.mil
www.e-publishing.af.mil
www.eads.ang.af.mil
www.expeditionarycenter.af.mil
www.foia.af.mil
www.honorguard.af.mil
www.jbsa.af.mil
www.mars.af.mil
www.mortuary.af.mil
www.music.af.mil
www.netcents.af.mil
www.osi.af.mil
www.pittsburgh.afrc.af.mil
www.pope.af.mil
www.privacy.af.mil
www.publicaffairs.af.mil
www.recruiting.af.mil
www.retirees.af.mil
www.safie.hq.af.mil
www.secretsdeclassified.af.mil
www.seymourjohnson.af.mil
www.shaw.af.mil
www.sheppard.af.mil
www.specialwarfaretw.af.mil
www.tinker.af.mil
www.torch.aetc.af.mil
www.trademark.af.mil
www.transform.af.mil
www.tyndall.af.mil
www.usafa.af.mil
www.vance.af.mil
www.volkfield.ang.af.mil
www.wads.ang.af.mil
www.warren.af.mil
www.westover.afrc.af.mil
www.woundedwarrior.af.mil
www.yokota.af.mil
www.youngstown.afrc.af.mil

Other certificates including the domain name af.mil

(limited to 100 certificates)
sso.nasiccloud.af.mil
angelfire.vdl.afrl.af.mil
www.honorguard.af.mil
apc3-ec-01.ang.ds.af.mil
cqmap.cce.af.mil
www.afncr.hq.af.mil
coins9iapp.scott.af.mil
www.afcyber.af.mil
www.afrc.af.mil
ar.afcec-cloud.af.mil
*.coder-gov.nasic.af.mil
oars189.dng.cie.af.mil
mdm.test.cce.af.mil
afbrac.hq.af.mil
WEDNG11645.dng.cie.af.mil
52arty-ws-005v.afrc.af.mil
www.af.mil
efoia.cce.af.mil
www.gil.cetl.gunter.af.mil
hcloginorigin.maxwell.af.mil
lrt2.my.af.mil
mow-g-mrly-001.afgate.ad.af.mil
deamsbpel.cie.af.mil
portal.jbsa.af.mil
ej-crl2.my.af.mil
ihs.afrc.af.mil
UAT.MEDXS.AF.MIL
owscollab.barksdale.af.mil
deamsoam0010a.cie.af.mil
acesdsso.cie.af.mil
deamsgrdintconsole.cie.af.mil
www.ang.af.mil
asli.af.mil
wargaming.hq.af.mil
wildcard.cce.af.mil
PETERSON-MAIL1.afnoc.af.mil
cie-sdp-dp.cie.af.mil
www.uat.medxs.af.mil
www.damis.afaa.hq.af.mil
netdev.hq.af.mil
afrcdesktops.us.af.mil
kir-g-mrly-002.afgate.ad.af.mil
bermuda.af.mil
crosslink.af.mil
development.lcmp.af.mil
remote1.afwa.af.mil
armsweb.afpc.randolph.af.mil
aiportal.acc.af.mil
f16ocm.hill.af.mil
diode.nasic.af.mil
aftoc.hill.af.mil
glens0057-web8.frontrange.afspc.ds.af.mil
ows.sembach.af.mil
www.honorguard.af.mil
pass.hq.af.mil
w40.afpc.randolph.af.mil
wecstclnt85.gateway.cie.af.mil
www.airforcefaptest.af.mil
52tymx-ws-200.randolph.aetc.ds.af.mil
www.afcyber.af.mil
www.airforcehollywood.af.mil
apims.af.mil
bsds.cie.af.mil
www.af.mil
www.af.mil
www.af.mil
adapts2.test.cce.af.mil
webmail.clear.af.mil
itsrd.cie.af.mil
www.afrc.af.mil
esgweb.afccc.af.mil
aflegalassistance.law.af.mil
deamsdisint1console.cie.af.mil
mocc.vandenberg.af.mil
52vejx-ucpool-001.area52.afnoapps.usaf.mil
deamsobiint2.cie.af.mil
bermuda.af.mil
www.af.mil
widds.afwa.af.mil
mail.ok.afmc.af.mil
teams.afsoc.af.mil
*.bermuda.af.mil
www.airforcehollywood.af.mil
c5galaxy.robins.af.mil
jagusaf.jag.af.mil
teleport.nasic.af.mil
nssi.cce.af.mil
digitalu.af.mil
mxprod.hq.af.mil
mail.kirtland.af.mil
etca.randolph.af.mil
www.my.af.mil
asli.af.mil
reports.arpc.afrc.af.mil
cx.hanscom.af.mil
software.af.mil
webmail.ajab.nosc.afcent.af.mil
afaems.us.af.mil
owsjet17.us.af.mil
bipweather.afwa.af.mil

