dmdc.mil

- DMDC -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 65:d7:59:b0:7b:50:8d:d4:e6:8d:0d:a8:67:d9:7b:86 was issued on by Entrust, Inc..

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

DMDC

Organization: DMDC
State / Province: California
Locality: Seaside
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 65:d7:59:b0:7b:50:8d:d4:e6:8d:0d:a8:67:d9:7b:86
Serial Number (int): 135370190515636858667201109219109075846
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ec:41:52:46:da:0e:8f:c6:af:b6:07:65:6c:df:24:4d:a5:21:59:12
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 1d:02:36:45:04:2e:a0:95:03:08:25:0d:56:e1:5e:7f:d5:4f:69:87
Fingerprint (sha256): 27:7a:ce:c2:99:3a:32:e6:f7:f0:0a:2b:e0:5f:4e:8e:75:23:41:3a:26:67:7f:a9:b5:80:f0:61:34:c6:57:f7

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate dmdc.mil

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dmdc.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dmdc.mil
*.dmdc.mil
dmdc.osd.mil
*.militaryfuneralhonors.osd.mil
*.dodtap.mil
*.dodsurveys.mil
*.cap.mil
*.dmdc.osd.mil
*.int.dmdc.osd.mil
militaryfuneralhonors.osd.mil
dodtap.mil
dodsurveys.mil
cap.mil
*.cpms.osd.mil
*.dcpas.osd.mil
cpms.osd.mil
dcpas.osd.mil

Other certificates including the domain name dmdc.mil

(limited to 100 certificates)
dbids-global-enroll.dmdc.mil
dmdc.osd.mil
vpnr.dmdc.mil
icat.dmdc.mil
ravpn4.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
ravpn3.dmdc.mil
vpnm.dmdc.mil
dmdc.mil
ravpn1.dmdc.mil
spottest-ws.dmdc.mil
training.topss.dmdc.mil
dmdc.mil
ravpn1.dmdc.mil
coburn.dmdc.mil
coburn.dmdc.mil
dbids-global-enroll.dmdc.mil
coburn.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
opmverify.dmdc.osd.mil
dmdc.mil
dmdc.mil
ravpn3.dmdc.mil
dmdc.mil
dbids-japan-enroll.dmdc.mil
check.dmdc.osd.mil
utility.spot.dmdc.mil
topss.training.dmdc.mil
dbids.dmdc.mil
dmdc.mil
fmts-pss.dmdc.mil
dmdc.mil
vpnw.dmdc.mil
dmdc.mil
dbids-global-enroll.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.osd.mil
icat.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
spot.dmdc.mil
training.topss.dmdc.mil
dmdc.mil
dbids-global-enroll.dmdc.mil
ravpn3.dmdc.mil
spot-ws.dmdc.mil
ravpn4.dmdc.mil
spot-training.dmdc.mil
dbids-global-enroll.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
topss.dmdc.mil
topss.dmdc.mil
dmdc.mil
closedbeta.topss.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
vpnw.dmdc.mil
dmdc.mil
dmdc.mil
swft.dmdc.mil
dbids.dmdc.mil
topsstest.dmdc.mil
dbids-global.dmdc.mil
vpnl.dmdc.mil
swft.dmdc.mil
swft.dmdc.osd.mil
oracle-f5-external-prod-poo1.cpms.osd.mil
dmdc.mil
topss.dmdc.mil
dmdc.mil
dmdc.mil
ravpn4.dmdc.mil
ravpn1.dmdc.mil
dmdc.mil
closedbeta.spot.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.osd.mil
dmdc.mil
spot.dmdc.mil
dmdc.mil
dmdc.mil

