www.af.mil

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d3:32:a7:cb:1a:05:8a:91:5d:dc:56:a1:ce:27:ea:b3:be was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.af.mil

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d3:32:a7:cb:1a:05:8a:91:5d:dc:56:a1:ce:27:ea:b3:be
Serial Number (int): 333203769848354173550449642274892653704126
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0b:d7:5f:4d:e0:4c:4e:bb:ec:54:e2:c0:95:de:31:62:f1:9e:45:3c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3a:0f:1b:87:94:0d:98:cc:b1:1d:c8:65:1d:91:f6:e2:5b:16:b6:38
Fingerprint (sha256): 07:b1:83:af:a7:de:ea:15:ec:f5:6b:a7:f5:f7:42:20:ee:f6:46:02:e2:01:e2:5e:8d:44:df:68:b3:50:62:35

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.af.mil

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.af.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kesselrun.af.mil
static.e-publishing.af.mil
www.125fw.ang.af.mil
www.12ftw.af.mil
www.159fw.ang.af.mil
www.174attackwing.ang.af.mil
www.187fw.ang.af.mil
www.188wg.ang.af.mil
www.189aw.ang.af.mil
www.190arw.ang.af.mil
www.192fw.ang.af.mil
www.192wg.ang.af.mil
www.193sow.ang.af.mil
www.194wg.ang.af.mil
www.24sow.af.mil
www.26af.af.mil
www.2af.aetc.af.mil
www.340ftg.afrc.af.mil
www.413ftg.afrc.af.mil
www.492sow.af.mil
www.53rdwing.af.mil
www.aatc.ang.af.mil
www.af.mil
www.afcec.af.mil
www.afhra.af.mil
www.afinspectorgeneral.af.mil
www.aflcmc.af.mil
www.afmaa.af.mil
www.afmc.af.mil
www.afpa.af.mil
www.afsbirsttr.af.mil
www.afsc.af.mil
www.afsig.af.mil
www.aft3.af.mil
www.aftc.af.mil
www.afwic.af.mil
www.airforcebes.af.mil
www.airforcemedicine.af.mil
www.airforcesmallbiz.af.mil
www.airforcespecialtactics.af.mil
www.airuniversity.af.mil
www.alpenacrtc.ang.af.mil
www.amc.af.mil
www.angtec.ang.af.mil
www.bmtflightphotos.af.mil
www.doctrine.af.mil
www.e-publishing.af.mil
www.eads.ang.af.mil
www.expeditionarycenter.af.mil
www.foia.af.mil
www.honorguard.af.mil
www.jbsa.af.mil
www.mars.af.mil
www.mortuary.af.mil
www.music.af.mil
www.netcents.af.mil
www.osi.af.mil
www.pittsburgh.afrc.af.mil
www.pope.af.mil
www.privacy.af.mil
www.publicaffairs.af.mil
www.recruiting.af.mil
www.resilience.af.mil
www.retirees.af.mil
www.safie.hq.af.mil
www.secretsdeclassified.af.mil
www.seymourjohnson.af.mil
www.shaw.af.mil
www.sheppard.af.mil
www.spacecom.mil
www.specialwarfaretw.af.mil
www.tinker.af.mil
www.torch.aetc.af.mil
www.trademark.af.mil
www.transform.af.mil
www.tyndall.af.mil
www.usafa.af.mil
www.vance.af.mil
www.volkfield.ang.af.mil
www.wads.ang.af.mil
www.warren.af.mil
www.westover.afrc.af.mil
www.woundedwarrior.af.mil
www.yokota.af.mil
www.youngstown.afrc.af.mil

