www.pentagon.mil

Issued by R3

About this certificate

This digital certificate with serial number 04:4e:e4:3c:0e:4e:9e:32:9d:9d:37:f0:07:9a:ae:bc:d2:0a was issued on by Let's Encrypt.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.pentagon.mil

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4e:e4:3c:0e:4e:9e:32:9d:9d:37:f0:07:9a:ae:bc:d2:0a
Serial Number (int): 375294544157907150594709062109341570355722
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 29:a6:2a:8b:86:a6:02:b2:7b:e1:a3:cd:f1:55:79:2f:cb:23:2a:24
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d9:7d:f2:4b:2c:ce:5b:7d:ff:0d:0d:50:c9:20:28:ea:e8:50:8e:a5
Fingerprint (sha256): 08:cf:dd:6a:98:a6:87:5a:4d:78:9b:a1:25:3a:99:2b:90:8f:2c:55:70:a5:8c:63:60:7c:90:ae:0b:f5:fc:45

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.pentagon.mil

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pentagon.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arkansas.nationalguard.mil
co.ng.mil
dc.ng.mil
dvisc.dma.mil
inside.dma.mil
jiraservicedesk.dma.mil
ky.ng.mil
media.dma.mil
oig.dia.mil
pwservicedesk.dma.mil
servicedesk.dma.mil
slite.dma.mil
static.dma.mil
video.dma.mil
www.afneurope.net
www.afnpacific.net
www.army.nationalguard.mil
www.budget.mil
www.cac.mil
www.centcom.mil
www.cloud.mil
www.cybercom.mil
www.dcaa.mil
www.dcma.mil
www.dcsa.mil
www.defense.mil
www.defenseculture.mil
www.defenselink.mil
www.dfas.mil
www.dhra.mil
www.dia.mil
www.dimoc.mil
www.dinfos.dma.mil
www.dla.mil
www.dma.mil
www.dod.mil
www.dodig.mil
www.dote.osd.mil
www.dpaa.mil
www.dsp.dla.mil
www.dspo.mil
www.dss.mil
www.dtra.mil
www.esd.whs.mil
www.jbmdl.jb.mil
www.jbml.jb.mil
www.jcs.mil
www.jcu.mil
www.jecc.mil
www.jiatfs.southcom.mil
www.jpeocbrnd.osd.mil
www.jtfb.southcom.mil
www.jtfcs.northcom.mil
www.jtfgtmo.southcom.mil
www.jtfn.northcom.mil
www.jtnc.mil
www.jwac.mil
www.metc.mil
www.nationalguard.mil
www.norad.mil
www.northcom.mil
www.nro.gov
www.nro.mil
www.pacom.mil
www.pentagon.mil
www.people.mil
www.pfpa.mil
www.prs.mil
www.repi.mil
www.southcom.mil
www.spacecom.mil
www.stratcom.mil
www.usfj.mil
www.warriorcare.mil
www.whitehousecommsagency.mil

Other certificates including the domain name pentagon.mil

(limited to 100 certificates)
www.dami.army.pentagon.mil
fa49.hqda.pentagon.mil
www.dma.mil
enbosswistagingcac.ocar.army.pentagon.mil
isrtrain.hqda.pentagon.mil
www.dma.mil
adminapps1.hqda.pentagon.mil
www.dma.mil
www.dma.mil
www.pentagon.mil
www.dma.mil
HQDAC2N00062-03.hqda.pentagon.mil
www.dma.mil
ariddashboard.ocar.army.pentagon.mil
www.dma.mil
www.pentagon.mil
www.asamra.army.mil
visitors.pentagon.mil
eeoa.army.pentagon.mil
jagc61-250.army.pentagon.mil
www.g357intranet.hqda.pentagon.mil
wias.hqda.pentagon.mil
www.pentagon.mil
www.acp.army.pentagon.mil
jspwin.pentagon.mil
www.dma.mil
meeting.pentagon.mil
pubssod2.acsap.hqda.pentagon.mil
citrixgw1.hqda.pentagon.mil
saprp.pentagon.mil
arba.army.pentagon.mil
*.hqda.pentagon.mil
minuteman.ngb.army.mil
www.dma.mil
www.pentagon.mil
www.daig.pentagon.mil
arba.army.pentagon.mil
www.dma.mil
www.pentagon.mil
www.dma.mil
enbossteamtrackanon.ocar.army.pentagon.mil
www.dami.army.pentagon.mil
rbuild.pentagon.mil
SSOREGISTRATION.OCAR.ARMY.PENTAGON.MIL
EPASR.OCAR.ARMY.PENTAGON.MIL
smms.army.pentagon.mil
www.dma.mil
www.dma.mil
staging.rovr.army.pentagon.mil
smartbook.armyg1.pentagon.mil
RbuilderMMSupplemental.pentagon.mil
www.atrrs.army.pentagon.mil
pmdwtstest.ocar.army.pentagon.mil
interface.rovr.army.pentagon.mil
www.dma.mil
drrb-risk-reserve.acsap.hqda.pentagon.mil
www.dma.mil
cppm-pwn-s4.nsmc.pentagon.mil
www.dma.mil
usarbasops.ocar.army.pentagon.mil
vdi.hqda.pentagon.mil
www.dma.mil
aewrs.hqda.pentagon.mil
ssoregistrationdev.ocar.army.pentagon.mil
actsonline.army.mil
fdbtraining.ocar.army.pentagon.mil
ocsp5.army.pentagon.mil
visitors.pentagon.mil
eis.hqda.pentagon.mil
ecdrs.ocar.army.pentagon.mil
citrixgw2.hqda.pentagon.mil
www.dma.mil
drr-risk.acsap.hqda.pentagon.mil
citrixgw2.hqda.pentagon.mil
portal.doha.pentagon.mil
interface.eval.atrrs.army.pentagon.mil
ecdrs.ocar.army.pentagon.mil
www.g357intranet.hqda.pentagon.mil
www.dma.mil
www.amhs.pentagon.mil
cppm-pwn-s2.nsmc.pentagon.mil
www.dma.mil
fmwebdav.hqda.pentagon.mil
prissod1.acsap.hqda.pentagon.mil
www.asamra.army.mil
staging.rovr.army.pentagon.mil
www.dma.mil
www.dma.mil
connect.dtmo.pentagon.mil
www.atrrs.army.pentagon.mil
www.dma.mil
wias.pentagon.mil
casa.army.mil
rbuilder.pentagon.mil
webmail.dtmo.pentagon.mil
isr.hqda.pentagon.mil
www.dma.mil
arba.army.pentagon.mil
enbosscsg.ocar.army.pentagon.mil
meeting.pentagon.mil

