www.defense.gov
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a7:a3:dc:97:1b:82:29:15:53:25:f4:c7:88:22:c9:99:75 was issued on by Let's Encrypt.
With 61 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.defense.gov
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a7:a3:dc:97:1b:82:29:15:53:25:f4:c7:88:22:c9:99:75Serial Number (int): 318381822604522575544843116327154093758837
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e0:d5:05:a9:9a:df:07:fb:2c:85:dd:56:ac:3d:43:88:ad:e5:fd:e7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 85:48:70:29:9e:c7:2e:be:56:24:9a:d1:8c:4a:83:7f:9b:9b:59:d1
Fingerprint (sha256): 18:4b:20:2f:1b:61:a9:6c:c7:b4:7c:fb:aa:25:0d:38:12:c4:7a:09:86:94:a8:8e:23:51:49:ae:cb:c9:f3:6d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.defense.gov
61
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.defense.gov
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
2017dodtransition.defense.gov
actuary.defense.gov
afd.defense.gov
afpimstest-www.nsa.gov
archive.defense.gov
armedforcessports.defense.gov
atsdio.defense.gov
basicresearch.defense.gov
business.defense.gov
cmo.defense.gov
comptroller.defense.gov
ctip.defense.gov
dacowits.defense.gov
data.defense.gov
dbb.defense.gov
dcips.defense.gov
dcmo.defense.gov
diversity.defense.gov
dod.defense.gov
dodcertpmo.defense.gov
dodcio.defense.gov
dodsioo.defense.gov
dpcld.defense.gov
dpclo.defense.gov
energy.defense.gov
execsec.defense.gov
financialreadiness.defense.gov
history.defense.gov
innovation.defense.gov
irt.defense.gov
jamrs.defense.gov
jnlwp.defense.gov
jsc.defense.gov
kb.defense.gov
la.defense.gov
m.nsa.gov
militarypay.defense.gov
minerva.defense.gov
nmio.ise.gov
nsa.gov
oig.nsa.gov
opa.defense.gov
open.defense.gov
ousdi.defense.gov
policy.defense.gov
prhome.defense.gov
ra.defense.gov
rfpb.defense.gov
rwtf.defense.gov
servicedesk.defense.gov
valor.defense.gov
vwac.defense.gov
www.business.defense.gov
www.businessdefense.gov
www.defense.gov
www.dod.defense.gov
www.dod.gov
www.inherentresolve.mil
www.nsa.gov
www.pentagon.gov
www.whs.mil
actuary.defense.gov
afd.defense.gov
afpimstest-www.nsa.gov
archive.defense.gov
armedforcessports.defense.gov
atsdio.defense.gov
basicresearch.defense.gov
business.defense.gov
cmo.defense.gov
comptroller.defense.gov
ctip.defense.gov
dacowits.defense.gov
data.defense.gov
dbb.defense.gov
dcips.defense.gov
dcmo.defense.gov
diversity.defense.gov
dod.defense.gov
dodcertpmo.defense.gov
dodcio.defense.gov
dodsioo.defense.gov
dpcld.defense.gov
dpclo.defense.gov
energy.defense.gov
execsec.defense.gov
financialreadiness.defense.gov
history.defense.gov
innovation.defense.gov
irt.defense.gov
jamrs.defense.gov
jnlwp.defense.gov
jsc.defense.gov
kb.defense.gov
la.defense.gov
m.nsa.gov
militarypay.defense.gov
minerva.defense.gov
nmio.ise.gov
nsa.gov
oig.nsa.gov
opa.defense.gov
open.defense.gov
ousdi.defense.gov
policy.defense.gov
prhome.defense.gov
ra.defense.gov
rfpb.defense.gov
rwtf.defense.gov
servicedesk.defense.gov
valor.defense.gov
vwac.defense.gov
www.business.defense.gov
www.businessdefense.gov
www.defense.gov
www.dod.defense.gov
www.dod.gov
www.inherentresolve.mil
www.nsa.gov
www.pentagon.gov
www.whs.mil
Other certificates including the domain name defense.gov
(limited to 100 certificates)
search.usa.gov
www.defense.gov
www.defense.gov
media-dev.defense.gov
media-dev.defense.gov
www.defense.gov
media-dev.defense.gov
search.usa.gov
media-dev.defense.gov
www.defense.gov
www.defense.gov
media-dev.defense.gov
helpdesk.defense.gov
search.usa.gov
media-dev.defense.gov
*.defense.gov
www.defense.gov
search.usa.gov
www.defense.gov
search.usa.gov
search.usa.gov
search.usa.gov
www.defense.gov