Certificate

The complete raw certificate details for dmdc.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgIQZddZsHtQjdTmjQ2oZ9l7hjANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
MjAxMTIxODUwMzhaFw0yMzAxMTIxODUwMzhaMFYxCzAJBgNVBAYTAlVTMRMwEQYD
VQQIEwpDYWxpZm9ybmlhMRAwDgYDVQQHEwdTZWFzaWRlMQ0wCwYDVQQKEwRETURD
MREwDwYDVQQDEwhkbWRjLm1pbDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALaVHq5HI6xJzYqx/+sukaclesOrwczoJMQ5npp6IZ9DW3AO9seiQCOHleR8
mMKH0mtmEouayXdrx4ic8dT+H8MRA0hwfpwGQGQrtq+WGWWB/GeE7H0jkPmCgiUP
3tQeK5P/3J47HWF10xdh5RERRmDNykrHenveCPdDXt0E6qx46lYgtI659TxqwAv6
eLaZj7X+sYWcRCplYA5t+CdUuEHzPw0jlV0jDgWVt63pJeOTbVA5eqsVk5QTLrTO
TTekd5/+lJh8k3YDweEYEubLI5PN1G4j1dZKK/WNGmkwyOPC64HDOKKhTrz4m+eH
MgUuY3CtwoWbXNGJxrGj6ynaLc8CAwEAAaOCAqowggKmMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFOxBUkbaDo/Gr7YHZWzfJE2lIVkSMB8GA1UdIwQYMBaAFIKicHTd
vFM/z3vU981/p2DGCky/MGgGCCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0
cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50
cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjAzBgNVHR8ELDAqMCigJqAkhiJodHRw
Oi8vY3JsLmVudHJ1c3QubmV0L2xldmVsMWsuY3JsMIIBIwYDVR0RBIIBGjCCARaC
CGRtZGMubWlsggoqLmRtZGMubWlsggxkbWRjLm9zZC5taWyCHyoubWlsaXRhcnlm
dW5lcmFsaG9ub3JzLm9zZC5taWyCDCouZG9kdGFwLm1pbIIQKi5kb2RzdXJ2ZXlz
Lm1pbIIJKi5jYXAubWlsgg4qLmRtZGMub3NkLm1pbIISKi5pbnQuZG1kYy5vc2Qu
bWlsgh1taWxpdGFyeWZ1bmVyYWxob25vcnMub3NkLm1pbIIKZG9kdGFwLm1pbIIO
ZG9kc3VydmV5cy5taWyCB2NhcC5taWyCDiouY3Btcy5vc2QubWlsgg8qLmRjcGFz
Lm9zZC5taWyCDGNwbXMub3NkLm1pbIINZGNwYXMub3NkLm1pbDAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEwGA1UdIARFMEMw
NwYKYIZIAYb6bAoBBTApMCcGCCsGAQUFBwIBFhtodHRwczovL3d3dy5lbnRydXN0
Lm5ldC9ycGEwCAYGZ4EMAQICMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3
DQEBCwUAA4IBAQB74SBc6UbgfOGwcaa//RU13jtS1DP1r0cVhpXfP6ag76on6PLd
0HaT/B3wt5WVowDtwDKZ4gLVDIW/UNL40N8WhfGsRKvzvxJ7CHc6stAv+HGiCCbR
Q3ILR/Y2dH45NUWuNZCpGo0gC0gfVaDd6RFuDewWv/G5zrKJnp+/jR0moM7nuq+n
licDHDfQ2rAjsr7WxDGx+gi7B25atqu4ZPEDfD465oR22QT5e/YqaWFA+GHESzYd
gXTJNnrBfO6xBys46f+pnSy8/aqw05G0BQpaj1myP+uVSLYP29IiPj3O1t7FHakb
xskcuMPAH050RASMRgv4LiDf0z4V2QVlNWfS
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpUerkcjrEnNirH/6y6R
pyV6w6vBzOgkxDmemnohn0NbcA72x6JAI4eV5HyYwofSa2YSi5rJd2vHiJzx1P4f
wxEDSHB+nAZAZCu2r5YZZYH8Z4TsfSOQ+YKCJQ/e1B4rk//cnjsdYXXTF2HlERFG
YM3KSsd6e94I90Ne3QTqrHjqViC0jrn1PGrAC/p4tpmPtf6xhZxEKmVgDm34J1S4
QfM/DSOVXSMOBZW3rekl45NtUDl6qxWTlBMutM5NN6R3n/6UmHyTdgPB4RgS5ssj
k83UbiPV1kor9Y0aaTDI48LrgcM4oqFOvPib54cyBS5jcK3ChZtc0YnGsaPrKdot
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 135370190515636858667201109219109075846
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-12 18:50:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-12 18:50:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seaside'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DMDC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dmdc.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23048905240904638649464948466463697699272330573149269838511852554440007653192930520527025169535742503154635803748722432727109147753440612326180528520190954691187097369876181304324313292283835983537318012994632028570607183005540300431052897457766028807939321975831439431712717651374951939430845337635548919352596623249628858345171199342165230992574929101312029706640545105398847398575846222290021158924385791141948190049140784270781355789568603157551758801239363884014548447287288885631158939930525836220234060983624210178411545864860797846807261846035961245747486869774431570892855826854960231710567400578767218421199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec415246da0e8fc6afb607656cdf244da5215912
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (282 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmdc.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmdc.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmdc.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.militaryfuneralhonors.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dodtap.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dodsurveys.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cap.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmdc.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.int.dmdc.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'militaryfuneralhonors.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodtap.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodsurveys.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cap.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cpms.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dcpas.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpms.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcpas.osd.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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