www.afrc.af.mil

Issued by R3

About this certificate

This digital certificate with serial number 03:1a:7c:12:ef:39:73:10:02:86:71:1f:f1:4c:6b:a4:f0:2a was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.afrc.af.mil

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1a:7c:12:ef:39:73:10:02:86:71:1f:f1:4c:6b:a4:f0:2a
Serial Number (int): 270349121920093433851986439179205316243498
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 81:bf:a0:f6:f1:fa:24:65:b6:a6:e5:d1:8e:3e:71:0e:26:d3:8f:3f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d4:f8:07:e6:cc:6e:09:ca:cc:5e:91:f9:85:71:24:5c:4f:20:39:22
Fingerprint (sha256): 07:20:f6:12:c3:9f:7a:b8:32:05:f1:9f:8f:24:e1:f5:83:5f:49:f4:bf:e8:e8:ee:ad:d8:a5:58:3a:51:97:fd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.afrc.af.mil

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.afrc.af.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pdg.af.mil
www.10af.afrc.af.mil
www.12af.acc.af.mil
www.142wg.ang.af.mil
www.15wing.af.mil
www.1af.acc.af.mil
www.22af.afrc.af.mil
www.24sow.af.mil
www.301fw.afrc.af.mil
www.302aw.afrc.af.mil
www.307bw.afrc.af.mil
www.310sw.afrc.af.mil
www.315aw.afrc.af.mil
www.349amw.afrc.af.mil
www.352sow.af.mil
www.353sog.af.mil
www.37trw.af.mil
www.388fw.acc.af.mil
www.403wg.afrc.af.mil
www.419fw.afrc.af.mil
www.433aw.afrc.af.mil
www.442fw.afrc.af.mil
www.445aw.afrc.af.mil
www.446aw.afrc.af.mil
www.459arw.afrc.af.mil
www.477fg.afrc.af.mil
www.4af.afrc.af.mil
www.505ccw.acc.af.mil
www.507arw.afrc.af.mil
www.512aw.afrc.af.mil
www.514amw.afrc.af.mil
www.552acw.acc.af.mil
www.624rsg.afrc.af.mil
www.908aw.afrc.af.mil
www.913ag.afrc.af.mil
www.916arw.afrc.af.mil
www.919sow.afrc.af.mil
www.920rqw.afrc.af.mil
www.926wing.afrc.af.mil
www.927arw.afrc.af.mil
www.931arw.afrc.af.mil
www.932aw.afrc.af.mil
www.940arw.afrc.af.mil
www.944fw.afrc.af.mil
www.960cyber.afrc.af.mil
www.acc.af.mil
www.aetc.af.mil
www.afcent.af.mil
www.afgsc.af.mil
www.afhistory.af.mil
www.afhistoryandmuseums.af.mil
www.afimsc.af.mil
www.afrc.af.mil
www.afsoc.af.mil
www.airman.af.mil
www.altus.af.mil
www.andersen.af.mil
www.arpc.afrc.af.mil
www.barksdale.af.mil
www.basictraining.af.mil
www.beale.af.mil
www.cannon.af.mil
www.citamn.afrc.af.mil
www.columbus.af.mil
www.creech.af.mil
www.dm.af.mil
www.dobbins.afrc.af.mil
www.dyess.af.mil
www.eielson.af.mil
www.ellsworth.af.mil
www.goodfellow.af.mil
www.gosere.af.mil
www.grissom.afrc.af.mil
www.holloman.af.mil
www.homestead.afrc.af.mil
www.hurlburt.af.mil
www.keesler.af.mil
www.kunsan.af.mil
www.laughlin.af.mil
www.luke.af.mil
www.march.afrc.af.mil
www.maxwell.af.mil
www.minneapolis.afrc.af.mil
www.moody.af.mil
www.mountainhome.af.mil
www.nasic.af.mil
www.nationalmuseum.af.mil
www.nellis.af.mil
www.niagara.afrc.af.mil
www.offutt.af.mil
www.osan.af.mil
www.pacaf.af.mil