search.usa.gov
okdbv.search.usa.gov
search.usa.gov
media-dev.defense.gov
www.defense.gov
www.defense.gov
search.usa.gov
search.usa.gov
media-dev.defense.gov
search.usa.gov
search.usa.gov
search.usa.gov
www.defense.gov
stats.defense.gov
www.defense.gov
www.defense.gov
static.defense.gov
www.defense.gov
www.defense.gov
search.usa.gov
www.defense.gov
search.usa.gov
search.usa.gov
www.defense.gov
stats.defense.gov
www.defense.gov
stats.defense.gov
www.defense.gov
kb.defense.gov
media-dev.defense.gov
dd306dce-f242-4dfc-b2c3-3eb39d5d44b9.defense.gov
www.defense.gov
search.usa.gov
search.usa.gov
search.usa.gov
kb.defense.gov
www.defense.gov
search.usa.gov
www.defense.gov
www.defense.gov
www.defense.gov
www.defense.gov
www.defense.gov
gfm.ousdi.defense.gov
search.usa.gov
search.usa.gov
www.defense.gov
stats.defense.gov
media-dev.defense.gov
search.usa.gov
search.usa.gov
search.usa.gov
dd306dce-f242-4dfc-b2c3-3eb39d5d44b9.defense.gov
search.usa.gov
search.usa.gov
stats.defense.gov
www.defense.gov
www.defense.gov
media-dev.defense.gov
www.defense.gov
www.defense.gov
search.usa.gov
search.usa.gov
search.usa.gov
search.usa.gov
search.usa.gov
search.usa.gov
media-dev.defense.gov
search.usa.gov
www.defense.gov
search.usa.gov
www.defense.gov
www.defense.gov
www.defense.gov
www.defense.gov
search.usa.gov
search.usa.gov
www.defense.gov
www.defense.gov
media-dev.defense.gov
media-dev.defense.gov
www.defense.gov
media-dev.defense.gov
search.usa.gov
media-dev.defense.gov
www.defense.gov
www.defense.gov
media-dev.defense.gov
helpdesk.defense.gov
search.usa.gov
media-dev.defense.gov
*.defense.gov
www.defense.gov
search.usa.gov
www.defense.gov
search.usa.gov
search.usa.gov
search.usa.gov
www.defense.gov
search.usa.gov
okdbv.search.usa.gov
search.usa.gov
media-dev.defense.gov
www.defense.gov
www.defense.gov
search.usa.gov
search.usa.gov
media-dev.defense.gov
search.usa.gov
search.usa.gov
search.usa.gov
www.defense.gov
stats.defense.gov
www.defense.gov
www.defense.gov
static.defense.gov
www.defense.gov
www.defense.gov
search.usa.gov
www.defense.gov
search.usa.gov
search.usa.gov
www.defense.gov
stats.defense.gov
www.defense.gov
stats.defense.gov
www.defense.gov
kb.defense.gov
media-dev.defense.gov
dd306dce-f242-4dfc-b2c3-3eb39d5d44b9.defense.gov
www.defense.gov
search.usa.gov
search.usa.gov
search.usa.gov
kb.defense.gov
www.defense.gov
search.usa.gov
www.defense.gov
www.defense.gov
www.defense.gov
www.defense.gov
www.defense.gov
gfm.ousdi.defense.gov
search.usa.gov
search.usa.gov
www.defense.gov
stats.defense.gov
media-dev.defense.gov
search.usa.gov
search.usa.gov
search.usa.gov
dd306dce-f242-4dfc-b2c3-3eb39d5d44b9.defense.gov
search.usa.gov
search.usa.gov
stats.defense.gov
www.defense.gov
www.defense.gov
media-dev.defense.gov
www.defense.gov
www.defense.gov
search.usa.gov
search.usa.gov
search.usa.gov
search.usa.gov
search.usa.gov
search.usa.gov
media-dev.defense.gov
search.usa.gov
www.defense.gov
search.usa.gov
www.defense.gov
www.defense.gov
www.defense.gov
www.defense.gov
search.usa.gov
search.usa.gov
Certificate
The complete raw certificate details for www.defense.gov in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJDTCCB/WgAwIBAgISA6ej3JcbgikVUyX0x4giyZl1MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMjcyMTIxNTdaFw0x OTA2MjUyMTIxNTdaMBoxGDAWBgNVBAMTD3d3dy5kZWZlbnNlLmdvdjCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAKOtAF9Gnnokx4j//BD/4WwEOvM1oe6k ToNEXzyp+XsFcHzDdgJ3J8McOTmeC/uzUVDFwjlWLMIXdLhhe91VkVQgkx7IEvI7 fYL73tL1HQHHBey4RdjUYD40m51i4gSR758pjwUIQmyIpIS71mVinHwzqIyPSFEM cmYfo1RMi+T+h/bii00PWueuc62YglqXinNiAmHKB17u4bqd+CtcnIC43Mx3UouS r+S/d+cqbqP9hj9RV+ln7o06Qy54C1PCqLgGs4IUUAjCgRgBj8EHv71zeHIC3dUt 