mobile.health.mil

- Defense Health Agency -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 09:4e:91:df:8e:b7:90:ce:02:8c:1c:7a:62:87:a2:fd was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Defense Health Agency

Organization: Defense Health Agency
State / Province: Virginia
Locality: Falls Church
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:4e:91:df:8e:b7:90:ce:02:8c:1c:7a:62:87:a2:fd
Serial Number (int): 12371009778471518224925240275688203005
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e1:d0:80:b9:ef:9f:2d:c8:47:2d:1f:bd:ac:00:ad:99:e9:4d:dd:05
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 00:00:ab:c3:6c:87:1d:2b:83:9e:d4:5f:df:f6:71:46:e1:6d:99:84
Fingerprint (sha256): 0f:95:c0:37:1a:ea:84:59:cf:97:0b:fc:4b:cb:6c:0e:03:d9:20:bb:1d:c8:57:52:47:49:4a:c9:0f:60:55:33

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate mobile.health.mil

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mobile.health.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mobile.health.mil
staging-mobile.health.mil
dev-mobile.health.mil

Other certificates including the domain name health.mil

(limited to 100 certificates)
egs.health.mil
art.health.mil
sph.health.mil
chat.gsc.health.mil
www.mamc.health.mil
facilities.health.mil
kbs.nsoc.health.mil
mobiledev.health.mil
facilities.health.mil
srtsweb.health.mil
edcinfdev.health.mil
remote.health.mil
midrp.health.mil
usamricd.health.mil
usamricd.health.mil
www.dma.mil
edccoding.health.mil
pacific.meet.health.mil
zmail.nsoc.health.mil
ccgw-remote.health.mil
facilities.health.mil
web-06-r-p.fhppub.dhhq.local
www.facilities.health.mil
ectdview.health.mil
stagingcert-my.mhsgenesis.health.mil
www.t2.health.mil
tmed-tamc.health.mil
springresearchfestival.health.mil
mhsgovernance.health.mil
central.meet.health.mil
facilities.health.mil
usamraa.health.mil
facilities.health.mil
remote-gal.health.mil
partners-cccrp.health.mil
arterawebgw.mhsgenesis.health.mil
facilities.health.mil
capmed.mil
virtual.health.mil
jtapic.health.mil
nicbr.health.mil
6mlmc.health.mil
usammda.health.mil
europe.meet.health.mil
nicbr.health.mil
kbs.nsoc.health.mil
phcp.health.mil
static.mhsgenesis.health.mil
facilities.health.mil
iris.nsoc.health.mil
mobile.health.mil
ectd.health.mil
facilities.health.mil
east.meet.health.mil
cccrp.health.mil
surveys.usaarl.army.mil
static.mhsgenesis.health.mil
usamrd-w.health.mil
east.meet.health.mil
facilities.health.mil
stg.chip.health.mil
stem.health.mil
dmrncac-test.dhhq.health.mil
momrp.health.mil
stg.chip.health.mil
egs.health.mil
www.bamc.health.mil
health.mil
ectd.health.mil
manuals.health.mil
smallbusopps.health.mil
facilities.health.mil
facilities.health.mil
mrdc-npi.health.mil
facilities.health.mil
partners-momrp.health.mil
combatimaging.health.mil
facilities.health.mil
edccoding.health.mil
edms.health.mil
usamrd-w.health.mil
stg.facilities.health.mil
facilities.health.mil
usamriid.health.mil
blastinjuryresearch.health.mil
east.meet.health.mil
sa.nhcne.health.mil
east.meet.health.mil
facilities.health.mil
art.health.mil
mrdc.health.mil
visionregistry.dhhq.health.mil
health.mil
sa.nhcne.health.mil
technologytransfer.health.mil
central.meet.health.mil
facilities.health.mil
www.dma.mil
trrws.health.mil
avhe.health.mil

Certificate

The complete raw certificate details for mobile.health.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4xAiqJZVztc0nvDfRzx
DpTc0yfV2nqNXkdkAZ6mQAzjTHkOhrnrtmoLf7vLHk9mLu3nbOIGZx+JiKvXwmld
2UXYsz02olNCnJKqSdYyIZRq7YEpeyAsLw5bEHBGLw8ib8Pj5OZQJGS1eiKnVVoV
Tmth4qVE2KLml4s5hUMrmlJQUmP4RxMra28BKRBPcgmBW2jVko16Iy88PI8fqbzU
msUJgmcqZjXeWBWJz3U9HRvfGYZcpcrcs8cNhQgdaW9WMRs9flzdTTg6wwVvqf/a
NtyTEDGXu7FrqSyaHVKP2IFvi7JbLN3Zdsy03HqoXxsLgLHOwchCCutY4ugyYjq1
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12371009778471518224925240275688203005
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Falls Church'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Defense Health Agency'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mobile.health.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22160864264820777515591565483123934781062720398017233121005108182594608559284227500501638815496948665875747250848939071897577580907578364203567158151829367868143184023072731617912529347243788343602669243756595139925959631532665950934228238078571957635348089918118176434309972374932300144838878547716840437547482036834935095949130297028495964633657992947081317327840058021491259027522573394820858249712133320696914989825807197283508445107182080576617684475001792301269324351689415459930277105660774841364338815545181640618136469258096415172262316830444035349557384885454694232163886180280296863023054750823411101644039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1d080b9ef9f2dc8472d1fbdac00ad99e94ddd05
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.health.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-mobile.health.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-mobile.health.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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