Other certificates including the domain name af.mil

(limited to 100 certificates)
sso.nasiccloud.af.mil
angelfire.vdl.afrl.af.mil
www.honorguard.af.mil
apc3-ec-01.ang.ds.af.mil
cqmap.cce.af.mil
www.afncr.hq.af.mil
coins9iapp.scott.af.mil
www.afcyber.af.mil
www.afrc.af.mil
ar.afcec-cloud.af.mil
*.coder-gov.nasic.af.mil
oars189.dng.cie.af.mil
mdm.test.cce.af.mil
afbrac.hq.af.mil
WEDNG11645.dng.cie.af.mil
52arty-ws-005v.afrc.af.mil
www.af.mil
efoia.cce.af.mil
www.gil.cetl.gunter.af.mil
hcloginorigin.maxwell.af.mil
lrt2.my.af.mil
mow-g-mrly-001.afgate.ad.af.mil
deamsbpel.cie.af.mil
portal.jbsa.af.mil
ej-crl2.my.af.mil
ihs.afrc.af.mil
UAT.MEDXS.AF.MIL
owscollab.barksdale.af.mil
deamsoam0010a.cie.af.mil
acesdsso.cie.af.mil
deamsgrdintconsole.cie.af.mil
www.ang.af.mil
asli.af.mil
wargaming.hq.af.mil
wildcard.cce.af.mil
PETERSON-MAIL1.afnoc.af.mil
cie-sdp-dp.cie.af.mil
www.uat.medxs.af.mil
www.damis.afaa.hq.af.mil
netdev.hq.af.mil
afrcdesktops.us.af.mil
kir-g-mrly-002.afgate.ad.af.mil
bermuda.af.mil
crosslink.af.mil
development.lcmp.af.mil
remote1.afwa.af.mil
armsweb.afpc.randolph.af.mil
aiportal.acc.af.mil
f16ocm.hill.af.mil
diode.nasic.af.mil
aftoc.hill.af.mil
glens0057-web8.frontrange.afspc.ds.af.mil
ows.sembach.af.mil
www.honorguard.af.mil
pass.hq.af.mil
w40.afpc.randolph.af.mil
wecstclnt85.gateway.cie.af.mil
www.airforcefaptest.af.mil
52tymx-ws-200.randolph.aetc.ds.af.mil
www.afcyber.af.mil
www.airforcehollywood.af.mil
apims.af.mil
bsds.cie.af.mil
www.af.mil
www.af.mil
www.af.mil
adapts2.test.cce.af.mil
webmail.clear.af.mil
itsrd.cie.af.mil
www.afrc.af.mil
esgweb.afccc.af.mil
aflegalassistance.law.af.mil
deamsdisint1console.cie.af.mil
mocc.vandenberg.af.mil
52vejx-ucpool-001.area52.afnoapps.usaf.mil
deamsobiint2.cie.af.mil
bermuda.af.mil
www.af.mil
widds.afwa.af.mil
mail.ok.afmc.af.mil
teams.afsoc.af.mil
*.bermuda.af.mil
www.airforcehollywood.af.mil
c5galaxy.robins.af.mil
jagusaf.jag.af.mil
teleport.nasic.af.mil
nssi.cce.af.mil
digitalu.af.mil
mxprod.hq.af.mil
mail.kirtland.af.mil
etca.randolph.af.mil
www.my.af.mil
asli.af.mil
reports.arpc.afrc.af.mil
cx.hanscom.af.mil
software.af.mil
webmail.ajab.nosc.afcent.af.mil
afaems.us.af.mil
owsjet17.us.af.mil
bipweather.afwa.af.mil