Other certificates including the domain name af.mil

(limited to 100 certificates)
sso.nasiccloud.af.mil
angelfire.vdl.afrl.af.mil
www.honorguard.af.mil
apc3-ec-01.ang.ds.af.mil
cqmap.cce.af.mil
www.afncr.hq.af.mil
coins9iapp.scott.af.mil
www.afcyber.af.mil
www.afrc.af.mil
ar.afcec-cloud.af.mil
*.coder-gov.nasic.af.mil
oars189.dng.cie.af.mil
mdm.test.cce.af.mil
afbrac.hq.af.mil
WEDNG11645.dng.cie.af.mil
52arty-ws-005v.afrc.af.mil
www.af.mil
efoia.cce.af.mil
www.gil.cetl.gunter.af.mil
hcloginorigin.maxwell.af.mil
lrt2.my.af.mil
mow-g-mrly-001.afgate.ad.af.mil
deamsbpel.cie.af.mil
portal.jbsa.af.mil
ej-crl2.my.af.mil
ihs.afrc.af.mil
UAT.MEDXS.AF.MIL
owscollab.barksdale.af.mil
deamsoam0010a.cie.af.mil
acesdsso.cie.af.mil
deamsgrdintconsole.cie.af.mil
www.ang.af.mil
asli.af.mil
wargaming.hq.af.mil
wildcard.cce.af.mil
PETERSON-MAIL1.afnoc.af.mil
cie-sdp-dp.cie.af.mil
www.uat.medxs.af.mil
www.damis.afaa.hq.af.mil
netdev.hq.af.mil
afrcdesktops.us.af.mil
kir-g-mrly-002.afgate.ad.af.mil
bermuda.af.mil
crosslink.af.mil
development.lcmp.af.mil
remote1.afwa.af.mil
armsweb.afpc.randolph.af.mil
aiportal.acc.af.mil
f16ocm.hill.af.mil
diode.nasic.af.mil
aftoc.hill.af.mil
glens0057-web8.frontrange.afspc.ds.af.mil
ows.sembach.af.mil
www.honorguard.af.mil
pass.hq.af.mil
w40.afpc.randolph.af.mil
wecstclnt85.gateway.cie.af.mil
www.airforcefaptest.af.mil
52tymx-ws-200.randolph.aetc.ds.af.mil
www.afcyber.af.mil
www.airforcehollywood.af.mil
apims.af.mil
bsds.cie.af.mil
www.af.mil
www.af.mil
www.af.mil
adapts2.test.cce.af.mil
webmail.clear.af.mil
itsrd.cie.af.mil
www.afrc.af.mil
esgweb.afccc.af.mil
aflegalassistance.law.af.mil
deamsdisint1console.cie.af.mil
mocc.vandenberg.af.mil
52vejx-ucpool-001.area52.afnoapps.usaf.mil
deamsobiint2.cie.af.mil
bermuda.af.mil
www.af.mil
widds.afwa.af.mil
mail.ok.afmc.af.mil
teams.afsoc.af.mil
*.bermuda.af.mil
www.airforcehollywood.af.mil
c5galaxy.robins.af.mil
jagusaf.jag.af.mil
teleport.nasic.af.mil
nssi.cce.af.mil
digitalu.af.mil
mxprod.hq.af.mil
mail.kirtland.af.mil
etca.randolph.af.mil
www.my.af.mil
asli.af.mil
reports.arpc.afrc.af.mil
cx.hanscom.af.mil
software.af.mil
webmail.ajab.nosc.afcent.af.mil
afaems.us.af.mil
owsjet17.us.af.mil
bipweather.afwa.af.mil

Certificate

The complete raw certificate details for www.af.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMD/TNbSjAOpZYsSxAe1
Z87cwh6dvQSTj7maGX7Yc/c01zyyyJaitWX1woPc/eKT9Zt0zbpWOpkSF0+unywM
Kqccr2bXuEL4PRoisqzGEXkayp8BhK0p2a0k9WqU/m8nAQ+Kls2S4zbEM+ctNuV9
NwrjFbcSZyi6nBnrg9B2rIJMacemkqU8lZou8khpEkjmUY/E1eO9LchbXJvH3VBK
Sx8E9eWBPdvptdJbmKkLYH3hwNPOSQ7Xbv/4HOXzK43tBAPniOkWq2ibX/A2tutt
HbAgEVcxx9JDy66oVBxwsSoHL8FKkOwPdg1XOToPs8Nq/eFvJsMyxNQJ+UgGKe73
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333203769848354173550449642274892653704126
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-01 12:26:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-30 12:26:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.af.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22313112173053649473955831952694568749168494207481297157063392265018862649492306863775058886857979657880594868248778157734051393285386285795228195212730198004195536338323406301679211247310614970209203671699858315889778510876372378041704531906704362822088745022586080858878113090262894747034961784964354694751158364619633072935893225522262575652166242589491240135335150491718332210082471922555064101574587630059168135908613526257824405675235484927677353252314809506029203243710216141943427989715771172273016987397344495818163745804333230523599050852778867790391660448882935915412398293055438686631463308457827724359481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0bd75f4de04c4ebbec54e2c095de3162f19e453c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1862 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kesselrun.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.e-publishing.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.125fw.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.12ftw.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.159fw.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.174attackwing.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.187fw.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.188wg.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.189aw.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.190arw.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.192fw.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.192wg.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.193sow.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.194wg.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.24sow.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.26af.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2af.aetc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.340ftg.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.413ftg.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.492sow.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.53rdwing.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aatc.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afcec.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afhra.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afinspectorgeneral.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aflcmc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afmaa.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afmc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afpa.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afsbirsttr.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afsc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afsig.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aft3.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aftc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afwic.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airforcebes.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airforcemedicine.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airforcesmallbiz.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airforcespecialtactics.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airuniversity.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alpenacrtc.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angtec.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmtflightphotos.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doctrine.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-publishing.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eads.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expeditionarycenter.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foia.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.honorguard.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jbsa.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mars.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mortuary.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.music.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netcents.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osi.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pittsburgh.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pope.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privacy.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.publicaffairs.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recruiting.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resilience.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retirees.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safie.hq.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secretsdeclassified.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seymourjohnson.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shaw.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sheppard.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spacecom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.specialwarfaretw.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tinker.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.torch.aetc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trademark.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transform.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tyndall.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usafa.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vance.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volkfield.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wads.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warren.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westover.afrc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woundedwarrior.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yokota.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youngstown.afrc.af.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d878090f3000004030046304402206718bd80d26ed2c1fe816338d6c259c16a177e8d6b5765c5b655c23d92ca9c73022003692bf9754ed88370de28af858f352f597f5812f2e5bcc7b9d689817c7d0238007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d87808ee8000004030047304502210096eaf5a6c9ead9e6e24c8c2d40bbf1540b09b95a3769e6399f16068028266b1d0220177d38f76734cc6f7ab4ec3331c2352cad7021147f0c0b4714973bbdcd994dcb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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