www.dodlive.mil

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4b:20:82:3e:c3:03:31:93:3b:a3:08:fd:fa:b8:2a:27:35 was issued on by Let's Encrypt.

With 77 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.dodlive.mil

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4b:20:82:3e:c3:03:31:93:3b:a3:08:fd:fa:b8:2a:27:35
Serial Number (int): 286901246881767727039517140924006736209717
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 70:52:be:97:89:0c:ff:3f:72:2a:06:22:ff:6f:f4:35:e7:cb:10:3f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 51:73:5f:c4:3c:c9:12:3d:9b:11:01:5a:10:7e:f7:b9:77:85:bf:7b
Fingerprint (sha256): 29:bd:00:d9:34:8f:16:26:65:65:eb:6f:71:7f:7d:52:58:79:b8:5b:63:8f:eb:6d:55:fe:a8:40:cf:8c:96:3c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.dodlive.mil

77

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dodlive.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

184jayhawks.dodlive.mil
afrl.dodlive.mil
afspace.dodlive.mil
airman-sandbox.dodlive.mil
airman.dodlive.mil
alaska.coastguard.dodlive.mil
allhands.coastguard.dodlive.mil
armyengineerhistory.dodlive.mil
armylive.dodlive.mil
armytechnology.armylive.dodlive.mil
balancingthebasin.armylive.dodlive.mil
blogafnradio.dodlive.mil
bootcamp.coastguard.dodlive.mil
cco.dodlive.mil
chaplaincorps.navylive.dodlive.mil
coastguard.dodlive.mil
commissaryconnection.dodlive.mil
csafreadinglist.dodlive.mil
dantespulse.dodlive.mil
dau.dodlive.mil
dodlive-sandbox.dodlive.mil
dodvsw.dodlive.mil
donosbp.navylive.dodlive.mil
ew-navalstem.navylive.dodlive.mil
frcsw.navylive.dodlive.mil
futureforce.navylive.dodlive.mil
greatlakes.coastguard.dodlive.mil
greenfleet.dodlive.mil
hackthepentagon.dodlive.mil
jackson.armylive.dodlive.mil
jag.navylive.dodlive.mil
kentuckyguard.dodlive.mil
mariners.coastguard.dodlive.mil
marines.dodlive.mil
marinesmagazine.dodlive.mil
midatlantic.coastguard.dodlive.mil
minationalguard.dodlive.mil
mscsealift.dodlive.mil
myafn.dodlive.mil
nashvillecorps.armylive.dodlive.mil
navalaviationnews.navylive.dodlive.mil
navalstem.navylive.dodlive.mil
navylive.dodlive.mil
navymedicine.navylive.dodlive.mil
navysustainability.dodlive.mil
ncojournal.dodlive.mil
ncolcoe.armylive.dodlive.mil
ngmtc.dodlive.mil
nmcb11.navylive.dodlive.mil
northwest.coastguard.dodlive.mil
open.dodlive.mil
pacesetterlive.dodlive.mil
pantherbrigade.dodlive.mil
peosoldier.armylive.dodlive.mil
plainsguardian.dodlive.mil
publicweb.dodlive.mil
purview.dodlive.mil
ra.defense.dodlive.mil
rcnsc.dodlive.mil
reporter.dodlive.mil
safety.navylive.dodlive.mil
scguard.dodlive.mil
science.dodlive.mil
sciencestaging.dodlive.mil
scnewsltr.dodlive.mil
seabeemagazine.navylive.dodlive.mil
smtc.dodlive.mil
support.dodlive.mil
truax.dodlive.mil
usaceportland.armylive.dodlive.mil
usasd.armylive.dodlive.mil
usnhistory.navylive.dodlive.mil
vaguard.dodlive.mil
wallawalla.armylive.dodlive.mil
warriorcare.dodlive.mil
warriorgames.dodlive.mil
www.dodlive.mil

Other certificates including the domain name dodlive.mil

(limited to 100 certificates)
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
*.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
*.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
*.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
*.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil

Certificate

The complete raw certificate details for www.dodlive.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshVViFGn5iXFz71EEM0d
RNA9/ZWt6hrV8mPsEoGQmoLICTuuvvFRKy6HIdsXiEo1m2ap+MSvHR64JkoOLpZo
S90GXaLJFwabjh38zse4MCaHiMHcCdioCiVothHnt2ZbYO6jQRx0Fuy+/O99Udff
QCwKMGR8agVgck6zlr8Cv52vbwHusfpj4HcJkd7MOMkKqA2otuDEgKmJ1DoA4QPN
mmYJwP4O0o8Na7r4DiEiePElGrzyyulyJoZK3cyMS+qbK3cT7vSXyiPsikAgqd+k
k4vwXFENT8TLq1yGm5ixQYLDHR4VP+9d5aJ9/68Uo224pV3ljfeN0oz1K2aEGNbP
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286901246881767727039517140924006736209717
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-01 17:18:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-30 17:18:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.dodlive.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22480938526341372903674546775942446519478124840085799191060845084204768557061796329188644678991726788863383632341036523576261019677359053449004577524652849767410866130295319212334280934520656185127931338504861413439156548515914518586983602484962184049592272091665469881968741316422961188087848769548077813114977034400602072318892659893502409019000672936261899299287446825983952401769233479104339261485289653974460672047651920907468070241713233570598136815559954667879905908456595262936570453659407295642261705825388346295481281047447386555575586338443343524664568760276810020802174570840133657775894817747307075129111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7052be97890cff3f722a0622ff6ff435e7cb103f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '184jayhawks.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afrl.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afspace.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airman-sandbox.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airman.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaska.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allhands.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armyengineerhistory.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armytechnology.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balancingthebasin.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogafnradio.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bootcamp.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cco.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaplaincorps.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commissaryconnection.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csafreadinglist.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dantespulse.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dau.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodlive-sandbox.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodvsw.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donosbp.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ew-navalstem.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frcsw.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futureforce.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatlakes.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenfleet.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hackthepentagon.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackson.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jag.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kentuckyguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariners.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marines.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marinesmagazine.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midatlantic.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minationalguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mscsealift.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myafn.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nashvillecorps.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navalaviationnews.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navalstem.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navymedicine.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navysustainability.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncojournal.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncolcoe.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngmtc.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmcb11.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwest.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'open.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacesetterlive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pantherbrigade.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peosoldier.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plainsguardian.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicweb.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purview.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ra.defense.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcnsc.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reporter.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safety.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'science.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciencestaging.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scnewsltr.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seabeemagazine.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtc.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truax.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usaceportland.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usasd.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usnhistory.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallawalla.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warriorcare.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warriorgames.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dodlive.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166d07f133d0000040300483046022100cbc5327ad47a6698ce1f942357ffe6e3473c282adfb0b84545e644f04091fc8a022100bbf140e10bbf2f69ecbb23035769139589c83c66f9fc0e95b116938251a7a0f8007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000166d07f1518000004030047304502207224b4572876790589a3ba8afa35a1b998b82ce0efe084bf21eaaed0c90ac14b02210083eaf8d6f2f500a22d8798dc11b10729c604580356ccb110adde03cec914c2ae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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