Certificate

The complete raw certificate details for www.pentagon.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNM7ximovTASvK1XykQl
dZvaoCF3z0EdNYX2a5jwmSsCmLF/lO/MnkVTAIWqv/ZQbWIR55BF1eXuLc1KOa6o
BP7ixiv2UrbzUfk+7hzxXqWuIX8Xn6A/6Eeb7ThwVNO3wSkwfqi8EDOFhcDVdXhN
giVhvHOtqXdNzbHT87YZaauKdETuiiviDWyWkEz/s/VZVguUJl865pz2uDl2qaIH
On4CZlG8t6ipZEQJvqxMEkP5Y6Y7jVEquwSzu4/b7+cYQVQQGw9dvSSCtibXbxGW
T0X96ltYl+mKKZ+jGhun21NOlHVe5yxC84iqlQyKUk1JOH5qUP/q7l7esyDwb/1m
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 375294544157907150594709062109341570355722
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-22 16:33:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-20 16:33:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pentagon.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23332011231105925803680189437798289706875637224072773187210699099867515499836149790129636893094050025132761050511731718058725346045873076354369849299327078542389069598670275420591977432805537150337632668388647245474582489371375858960299915446213329827222991856654049136204619973227677185299458735925347027033157203731894477572901769244324314008368968713429855866048484733912800055602934126765717315319308866594978684406691514310074872724581397376232926093441769221891166832661299269700812656043257837262313603966154351544732403956963717382202421395025075335419826597919143119119705310078461328938578023100873415943717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29a62a8b86a602b27be1a3cdf155792fcb232a24
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1279 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkansas.nationalguard.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co.ng.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc.ng.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvisc.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiraservicedesk.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ky.ng.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oig.dia.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwservicedesk.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slite.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afneurope.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afnpacific.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.army.nationalguard.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.budget.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cac.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cloud.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cybercom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dcaa.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dcma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dcsa.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defense.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defenseculture.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defenselink.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dfas.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dhra.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dia.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dimoc.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dinfos.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dla.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dod.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dodig.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dote.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dpaa.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsp.dla.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dspo.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dss.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dtra.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esd.whs.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jbmdl.jb.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jbml.jb.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcs.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcu.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jecc.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jiatfs.southcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jpeocbrnd.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jtfb.southcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jtfcs.northcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jtfgtmo.southcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jtfn.northcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jtnc.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jwac.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metc.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationalguard.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norad.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nro.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nro.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pacom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pentagon.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.people.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pfpa.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prs.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.repi.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spacecom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stratcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usfj.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warriorcare.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whitehousecommsagency.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000017acf47c7060000040300473045022070f80810b233ae17831776e18efe8c8c3cf76a9a6692d2a6b33d9a2ad0153059022100dc6ed05402c672a2800b460e1f7c6f87cc8f82781ff9647063ff893f1c651954007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017acf47c6f10000040300483046022100847b4898034b4776bfc18d9b4b9cbc42e5f2ffe655f2b6810615415ebad743f1022100caf771caac3553575dd76f8442982135d08c88558ddad2de93b3bf1481302e91
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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