6Cz3QLJwlVqpBk0TlS4k4BWEnPXcUw4YBhthX+KLz36KP1WjfP2NCGUCAwEAAaOC BhswggYXMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU4NUFqZrfB/sshd1WrD1DiK3l /ecwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu b3JnLzCCBMIGA1UdEQSCBLkwggS1gh0yMDE3ZG9kdHJhbnNpdGlvbi5kZWZlbnNl LmdvdoITYWN0dWFyeS5kZWZlbnNlLmdvdoIPYWZkLmRlZmVuc2UuZ292ghZhZnBp bXN0ZXN0LXd3dy5uc2EuZ292ghNhcmNoaXZlLmRlZmVuc2UuZ292gh1hcm1lZGZv cmNlc3Nwb3J0cy5kZWZlbnNlLmdvdoISYXRzZGlvLmRlZmVuc2UuZ292ghliYXNp Y3Jlc2VhcmNoLmRlZmVuc2UuZ292ghRidXNpbmVzcy5kZWZlbnNlLmdvdoIPY21v LmRlZmVuc2UuZ292ghdjb21wdHJvbGxlci5kZWZlbnNlLmdvdoIQY3RpcC5kZWZl bnNlLmdvdoIUZGFjb3dpdHMuZGVmZW5zZS5nb3aCEGRhdGEuZGVmZW5zZS5nb3aC D2RiYi5kZWZlbnNlLmdvdoIRZGNpcHMuZGVmZW5zZS5nb3aCEGRjbW8uZGVmZW5z ZS5nb3aCFWRpdmVyc2l0eS5kZWZlbnNlLmdvdoIPZG9kLmRlZmVuc2UuZ292ghZk b2RjZXJ0cG1vLmRlZmVuc2UuZ292ghJkb2RjaW8uZGVmZW5zZS5nb3aCE2RvZHNp b28uZGVmZW5zZS5nb3aCEWRwY2xkLmRlZmVuc2UuZ292ghFkcGNsby5kZWZlbnNl LmdvdoISZW5lcmd5LmRlZmVuc2UuZ292ghNleGVjc2VjLmRlZmVuc2UuZ292gh5m aW5hbmNpYWxyZWFkaW5lc3MuZGVmZW5zZS5nb3aCE2hpc3RvcnkuZGVmZW5zZS5n b3aCFmlubm92YXRpb24uZGVmZW5zZS5nb3aCD2lydC5kZWZlbnNlLmdvdoIRamFt cnMuZGVmZW5zZS5nb3aCEWpubHdwLmRlZmVuc2UuZ292gg9qc2MuZGVmZW5zZS5n b3aCDmtiLmRlZmVuc2UuZ292gg5sYS5kZWZlbnNlLmdvdoIJbS5uc2EuZ292ghdt aWxpdGFyeXBheS5kZWZlbnNlLmdvdoITbWluZXJ2YS5kZWZlbnNlLmdvdoIMbm1p by5pc2UuZ292ggduc2EuZ292ggtvaWcubnNhLmdvdoIPb3BhLmRlZmVuc2UuZ292 ghBvcGVuLmRlZmVuc2UuZ292ghFvdXNkaS5kZWZlbnNlLmdvdoIScG9saWN5LmRl ZmVuc2UuZ292ghJwcmhvbWUuZGVmZW5zZS5nb3aCDnJhLmRlZmVuc2UuZ292ghBy ZnBiLmRlZmVuc2UuZ292ghByd3RmLmRlZmVuc2UuZ292ghdzZXJ2aWNlZGVzay5k ZWZlbnNlLmdvdoIRdmFsb3IuZGVmZW5zZS5nb3aCEHZ3YWMuZGVmZW5zZS5nb3aC GHd3dy5idXNpbmVzcy5kZWZlbnNlLmdvdoIXd3d3LmJ1c2luZXNzZGVmZW5zZS5n b3aCD3d3dy5kZWZlbnNlLmdvdoITd3d3LmRvZC5kZWZlbnNlLmdvdoILd3d3LmRv ZC5nb3aCF3d3dy5pbmhlcmVudHJlc29sdmUubWlsggt3d3cubnNhLmdvdoIQd3d3 LnBlbnRhZ29uLmdvdoILd3d3Lndocy5taWwwTAYDVR0gBEUwQzAIBgZngQwBAgEw NwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j cnlwdC5vcmcwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEB AIuTlQjSkV9o2TYLwIcOfOkommT7BicX9qM0aBdQ2nBtc8SxomO5qUVz6ouFHK4w uufsRQRiRX6oXxaqULMRXQD7jyil2/k5dTvOp1TAvFJtbX9hHcyhlfymBxRxhzkS JZ9etToIZIA59ezDthfyDcHqa2ftFZwBWvY7rctEqXFVfLqN28wt+ngJ2D9MpyWm eB8WRdpmqCQwjcmQ8uVlYKfbO+jlZiSiS/ARKHnaEWzXQF7kP7qQEayKaUoqaxT7 5xV06p+KIriJmf5zQzDHqokDXSG+z2EGdbGyOZBr2DM/4jBW/0zvS1q/xtDfsc0a I5xfGvfE2FG9eDXX6rdqklY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo60AX0aeeiTHiP/8EP/h bAQ68zWh7qROg0RfPKn5ewVwfMN2Ancnwxw5OZ4L+7NRUMXCOVYswhd0uGF73VWR VCCTHsgS8jt9gvve0vUdAccF7LhF2NRgPjSbnWLiBJHvnymPBQhCbIikhLvWZWKc fDOojI9IUQxyZh+jVEyL5P6H9uKLTQ9a565zrZiCWpeKc2ICYcoHXu7hup34K1yc gLjczHdSi5Kv5L935ypuo/2GP1FX6WfujTpDLngLU8KouAazghRQCMKBGAGPwQe/ vXN4cgLd1S3oLPdAsnCVWqkGTROVLiTgFYSc9dxTDhgGG2Ff4ovPfoo/VaN8/Y0I ZQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 318381822604522575544843116327154093758837 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-27 21:21:57 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-25 21:21:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.defense.gov' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20662153905888031016224996218891807338152943569817912778065483276235020585014581246537542268538597536241380942193153487907284159983114267936429868217147367960706872340518521098439057464425801587793937380548729914886152758670489950987272327322922837404267609618645639430904704620687390151853356304891543848626855536540833568112200630819593623409571626868682633532868700570527864648997600380255520898805932606382773672490411698507162626087786064995158070395073863324100670862253508591127433325388234837268710801373817265462692489262989668326438656206768205922760780799111492980851287874001345826347506676951592431585381 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e0d505a99adf07fb2c85dd56ac3d4388ade5fde7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1209 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2017dodtransition.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actuary.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afd.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afpimstest-www.nsa.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armedforcessports.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atsdio.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basicresearch.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmo.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comptroller.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctip.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dacowits.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbb.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcips.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcmo.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diversity.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dod.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodcertpmo.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodcio.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodsioo.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpcld.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpclo.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energy.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'execsec.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialreadiness.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'history.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovation.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irt.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamrs.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jnlwp.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jsc.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kb.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.nsa.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'militarypay.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minerva.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmio.ise.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsa.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oig.nsa.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opa.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'open.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ousdi.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policy.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prhome.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ra.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfpb.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rwtf.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valor.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vwac.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.business.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businessdefense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dod.defense.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dod.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inherentresolve.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsa.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pentagon.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whs.mil' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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