Certificate

The complete raw certificate details for www.afrc.af.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMoTCCC4mgAwIBAgISAxp8Eu85cxAChnEf8UxrpPAqMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMzAxODI0NTJaFw0yNDAyMjgxODI0NTFaMBoxGDAWBgNVBAMT
D3d3dy5hZnJjLmFmLm1pbDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKZFuKvN6ToS18TmNeKN4mL2B6hY0W+cjvHdwNdBB9BcdWrO+LhLi0NQ6feFXZaY
I6m+Nrosy9WWHBAsBy0s4Z6BpJ88CuiWt5YeSfb6Vglto0+N7UJ4SmcP+HqDAhX7
ky5PSeRP+CFtDcNTWbYwN527nC4+hnLnVqEw0jmDrXwvvU5FKaaPTaJR6x9OaYDP
9JeOj8uSZHBChjrajNRz0oDv3luI4UMgnnnUv2pPjBApNYTIbpIjkFWLHzEAVj4d
OX3r4b6pLXIcERhK1FCnqRwMIxrj9SP5O5gjQVlQisZtJg99ta6kbGyLRsNshKEs
SR2SCdUvLoa0vDJ4OKiH4fECAwEAAaOCCccwggnDMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQUgb+g9vH6JGW2puXRjj5xDibTjz8wHwYDVR0jBBgwFoAUFC6zF7dYVsuu
UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v
cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y
Zy8wggfOBgNVHREEggfFMIIHwYIKcGRnLmFmLm1pbIIUd3d3LjEwYWYuYWZyYy5h
Zi5taWyCE3d3dy4xMmFmLmFjYy5hZi5taWyCFHd3dy4xNDJ3Zy5hbmcuYWYubWls
ghF3d3cuMTV3aW5nLmFmLm1pbIISd3d3LjFhZi5hY2MuYWYubWlsghR3d3cuMjJh
Zi5hZnJjLmFmLm1pbIIQd3d3LjI0c293LmFmLm1pbIIVd3d3LjMwMWZ3LmFmcmMu
YWYubWlsghV3d3cuMzAyYXcuYWZyYy5hZi5taWyCFXd3dy4zMDdidy5hZnJjLmFm
Lm1pbIIVd3d3LjMxMHN3LmFmcmMuYWYubWlsghV3d3cuMzE1YXcuYWZyYy5hZi5t
aWyCFnd3dy4zNDlhbXcuYWZyYy5hZi5taWyCEXd3dy4zNTJzb3cuYWYubWlsghF3
d3cuMzUzc29nLmFmLm1pbIIQd3d3LjM3dHJ3LmFmLm1pbIIUd3d3LjM4OGZ3LmFj
Yy5hZi5taWyCFXd3dy40MDN3Zy5hZnJjLmFmLm1pbIIVd3d3LjQxOWZ3LmFmcmMu
YWYubWlsghV3d3cuNDMzYXcuYWZyYy5hZi5taWyCFXd3dy40NDJmdy5hZnJjLmFm
Lm1pbIIVd3d3LjQ0NWF3LmFmcmMuYWYubWlsghV3d3cuNDQ2YXcuYWZyYy5hZi5t
aWyCFnd3dy40NTlhcncuYWZyYy5hZi5taWyCFXd3dy40NzdmZy5hZnJjLmFmLm1p
bIITd3d3LjRhZi5hZnJjLmFmLm1pbIIVd3d3LjUwNWNjdy5hY2MuYWYubWlsghZ3
d3cuNTA3YXJ3LmFmcmMuYWYubWlsghV3d3cuNTEyYXcuYWZyYy5hZi5taWyCFnd3
dy41MTRhbXcuYWZyYy5hZi5taWyCFXd3dy41NTJhY3cuYWNjLmFmLm1pbIIWd3d3
LjYyNHJzZy5hZnJjLmFmLm1pbIIVd3d3LjkwOGF3LmFmcmMuYWYubWlsghV3d3cu
OTEzYWcuYWZyYy5hZi5taWyCFnd3dy45MTZhcncuYWZyYy5hZi5taWyCFnd3dy45
MTlzb3cuYWZyYy5hZi5taWyCFnd3dy45MjBycXcuYWZyYy5hZi5taWyCF3d3dy45
MjZ3aW5nLmFmcmMuYWYubWlsghZ3d3cuOTI3YXJ3LmFmcmMuYWYubWlsghZ3d3cu
OTMxYXJ3LmFmcmMuYWYubWlsghV3d3cuOTMyYXcuYWZyYy5hZi5taWyCFnd3dy45
NDBhcncuYWZyYy5hZi5taWyCFXd3dy45NDRmdy5hZnJjLmFmLm1pbIIYd3d3Ljk2
MGN5YmVyLmFmcmMuYWYubWlsgg53d3cuYWNjLmFmLm1pbIIPd3d3LmFldGMuYWYu
bWlsghF3d3cuYWZjZW50LmFmLm1pbIIQd3d3LmFmZ3NjLmFmLm1pbIIUd3d3LmFm
aGlzdG9yeS5hZi5taWyCHnd3dy5hZmhpc3RvcnlhbmRtdXNldW1zLmFmLm1pbIIR
d3d3LmFmaW1zYy5hZi5taWyCD3d3dy5hZnJjLmFmLm1pbIIQd3d3LmFmc29jLmFm
Lm1pbIIRd3d3LmFpcm1hbi5hZi5taWyCEHd3dy5hbHR1cy5hZi5taWyCE3d3dy5h
bmRlcnNlbi5hZi5taWyCFHd3dy5hcnBjLmFmcmMuYWYubWlsghR3d3cuYmFya3Nk
YWxlLmFmLm1pbIIYd3d3LmJhc2ljdHJhaW5pbmcuYWYubWlsghB3d3cuYmVhbGUu
YWYubWlsghF3d3cuY2Fubm9uLmFmLm1pbIIWd3d3LmNpdGFtbi5hZnJjLmFmLm1p
bIITd3d3LmNvbHVtYnVzLmFmLm1pbIIRd3d3LmNyZWVjaC5hZi5taWyCDXd3dy5k
bS5hZi5taWyCF3d3dy5kb2JiaW5zLmFmcmMuYWYubWlsghB3d3cuZHllc3MuYWYu
bWlsghJ3d3cuZWllbHNvbi5hZi5taWyCFHd3dy5lbGxzd29ydGguYWYubWlsghV3
d3cuZ29vZGZlbGxvdy5hZi5taWyCEXd3dy5nb3NlcmUuYWYubWlsghd3d3cuZ3Jp
c3NvbS5hZnJjLmFmLm1pbIITd3d3LmhvbGxvbWFuLmFmLm1pbIIZd3d3LmhvbWVz
dGVhZC5hZnJjLmFmLm1pbIITd3d3Lmh1cmxidXJ0LmFmLm1pbIISd3d3LmtlZXNs
ZXIuYWYubWlsghF3d3cua3Vuc2FuLmFmLm1pbIITd3d3LmxhdWdobGluLmFmLm1p
bIIPd3d3Lmx1a2UuYWYubWlsghV3d3cubWFyY2guYWZyYy5hZi5taWyCEnd3dy5t
YXh3ZWxsLmFmLm1pbIIbd3d3Lm1pbm5lYXBvbGlzLmFmcmMuYWYubWlsghB3d3cu
bW9vZHkuYWYubWlsghd3d3cubW91bnRhaW5ob21lLmFmLm1pbIIQd3d3Lm5hc2lj
LmFmLm1pbIIZd3d3Lm5hdGlvbmFsbXVzZXVtLmFmLm1pbIIRd3d3Lm5lbGxpcy5h
Zi5taWyCF3d3dy5uaWFnYXJhLmFmcmMuYWYubWlsghF3d3cub2ZmdXR0LmFmLm1p
bIIPd3d3Lm9zYW4uYWYubWlsghB3d3cucGFjYWYuYWYubWlsMBMGA1UdIAQMMAow
CAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYASLDja9qmRzQP5WoC
+p0w6xxSActW3SyB2bu/qznYhHMAAAGMIbDtWQAABAMARzBFAiAtmBBz78Z3tOCD
qniFSW4eja8/mr6hColx1UwsB/EjTwIhAPS/T8R+JwYCy6gea63Ur9WzxpXoxIzN
El1v//I9OvNSAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGM
IbDtegAABAMARzBFAiBKusHYiras3Ia5c7Ef1G7e51ooXDC1YFmXMCNxkZs4ZwIh
AP4IzveA6TxGgfCZJ4D/qdADzi/A0Zh/Po9feIY9awYLMA0GCSqGSIb3DQEBCwUA
A4IBAQAwCw1ZHt0nfPAjRzNh6a3XpFaLWfXfYbqIt3Lh4jTfOo8R9BmE+4riQti9
