www.dodlive.mil

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fd:37:6f:01:d1:a3:b1:a1:33:e3:03:0b:80:81:91:91:b8 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.dodlive.mil

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fd:37:6f:01:d1:a3:b1:a1:33:e3:03:0b:80:81:91:91:b8
Serial Number (int): 347501980547889395301843964098497469321656
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f5:d9:82:7e:2e:d9:b6:f3:d2:a5:2c:37:6e:a3:78:5c:02:12:87:98
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c6:99:dc:7d:c0:8f:cc:4f:3b:9f:70:4f:f2:58:f9:5e:55:18:8e:2c
Fingerprint (sha256): 18:66:47:54:64:a5:e1:a9:90:a0:70:38:ce:d6:a0:28:a6:fb:e2:d9:98:0b:82:72:9e:74:83:60:1b:a3:0c:8f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.dodlive.mil

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dodlive.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

184jayhawks.dodlive.mil
afrl.dodlive.mil
afsapr.dodlive.mil
afspace.dodlive.mil
airencon.dodlive.mil
airforcelive.dodlive.mil
airman-sandbox.dodlive.mil
airman.dodlive.mil
airmantest.dodlive.mil
alaska.coastguard.dodlive.mil
allhands.coastguard.dodlive.mil
armyengineerhistory.dodlive.mil
armylive.dodlive.mil
armytechnology.armylive.dodlive.mil
balancingthebasin.armylive.dodlive.mil
blogafnradio.dodlive.mil
bootcamp.coastguard.dodlive.mil
cco.dodlive.mil
chds.dodlive.mil
cic.dodlive.mil
cne-cna-c6f.dodlive.mil
coastguard.dodlive.mil
commissaryconnection.dodlive.mil
crrc.dodlive.mil
csafreadinglist.dodlive.mil
ctnsp.dodlive.mil
cwmdgradfellowship.dodlive.mil
dantespulse-staging.dodlive.mil
dantespulse.dodlive.mil
dau.dodlive.mil
dodlive-sandbox.dodlive.mil
dodvsw.dodlive.mil
dsmc-tkp.dodlive.mil
eucom.dodlive.mil
greatlakes.coastguard.dodlive.mil
greenfleet.dodlive.mil
hackthepentagon.dodlive.mil
hawaiipacific.coastguard.dodlive.mil
heartland.coastguard.dodlive.mil
inss.dodlive.mil
jackson.armylive.dodlive.mil
jmc.dodlive.mil
kentuckyguard.dodlive.mil
mariners.coastguard.dodlive.mil
marines.dodlive.mil
marinesmagazine.dodlive.mil
mcicom.dodlive.mil
midatlantic.coastguard.dodlive.mil
minationalguard.dodlive.mil
mscsealift.dodlive.mil
myafn.dodlive.mil
nareadstage.dodlive.mil
nashvillecorps.armylive.dodlive.mil
ncojournal.dodlive.mil
ncolcoe.armylive.dodlive.mil
ngmtc.dodlive.mil
northeast.coastguard.dodlive.mil
northwest.coastguard.dodlive.mil
open.dodlive.mil
pacesetterlive.dodlive.mil
pacificsouthwest.coastguard.dodlive.mil
pantherbrigade.dodlive.mil
pel.dodlive.mil
peosoldier.armylive.dodlive.mil
plainsguardian.dodlive.mil
publicweb.dodlive.mil
purview.dodlive.mil
ra.defense.dodlive.mil
rcnsc.dodlive.mil
reporter.dodlive.mil
scguard.dodlive.mil
science.dodlive.mil
sciencestaging.dodlive.mil
scnewsltr.dodlive.mil
smtc.dodlive.mil
soldiers.dodlive.mil
southeast.coastguard.dodlive.mil
spangdahlem.dodlive.mil
support.dodlive.mil
test1.dodlive.mil
truax.dodlive.mil
usaceportland.armylive.dodlive.mil
usasd.armylive.dodlive.mil
vaguard.dodlive.mil
wallawalla.armylive.dodlive.mil
warriorcare.dodlive.mil
warriorgames.dodlive.mil
wisguard.dodlive.mil
wmdcenter.dodlive.mil
www.dodlive.mil

Other certificates including the domain name dodlive.mil

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.dodlive.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpTx5A0NTZRFzr7eJUhl
nypflXJchZXnosdzbgdzlSAUFMc309g6sZc0mD2DTceg/kff8ohHNAm3w5BLpAIx
asoQWfcUV4mE3QGngVrLAsTijJ+g2cqQfvCoQ2puNDwXprml8NSgEeq2+Gufzmh5
1HLITpDfsGjEB+nJe/1FzrtdiBT6Mfp1Url++UZjrNto3kobxG0IhDDqGnlgz2yA
YRJf8KS375YTKbytSUnjnXCKHzFmPu1e+5B6+RtdjJ6bXC1wZFbOCFPx+zMFDKWZ
dpfGDMIHg+n9lhMgCjRwwggv92ggzNvjAbCOeY3oy1vl0Y7FfX6qh6dETRQUD3fz
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347501980547889395301843964098497469321656
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-10 21:54:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-09 21:54:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.dodlive.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26078538283734737481187756386957605517004492797282322172309134355128323896913994135207346360624477096035173733181663782011665781719842056949879340494280314432264903802034254461690455768439398049026531045502231482384011210048333745254020730239455639935915838307605755619969343782325928582143612558592489870621936036112486476345721729543389691099166515105059365532482460229779203838036556118030708971262693922447115683132388048756559760730987033428075198343514357443605546053047841768335167607181443162071156805808625304058843873147561233408875854925563928723568220527781656561596199326335676191245315710584478657671969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f5d9827e2ed9b6f3d2a52c376ea3785c02128798
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2311 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '184jayhawks.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afrl.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afsapr.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afspace.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airencon.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airforcelive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airman-sandbox.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airman.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airmantest.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaska.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allhands.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armyengineerhistory.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armytechnology.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balancingthebasin.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogafnradio.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bootcamp.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cco.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chds.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cic.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cne-cna-c6f.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commissaryconnection.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crrc.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csafreadinglist.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctnsp.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwmdgradfellowship.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dantespulse-staging.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dantespulse.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dau.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodlive-sandbox.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodvsw.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsmc-tkp.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eucom.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatlakes.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenfleet.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hackthepentagon.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiipacific.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heartland.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inss.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackson.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmc.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kentuckyguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariners.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marines.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marinesmagazine.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcicom.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midatlantic.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minationalguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mscsealift.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myafn.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nareadstage.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nashvillecorps.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncojournal.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncolcoe.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngmtc.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northeast.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwest.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'open.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacesetterlive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacificsouthwest.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pantherbrigade.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pel.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peosoldier.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plainsguardian.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicweb.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purview.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ra.defense.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcnsc.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reporter.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'science.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciencestaging.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scnewsltr.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtc.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soldiers.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southeast.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spangdahlem.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truax.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usaceportland.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usasd.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallawalla.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warriorcare.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warriorgames.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wisguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmdcenter.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dodlive.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f6336000000165c5b13a810000040300473045022100f836c3e61a45a06ac41ed0f04a723e4e94099d39bec0cadff2869bd2680f8c64022040ec1e523614a3aa0fee02dbbb61359f87da2522c5b23b65df539fff6a317fab007500a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a2500000165c5b1388f000004030046304402201a8f73d6ebfccbccbff10265ce3d91fd4b0ac3a672f73c764cddceff39d5e33d02203e4de7d1b3e69bf419bdefec4eb99b122bf6f7d9b75bc0e1d876cc0545481126
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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