els023uvpn.milcloud.mil

- U.S. Government -

Issued by DOD ID SW CA-38

About this certificate

This digital certificate with serial number 01:12:f0 was issued on by U.S. Government.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: subject:localityName MUST appear if subject:organizationName, subject:givenName, or subject:surname fields are present but the subject:stateOrProvinceName field is absent. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: subject:stateOrProvinceName MUST appear if the subject:organizationName, subject:givenName, or subject:surname fields are present and subject:localityName is absent. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Organization unit: PKI
Organization unit: USAF
Country: US

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Organization unit: PKI
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:12:f0
Serial Number (int): 70384
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId: b6:a1:b8:c1:3a:5a:d1:28:f1:96:e5:06:d1:ef:ae:95:b7:4b:ce:2d
AuthorityKeyId: 8e:c5:b9:cc:fc:ce:8e:53:b4:2a:ce:e8:11:2a:cf:9b:29:6c:67:ca

Fingerprint (sha1): 02:fa:3b:7d:ec:21:96:59:35:02:eb:19:ea:a4:69:af:74:73:a1:92
Fingerprint (sha256): 2c:bc:d8:fa:1d:94:55:f0:9a:72:7e:6c:91:74:ad:5c:ae:6f:b0:87:b3:05:41:0e:0f:c4:13:e5:f3:bb:98:06

Issuing Certificate URL: http://crl.disa.mil/sign/DODIDSWCA_38.cer

Revocation information

OCSP Server: http://ocsp.disa.mil
CRL Distribution Point: http://crl.disa.mil/crl/DODIDSWCA_38.crl

Check the revocation status for certificate els023uvpn.milcloud.mil

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for els023uvpn.milcloud.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

els023uvpn.milcloud.mil

Other certificates including the domain name milcloud.mil

(limited to 100 certificates)
rdais.platform.milcloud.mil
cbrnis.jpmis.milcloud.mil
rdais.platform.milcloud.mil
rdais-test.platform.milcloud.mil
myseco-preprod.platform.milcloud.mil
trtcs.milcloud.mil
manager011u.platform.milcloud.mil
mcipac.mcop.milcloud.mil
utinvpn.milcloud.mil
ugunvpn.milcloud.mil
myseco-preprod.platform.milcloud.mil
els023uvpn.milcloud.mil
manager006u.platform.milcloud.mil
myseco-test.platform.milcloud.mil
apacs.milcloud.mil
ugunvpn.milcloud.mil
gcdsaf7.af.mil
milcloud.mil
myseco-test.platform.milcloud.mil
usaf-acq-test.platform.milcloud.mil
manager012u.platform.milcloud.mil
usaf-acq.platform.milcloud.mil
usaf-acq-test.platform.milcloud.mil
mcincr.mcop.milcloud.mil
manager011u.platform.milcloud.mil
cbrnis.jpmis.milcloud.mil
mciwest.mcop.milcloud.mil
usaf-acq.platform.milcloud.mil
rdais-test.platform.milcloud.mil
efoia.milcloud.mil
www.milcloud.mil
utinvpn.milcloud.mil
ui.csd.disa.mil
geo.mcop.milcloud.mil
rdais.platform.milcloud.mil
manager006u.platform.milcloud.mil
mcieast.mcop.milcloud.mil
apacs-stg.milcloud.mil
myseco-test.platform.milcloud.mil
efoia.milcloud.mil
USAFA-COP.psif.milcloud.mil
els023uvpn.milcloud.mil
efoia.milcloud.mil
milcloud.mil
ugunvpn.milcloud.mil
utinhuhl.platform.milcloud.mil
issp.platform.milcloud.mil
efoia.milcloud.mil
mcicom.mcop.milcloud.mil
utinvpn.milcloud.mil
utinhuhk.platform.milcloud.mil
myseco-preprod.platform.milcloud.mil
manager006u.platform.milcloud.mil

Certificate

The complete raw certificate details for els023uvpn.milcloud.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOn+NcY5mbmcyWnJfjRp
Ol/3CwK0PhhDP6Ahzm5maTVbCyODzZQyycK7qRk2Zaj3dzzxa5nO2g4PnXB6sGwM
gYFe1Aff4Gz1HkCjtz4LMbjqP/3+WOLxZDiDremVtxyimnlgo3018DGTLA0TvKQP
MQXgnIKLwtgpbiEzBtLvPsn1UvnlFOVF14VImE9SC86hiNfyo7NdnnHwN6BT7dpO
LsI6LHO+PpUG8tXrqpNeybhr+qXxiB/RJ4qoX/ZVSSRcdlIEH5pPsAvlb0u0HHVT
YLG0jQHGE7/lEegwRqva2NPbBj3yEKK+8ytnPjvKcG4j55nIJZbddpl8gwcQdkv3
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 70384
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOD ID SW CA-38'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-20 14:47:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-21 14:47:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USAF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'els023uvpn.milcloud.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24858094026112086112967158732070546468761345542697833693324582507350021945958090544551674261822939479476208864701153691885750762116616579859082229434157894517861942062658432862706535387705798492014503992754276944051009533351794377168889850989027880826732175253158928541024661160763194862133936749731625135214141505950536300100659617301857937144665265362249103960858560723032881340059585557651884792371989472959744395793909395456516095877531044198463857824588239803114536163460820575513207181112421930617025008865324859574126828560798112954892038798492695264578045273465165478206031684734222501102304455277778519717737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8ec5b9ccfcce8e53b42acee8112acf9b296c67ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b6a1b8c13a5ad128f196e506d1efae95b74bce2d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/sign/DODIDSWCA_38.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.disa.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/crl/DODIDSWCA_38.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'els023uvpn.milcloud.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.2.1.11.39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.8.2.2 (iKEIntermediate)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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