NkHS7Fi9YnnjJL8zfwCDJIQUIJEvfLa9gmGqw+qa3yoKQr25xO1kwAFgNgFdEH4T
DLK5MmK5lwLV0XiIyMAbIi5ourmyPdV+tTlwlZJ6jyp8tDAFPrKkc/W7jD/F/0K/
kJt5YmSrRuF8DBPL9dYnSckhwkEF3/BlJ3qeUcsnQTGAJjx+5zcNRFHWPe/argYj
VStz7najhP1hCZKvvbLBpOBS1RfE6ZrrExLfWOvoGhuDo2uOOxLWSUT7B9do4ppI
+GD5eyscr/M6SB/7r7QVloCIul3B
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkW4q83pOhLXxOY14o3i
YvYHqFjRb5yO8d3A10EH0Fx1as74uEuLQ1Dp94Vdlpgjqb42uizL1ZYcECwHLSzh
noGknzwK6Ja3lh5J9vpWCW2jT43tQnhKZw/4eoMCFfuTLk9J5E/4IW0Nw1NZtjA3
nbucLj6GcudWoTDSOYOtfC+9TkUppo9NolHrH05pgM/0l46Py5JkcEKGOtqM1HPS
gO/eW4jhQyCeedS/ak+MECk1hMhukiOQVYsfMQBWPh05fevhvqktchwRGErUUKep
HAwjGuP1I/k7mCNBWVCKxm0mD321rqRsbItGw2yEoSxJHZIJ1S8uhrS8Mng4qIfh
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270349121920093433851986439179205316243498
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-30 18:24:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-28 18:24:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.afrc.af.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20989939514058599734668398476989465671958408891043714943725305251431080753596472314500051297123987661296856418604865131066767633732460949236991669953283598775166179155508069482338301555001895006238102386919908964715532219855593781895754172766946976870485547162640661149838609604696405635155300412873604582658208671686538307548415984947528240510976006459892782813686975161871098370168740155258813837313336234273348397050393053628921250778541525745847281621836314996478045956894539633287493854058515618769415691404140075803563328918098494792246147885367696923971782433887251898116703684856132414309735221298659609534961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							81bfa0f6f1fa2465b6a6e5d18e3e710e26d38f3f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1989 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdg.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.10af.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.12af.acc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.142wg.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.15wing.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1af.acc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.22af.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.24sow.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.301fw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.302aw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.307bw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.310sw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.315aw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.349amw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.352sow.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.353sog.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.37trw.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.388fw.acc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.403wg.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.419fw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.433aw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.442fw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.445aw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.446aw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.459arw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.477fg.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4af.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.505ccw.acc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.507arw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.512aw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.514amw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.552acw.acc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.624rsg.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.908aw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.913ag.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.916arw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.919sow.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.920rqw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.926wing.