myafn.dodmedia.osd.mil

Issued by R3

About this certificate

This digital certificate with serial number 03:05:bd:0e:97:a2:de:94:80:a8:59:4e:3f:89:75:12:d5:aa was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=myafn.dodmedia.osd.mil

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:05:bd:0e:97:a2:de:94:80:a8:59:4e:3f:89:75:12:d5:aa
Serial Number (int): 263289569488792498524237286745137201993130
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bd:14:aa:f4:ad:39:a4:a3:74:81:10:c8:e5:e6:21:5a:ef:86:af:c4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 94:a7:d2:07:d8:44:b6:4f:e2:2f:40:5d:f6:56:b7:f3:11:25:38:82
Fingerprint (sha256): 09:a6:66:b1:d9:40:09:b1:8c:71:1d:f6:82:1e:ff:de:53:e4:5f:bb:67:98:10:1b:c5:ed:84:65:0b:89:db:8f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate myafn.dodmedia.osd.mil

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for myafn.dodmedia.osd.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn.myafn.dodmedia.osd.mil
doha.ogc.osd.mil
imp.myafn.dodmedia.osd.mil
media.myafn.dodmedia.osd.mil
myafn.dodmedia.osd.mil
tasa.dodmedia.osd.mil
v3.myafn.dodmedia.osd.mil
www.test-evaluation.osd.mil

Other certificates including the domain name osd.mil

(limited to 100 certificates)
myafn.dodmedia.osd.mil
secureapps.osd.mil
eRoom.tma.osd.mil
stg.service.cade.osd.mil
kbs.nsoc.health.mil
nmcp-root.med.osd.mil
www.dma.mil
bea.osd.mil
repi.osd.mil
nmcsd-root.med.osd.mil
www.dma.mil
afnconnect.myafn.dodmedia.osd.mil
mhse2e.med.osd.mil
cade.osd.mil
titus.cpms.osd.mil
opmverify.dmdc.osd.mil
dtsproweb.defensetravel.osd.mil
compos.dcpds.cpms.osd.mil
www.dma.mil
www.defense.gov
www.dma.mil
repi.osd.mil
www.pentagon.mil
www.dma.mil
afnconnect.myafn.dodmedia.osd.mil
dodmerb.tricare.osd.mil
webct2.dmdc.osd.mil
CAPE eRoom
cade.osd.mil
citrixsg.osd.mil
www.pentagon.mil
web-06-r-p.fhppub.dhhq.local
repi.osd.mil
jacks.jpeocbd.army.mil
jds.cape.osd.mil
repi.osd.mil
dach-era.med.osd.mil
guidanceweb.ousdc.osd.mil
afnconnect.myafn.dodmedia.osd.mil
pentagontours.osd.mil
dmdc.osd.mil
rcc.osd.mil
www.usace.army.mil
myafn.dodmedia.osd.mil
repi.osd.mil
www.pentagon.mil
systemarchitect.tma.osd.mil
*.jacks.jpeocbrnd.army.mil
secureapps.osd.mil
dtscdcvpn02.defensetravel.osd.mil
snap.cape.osd.mil
fermion.dmea.osd.mil
*.jacks.jpeocbrnd.army.mil
myafn.dodmedia.osd.mil
www.usace.army.mil
lms.dcpas.osd.mil
denix.osd.mil
fermion.dmea.osd.mil
SNAP.CAPE.OSD.MIL
bach-era.med.osd.mil
denix.osd.mil
lrmc-root.med.osd.mil
listserver.tma.osd.mil
godefense.dcpas.osd.mil
service.cade.osd.mil
guidanceweb.ousdc.osd.mil
fcom.cape.osd.mil
macstg.ousdc.osd.mil
login.myafn.dodmedia.osd.mil
hrnetapps.cpms.osd.mil
kbs.nsoc.health.mil
jsp-ipm.osd.mil
sepsii.tricare.osd.mil
DORWARD.jte.osd.mil
jcoc.osd.mil
uranus.cpms.osd.mil
itbudget.osd.mil
dod-executiveagent.osd.mil
cerebro-ct.dmdc.osd.mil
denix.osd.mil
dodcioext.osd.mil
www.public.navy.mil
mhse2erecv.med.osd.mil
www.dma.mil
afnconnect.myafn.dodmedia.osd.mil
www.pentagon.mil
ircmstrn.cpms.osd.mil
bolly.cpms.osd.mil
repi.osd.mil
wasp-ad.dmdc.osd.mil
art.tma.osd.mil
webst.dmdc.osd.mil
fmonline.ousdc.osd.mil
fsm.cape.osd.mi
repi.osd.mil
dmdc.mil
dmdc.mil
dmdc.mil
www.dma.mil
learning1.dmdc.osd.mil