Certificate

The complete raw certificate details for www.af.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMNnB7fhipArqF+KbY8t
SW/1GIgUziYcsAudUxTjjDzOM1Vcm6MXOL9DGUTbqxXG7zJkfLIk3+2+8ulelY/Q
dKQNleLqH2eg+ZnkoHYJ79+cR6v/pKc8zTB1gJxo39tqFw+vbYQZh8g+5r+OoUxE
aDduy7iLqzYOGJKTuumbAo+CHvaObUrSYCZ2Mhg3ZYBDx+AJk8dv6saZW44FxsGE
PG7YOqh3Hr89cpuYimJ+ec1uSibXCRlmrjleUQeGHhsOBwwOjlO46u9zUkj174MZ
d8QWEGjGyxCh5QfB1MwQDeZCNNgN+wWWRtqeH4RR7pOaNIJkXiAyaKh+gSgdK7HG
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326315899356032594414030256270934031471438
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-21 16:55:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-20 16:55:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.af.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24334111098517213196799165964932044711785277823694525112824579922828796513436014463731954382129214965986537200650273212447442748444297661582447148500226997485404581817633179704566617809265995098289406013449205078067709091974869180708488198601717775169129332439043403481252387665015946570307089103441889741980528851569940486613504083522232490160674370844421690354103120646131733613941778177576450345657793845090091653746235040958549755215717129372532123110419387796113324513375481231194077099130118031934022577582246995039174462144484005083716368885821099965442580651478670170235644653423177541524777442523979734697623
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							835f656e73eee0297d62344a01c263a7a2b91736
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1640 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kesselrun.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.e-publishing.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.125fw.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.12ftw.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.159fw.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.174attackwing.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.187fw.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.188wg.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.189aw.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.190arw.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.192fw.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.193sow.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.194wg.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.24sow.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2af.aetc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.340ftg.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.413ftg.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aatc.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afcec.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afhra.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afmc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afpa.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afsbirsttr.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afsc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aftc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afwerx.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airforcebes.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airforcemedicine.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airforcesmallbiz.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airforcespecialtactics.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airuniversity.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alpenacrtc.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angtec.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmtflightphotos.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doctrine.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-publishing.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eads.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expeditionarycenter.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foia.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.honorguard.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jbsa.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mars.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mortuary.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.music.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netcents.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osi.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pittsburgh.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pope.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privacy.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.publicaffairs.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recruiting.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retirees.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safie.hq.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secretsdeclassified.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seymourjohnson.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shaw.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sheppard.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.specialwarfaretw.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tinker.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.torch.aetc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trademark.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transform.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tyndall.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usafa.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vance.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volkfield.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wads.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warren.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westover.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woundedwarrior.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yokota.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youngstown.afrc.af.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000165fd4572730000040300473045022100a161f145756ae2eaae351f3a7e99a0e9d318c82f7b6b6065c75607318420d0c3022070a657cd8bf0c722529a3621adb5e83f8a4dc065ee52fba5335f72dc658d5d3a007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165fd4572b900000403004630440220509c41f6069d509d49ffc1481937a03bf3590e53817a2c7d1be4cd1602bc2d9b0220342d9244a080b03dee34defb30ccceb3657be3fb755cd0be44bc37fc2c4c31d1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0089821aea8540e14f0c7b5de940557eb2620ce07728894e780cd48785ae691200f69fc90ccfef2ee094a0ff45c557327be1d61d115969f268f2a7b538eeac57bcb60c32206e51d9e4af00015f49a2a1d5f85c93340930238bfcdc8704290bf959395f10b003d408f6c716d559561b354a1999168e9d5f57563982c1d4feb101f69055b3964fc86c5dc3f300c98f10696c0bed464b40a8907c09bbf904f894105c47c1da0fe6671324147bdb6e318defd8029d8799af541fda587109a3a489f52b6f56ce88c923eff364fc0e6ee5678491aee48a18bd30bf608ab60201415643c7f8f5bb5b39ce93ad17ceae25d5541b41545ac9bdc466978f39280e1c36f74846