facilities.health.mil

Issued by R3

About this certificate

This digital certificate with serial number 04:77:9b:1f:ee:41:12:48:d0:a2:13:8a:65:ed:53:d9:f6:97 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=facilities.health.mil

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:77:9b:1f:ee:41:12:48:d0:a2:13:8a:65:ed:53:d9:f6:97
Serial Number (int): 389148941523550915269196299168535159633559
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 94:c8:2e:d8:47:5b:bb:59:94:b8:aa:54:1c:9e:b3:fd:a8:08:d1:36
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 25:16:1e:e6:ef:2e:8d:15:60:ec:45:17:d1:cd:2d:5f:7b:34:66:43
Fingerprint (sha256): 16:57:2b:24:71:4b:88:45:da:e9:b9:47:e8:90:87:8b:e4:c8:56:ce:96:3e:18:a8:44:c8:06:fe:f1:9f:01:72

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate facilities.health.mil

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for facilities.health.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

facilities.health.mil
home.facilities.health.mil
rpss.facilities.health.mil
www.facilities.health.mil

Other certificates including the domain name health.mil

(limited to 100 certificates)
egs.health.mil
art.health.mil
sph.health.mil
chat.gsc.health.mil
www.mamc.health.mil
facilities.health.mil
kbs.nsoc.health.mil
mobiledev.health.mil
facilities.health.mil
srtsweb.health.mil
edcinfdev.health.mil
remote.health.mil
midrp.health.mil
usamricd.health.mil
usamricd.health.mil
www.dma.mil
edccoding.health.mil
pacific.meet.health.mil
zmail.nsoc.health.mil
ccgw-remote.health.mil
facilities.health.mil
web-06-r-p.fhppub.dhhq.local
www.facilities.health.mil
ectdview.health.mil
stagingcert-my.mhsgenesis.health.mil
www.t2.health.mil
tmed-tamc.health.mil
springresearchfestival.health.mil
mhsgovernance.health.mil
central.meet.health.mil
facilities.health.mil
usamraa.health.mil
facilities.health.mil
remote-gal.health.mil
partners-cccrp.health.mil
arterawebgw.mhsgenesis.health.mil
facilities.health.mil
capmed.mil
virtual.health.mil
jtapic.health.mil
nicbr.health.mil
6mlmc.health.mil
usammda.health.mil
europe.meet.health.mil
nicbr.health.mil
kbs.nsoc.health.mil
phcp.health.mil
static.mhsgenesis.health.mil
facilities.health.mil
iris.nsoc.health.mil
mobile.health.mil
ectd.health.mil
facilities.health.mil
east.meet.health.mil
cccrp.health.mil
surveys.usaarl.army.mil
static.mhsgenesis.health.mil
usamrd-w.health.mil
east.meet.health.mil
facilities.health.mil
stg.chip.health.mil
stem.health.mil
dmrncac-test.dhhq.health.mil
momrp.health.mil
stg.chip.health.mil
egs.health.mil
www.bamc.health.mil
health.mil
ectd.health.mil
manuals.health.mil
smallbusopps.health.mil
facilities.health.mil
facilities.health.mil
mrdc-npi.health.mil
facilities.health.mil
partners-momrp.health.mil
combatimaging.health.mil
facilities.health.mil
edccoding.health.mil
edms.health.mil
usamrd-w.health.mil
stg.facilities.health.mil
facilities.health.mil
usamriid.health.mil
blastinjuryresearch.health.mil
east.meet.health.mil
sa.nhcne.health.mil
east.meet.health.mil
facilities.health.mil
art.health.mil
mrdc.health.mil
visionregistry.dhhq.health.mil
health.mil
sa.nhcne.health.mil
technologytransfer.health.mil
central.meet.health.mil
facilities.health.mil
www.dma.mil
trrws.health.mil
avhe.health.mil

Certificate

The complete raw certificate details for facilities.health.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ0pt7YJHD+IvPhsaptU
vkkjRsn747506/f6nCIB5DvgGPLULSqxAECSzoRflQxpLJaL4999h7xOTetlOm4e
x3xd14fKT6g4vzuq225VxzJg8aP2HGkL2kglymu4Knga4jXnrh8sP+ExjuQHB8RG
Nc/8jekQax/WXpW+1P9bBuXm/bKr/RBQwuWyEeLpCBswnHSc7Dy0TK5mCuuFb+4g
BtEWpJ+plo1jbK8wJXdn44iv+EgxuCb95ieTYAazDcFci97Rt6eQlTPPxX2ozzSQ
pVKCQqiP9hpQSbJt+j8kG1bVRXnF1XbinqLvwKpIwX7p38XWQ7p6N85prk98zvYS
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 389148941523550915269196299168535159633559
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-28 21:35:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-27 21:35:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'facilities.health.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24370483755677385146805830531343956185247615920020931839312669985250340440469955485532495928459796134518502041203090561585893019586271520323255162019604991426997110402896710603948732089415595496169105303497908683994631329187044454557931872845733634758787067156951977726389203222171215128718710887013935596118734365935138840916205452447562317340832380839770567667610796218547401934877530254473450421701712695893730879249928444852920606261379790180872913762844925747391191463395956779293322886076478794240015260924879619545394394346851255153760784756382938015985163487190771583637835691607261984030429159406809610850819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							94c82ed8475bbb5994b8aa541c9eb3fda808d136
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facilities.health.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.facilities.health.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpss.facilities.health.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.facilities.health.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000183863dc97e0000040300483046022100832dbe3cc3439f3539b3a613aa98ac2516a09331deedf98c72dc72676ead74d20221009b283edacc45a7d242207ffeadec396b582c3b72fdfc4f445cafe7fa5121501d00750041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000183863dcb6200000403004630440220494d7990aebe60a82b009a7ac895a9fa2667299b0fcba0cb9f82daf4f7ec0e7302201ca1dce312b3f975fffbed1f5354540182da20e7bd2d193cd8f1e6f7718191a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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