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.927arw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.931arw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.932aw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.940arw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.944fw.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.960cyber.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aetc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afcent.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afgsc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afhistory.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afhistoryandmuseums.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afimsc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afsoc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airman.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altus.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersen.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arpc.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barksdale.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basictraining.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beale.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cannon.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citamn.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbus.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creech.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dm.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dobbins.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dyess.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eielson.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ellsworth.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodfellow.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gosere.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grissom.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holloman.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homestead.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hurlburt.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keesler.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kunsan.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laughlin.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luke.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.march.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maxwell.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minneapolis.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moody.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountainhome.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nasic.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationalmuseum.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nellis.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.niagara.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offutt.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osan.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pacaf.af.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c21b0ed59000004030047304502202d981073efc677b4e083aa7885496e1e8daf3f9abea10a8971d54c2c07f1234f022100f4bf4fc47e270602cba81e6badd4afd5b3c695e8c48ccd125d6ffff23d3af352007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c21b0ed7a000004030047304502204abac1d88ab6acdc86b973b11fd46edee75a285c30b5605997302371919b3867022100fe08cef780e93c4681f0992780ffa9d003ce2fc0d1987f3e8f5f78863d6b060b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00300b0d591edd277cf023473361e9add7a4568b59f5df61ba88b772e1e234df3a8f11f41984fb8ae242d8bd3641d2ec58bd6279e324bf337f008324841420912f7cb6bd8261aac3ea9adf2a0a42bdb9c4ed64c0016036015d107e130cb2b93262b99702d5d17888c8c01b222e68bab9b23dd57eb5397095927a8f2a7cb430053eb2a473f5bb8c3fc5ff42bf909b796264ab46e17c0c13cbf5d62749c921c24105dff065277a9e51cb27413180263c7ee7370d4451d63defdaae0623552b73ee76a384fd610992afbdb2c1a4e052d517c4e99aeb1312df58ebe81a1b83a36b8e3b12d64944fb07d768e29a48f860f97b2b1caff33a481ffbafb415968088ba5dc1