Certificate

The complete raw certificate details for myafn.dodmedia.osd.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk+5L6hxhexwa1gDLKVz
Vo1AxB1jhbue3ZQRH6pF/xp7UtcnYCmQA4ZF0wStSVqrVhEvTQEjdmS0y0tXH/Vz
AustzFU2bNppgfF4fCh7/bty+lOfGklKMR5I5E8NY4rYyqkiNarpymRnOYHatAxW
Uuxwrc8y/RgI219y5grZB4liOsUD8LR6r1spwI/XGyY29+xwnGg9ycoLjFb3ByA3
g6pY8jpKVP6CBhfsQITnG3jQ08YfOE1nSq8Nbe2dfM1b1Ux8Tdbx3vpXLKZpxLVe
dq/N6ER/ZGeKYlaN3F2oP2rWlrbzRZKgE8Cw0w8P9zmDOfGtsd5GMsAcZ9zN4Z7j
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263289569488792498524237286745137201993130
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-30 18:42:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-28 18:42:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'myafn.dodmedia.osd.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20994871689964474295058713993257710077756355428422713682644943735372073338024633475692562956522902606260102295810419724528069733077207030549837281586302789724368586332474803757193976098014464360603226415849638266201255844803000227022158765676503219098338199373623858616936464527267530442965013393205371977369266822337513770926464754474257521298438273201424857559411459079860078815119939186739705985831575299110666487866547911667043359483117174256293539738710295461187602655332754465555213299164953958224276935885103827518676850305670114552034118587761794850719496154336060460313306448666551616311567427738711149699853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd14aaf4ad39a4a3748110c8e5e6215aef86afc4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (210 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.myafn.dodmedia.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doha.ogc.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp.myafn.dodmedia.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.myafn.dodmedia.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myafn.dodmedia.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasa.dodmedia.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v3.myafn.dodmedia.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-evaluation.osd.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a7300000182f0473a540000040300483046022100c37ed74b38f2f7fb633629d9bc25a49124a56bf96cd3df52c9b6d839526192b8022100e055dcc25e8d532b336dc0649d5547ff75846b142d882ce08511e6eb0eda22dc00750046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000182f0473a7c0000040300463044021f2b86f9eadb5a6fca27b714c52c6679c6f5e8566d1053085c23f7172b55025a022100de6c5b18145fc425b62667b31e76063d27b02be44db4a55e13d7b7d7e8149f2a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b35b8d39f46697566976cba5ef43a5460bff57fc86b36b03640ab5671cc1a7f1a5a96e81fd04c661d8706f2a779da933acccd009fef3af72bf20dfd8fbc1c80252f6b2641c0b004a09ce44216908ee053b62b66b1c0914aa2d24e6e2fc9e24a0d33642cc8513846014f568dd81279d4c19149be0d943b183c6f7a79873f583a639197912353e0ab1da03e15eda38d7f3b54d127321b1fbcee334ec358aa2568417a44bbfcc187a09f4edbf1eac1aba9d0128bef58b55a5da1500169a814854dae4b694d94cccf9cb2d8aad80fbce5232e03f6cc3f6edaeb128b3578dd51b9f1155085dd7e6c9b876e4a2335a0b0efd5a94826da74b59e0439d3897e0164dba9e