www.marines.mil

Issued by R3

About this certificate

This digital certificate with serial number 03:dc:6a:9a:05:9d:47:f6:ce:98:cc:dc:16:92:52:4f:fb:27 was issued on by Let's Encrypt.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.marines.mil

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dc:6a:9a:05:9d:47:f6:ce:98:cc:dc:16:92:52:4f:fb:27
Serial Number (int): 336340676413029758687869665476837584665383
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c3:d1:2b:05:84:26:5f:23:f4:a4:0a:28:ed:f4:f9:f1:34:06:62:e8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4c:de:d6:8f:6d:5f:09:c7:da:5a:94:18:84:f8:fe:04:32:29:11:11
Fingerprint (sha256): 21:3e:6c:89:2c:27:84:56:7e:fc:d7:62:bb:d8:6a:93:0c:74:b6:fc:84:b2:97:2d:cf:a2:4a:c0:8f:81:77:34

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.marines.mil

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.marines.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.candp.marines.mil
www.japan.marines.mil
www.marforcyber.marines.mil
www.marines.mil
www.miramar.marines.mil
www.newriver.marines.mil
www.okinawa.marines.mil
www.pendleton.marines.mil
www.peols.marines.mil
www.quantico.marines.mil
www.ready.marines.mil
www.safety.marines.mil
www.t3s.marines.mil
www.tecom.marines.mil
www.trngcmd.marines.mil
www.usmc.mil
www.woundedwarrior.marines.mil

Other certificates including the domain name marines.mil

(limited to 100 certificates)
www.marines.mil
www.10thmarines.marines.mil
community.marines.mil
www.10thmarines.marines.mil
www.marines.mil
www.marines.mil
www.marines.mil
www.marines.mil
www.marines.mil
www.marines.mil
www.10thmarines.marines.mil
www.10thmarines.marines.mil
www.marines.mil
www.10thmarines.marines.mil
www.10thmarines.marines.mil
www.10thmarines.marines.mil
www.10thmarines.marines.mil
www.marines.mil
www.marines.mil
www.10thmarines.marines.mil
community.marines.mil
www.ctep.marines.mil
www.marines.mil
www.marines.mil
www.marines.mil
forms.marines.mil
www.marines.mil
www.marines.mil
www.marines.mil
www.marines.mil
www.10thmarines.marines.mil
www.10thmarines.marines.mil
www.10thmarines.marines.mil
www.10thmarines.marines.mil
www.marines.mil
www.marines.mil
www.marines.mil
www.marines.mil
www.10thmarines.marines.mil
www.10thmarines.marines.mil
www.marines.mil
www.10thmarines.marines.mil
www.marines.mil
www.marines.mil
www.marines.mil
www.marines.mil
webtrends.marines.mil
www.10thmarines.marines.mil
www.marines.mil
www.10thmarines.marines.mil
www.marines.mil
www.10thmarines.marines.mil
ssp.marines.mil
www.marines.mil
www.marines.mil
www.marines.mil
www.10thmarines.marines.mil
www.10thmarines.marines.mil
www.marines.mil
www.10thmarines.marines.mil
www.marines.mil
ca.marines.mil
www.marines.mil
www.marines.mil
www.marines.mil
www.marines.mil
www.marines.mil
www.marines.mil
www.10thmarines.marines.mil
www.marines.mil
www.marines.mil
www.marines.mil
www.marines.mil
www.marines.mil
www.marines.mil
www.10thmarines.marines.mil
www.marines.mil
www.marines.mil
www.marines.mil
www.marines.mil
www.10thmarines.marines.mil
www.10thmarines.marines.mil
www.10thmarines.marines.mil
www.marines.mil
www.10thmarines.marines.mil
www.10thmarines.marines.mil
www.marines.mil
www.marines.mil
www.marines.mil
www.10thmarines.marines.mil
www.10thmarines.marines.mil
www.10thmarines.marines.mil
www.marines.mil
www.marines.mil
www.marines.mil
www.marines.mil
www.10thmarines.marines.mil
author.marines.mil
www.10thmarines.marines.mil
www.10thmarines.marines.mil

Certificate

The complete raw certificate details for www.marines.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgJU0HYTCDCbOuJ9W2vP
askF4+AZCX7ZWlqZ0eBDoZ4pd22UJ9scxfrpLeR1MQRmK6cGHfIzexWNjupYOhbS
0BsTf7LXbPU6BSaoeKK/c05SnXi9fYXa2xabDXcLpk/jKCSPAcsirjN3rSiIESg6
AmM1G22LoStht1DkGAjIS7L1p7Nm/SZQedDVOKdF6C9YeDYzLu7E/B1cDM7H7wcS
j6EGqDv66d/59pV1lHTsixZ92vvO3+UI+cVgHMK6WlRYGouhRYYlbONpAEG/YTYw
S8RUsB7PjRHr/H3TUq6TodWiah53Ht6VocmWvsmX/CajFFycK0zfXK4PBJgC7EWn
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336340676413029758687869665476837584665383
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-05 14:42:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-05 14:42:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.marines.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19441848574542048103574399128200820622853019444034760254369410171712095499815134501792777980129310359979261836155075742760461803309099290310642602250928235491679700811800576868376966527169474612169071892709675250484359336470867678398204694149711701739709034134712187292755356687824496107325191892875944665482721894176919823107266278640055117713075084844492892486703540784280058856520453760241947211070654568276460996448058115121727792871388682356472235987951521626677035111779765636771145875419802203949428478087120578493509725441328747217585572861854461512752130944904138056967604219679793037804039361718523141662679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c3d12b0584265f23f4a40a28edf4f9f1340662e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (410 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.candp.marines.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.japan.marines.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marforcyber.marines.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marines.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miramar.marines.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newriver.marines.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.okinawa.marines.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pendleton.marines.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peols.marines.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quantico.marines.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ready.marines.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safety.marines.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.t3s.marines.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tecom.marines.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trngcmd.marines.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usmc.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woundedwarrior.marines.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017e2ae838f8000004030047304502200a3c026077d758ef4717307921fdd070c840d5fc9c34fb0cd1ebb30ac56f4e5a022100959444e0bb3c18664d2f5fa9b8917d6ff3295e1094dc14ee03c9b15f33f764a20076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017e2ae838ec0000040300473045022057aaf917eafc6b6caf1b9926b07c972f404234ed1e6a983f308dfb858a5a2dfa022100b894b20332fcf57096648b7a1f540d2f10e896d9a9fcc6c8da78e2cde7170154
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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