www.dodlive.mil

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:58:b9:8b:e2:f8:f0:36:e9:db:af:f5:0f:b9:7d:ed:f2:07 was issued on by Let's Encrypt.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.dodlive.mil

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:58:b9:8b:e2:f8:f0:36:e9:db:af:f5:0f:b9:7d:ed:f2:07
Serial Number (int): 291528339596354368019706594066867300463111
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 90:12:34:5a:ab:dc:30:ab:8a:7f:5f:6b:7c:1f:fa:fd:43:86:7c:92
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5e:85:d2:55:8d:ca:e2:0f:41:26:48:85:c5:b5:66:c1:ad:93:2e:86
Fingerprint (sha256): 2f:a1:61:d3:e1:24:4a:80:c1:14:5e:e9:85:4f:36:48:10:a6:18:40:14:04:b2:72:43:26:56:f4:d6:ce:93:b8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.dodlive.mil

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dodlive.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

184jayhawks.dodlive.mil
afepubs.dodlive.mil
afrl.dodlive.mil
afspace.dodlive.mil
airman-sandbox.dodlive.mil
airman.dodlive.mil
alaska.coastguard.dodlive.mil
allhands.coastguard.dodlive.mil
armyengineerhistory.dodlive.mil
armylive.dodlive.mil
balancingthebasin.armylive.dodlive.mil
blogafnradio.dodlive.mil
bootcamp.coastguard.dodlive.mil
chaplaincorps.navylive.dodlive.mil
coastguard.dodlive.mil
commissaryconnection.dodlive.mil
csafreadinglist.dodlive.mil
dantespulse.dodlive.mil
dasadec.dodlive.mil
dodlive-sandbox.dodlive.mil
dodvsw.dodlive.mil
donosbp.navylive.dodlive.mil
ew-navalstem.navylive.dodlive.mil
frcsw.navylive.dodlive.mil
futureforce.navylive.dodlive.mil
greatlakes.coastguard.dodlive.mil
greenfleet.dodlive.mil
hackthepentagon.dodlive.mil
jackson.armylive.dodlive.mil
jag.navylive.dodlive.mil
kentuckyguard.dodlive.mil
mariners.coastguard.dodlive.mil
marinesmagazine.dodlive.mil
midatlantic.coastguard.dodlive.mil
minationalguard.dodlive.mil
mscsealift.dodlive.mil
myafn.dodlive.mil
navalaviationnews.navylive.dodlive.mil
navalstem.navylive.dodlive.mil
navcms.dma.mil
navylive.dodlive.mil
navymedicine.navylive.dodlive.mil
navysustainability.dodlive.mil
ncojournal.dodlive.mil
ncolcoe.armylive.dodlive.mil
nmcb11.navylive.dodlive.mil
northwest.coastguard.dodlive.mil
pacesetterlive.dodlive.mil
pantherbrigade.dodlive.mil
peosoldier.armylive.dodlive.mil
plainsguardian.dodlive.mil
publicweb.dodlive.mil
purview.dodlive.mil
ra.defense.dodlive.mil
rcnsc.dodlive.mil
reporter.dodlive.mil
safety.navylive.dodlive.mil
scguard.dodlive.mil
science.dodlive.mil
sciencestaging.dodlive.mil
scnewsltr.dodlive.mil
seabeemagazine.navylive.dodlive.mil
smtc.dodlive.mil
truax.dodlive.mil
usaceportland.armylive.dodlive.mil
usasd.armylive.dodlive.mil
usnhistory.navylive.dodlive.mil
vaguard.dodlive.mil
wallawalla.armylive.dodlive.mil
warriorcare.dodlive.mil
warriorgames.dodlive.mil
www.dodlive.mil

Other certificates including the domain name dodlive.mil

(limited to 100 certificates)
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
*.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
*.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
*.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
*.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
www.dodlive.mil

Certificate

The complete raw certificate details for www.dodlive.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCdSoow1cjrdEJq2y/N4
nVKI6e1/eKZFf2do6xwM0wBURB7y0NyJgI/ULK8RnBLEeR+M5BTgn92Vnt+SYhjY
6TuesMm1fAED9FMmJvBbWxg81VRBxEM3BCwenGWOhrcsqy6BbYphkNLCuvEgt2ND
YhsQgUDewz+DwqvSMbHVfQ96iw6Hme/HL+2tmo5C7UrOqdTqsdYVaT4aeuraYJPd
olICGv4QWEiX4IiJBPUGDLiw2OONBS0rxTKYiRau7TGZP4WOYAgtSXNLG/ciiunE
VA3cO0752s9h7p09bFtq0+oASn0UtfvTvnumj/Y+X4ko6xEfeKSHr6nlMdzFSb7w
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291528339596354368019706594066867300463111
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-21 17:26:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-19 17:26:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.dodlive.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24762098565172471210256494249256319783720855127089680939763189799357573440652650905116729538076150611739654250546384857511910664346495671670447947041632135507268708806700189060621809787950478242884558131516219397811895124155775611423276948474620496202457107712468836730817447878748990614735898584468199185197703132051165872513039906367282981015040874032357715691970838574555134565442145950862030685564662097040895056028906647487478570452835370963218842050220294218974103422595720685472427464799539174357723043880444559084916273971306858384448053937738706123539457909111528954622488593292791457716784308766958755442783
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:16|false]  
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1976 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '184jayhawks.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afepubs.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afrl.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afspace.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airman-sandbox.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airman.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaska.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allhands.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armyengineerhistory.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balancingthebasin.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogafnradio.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bootcamp.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaplaincorps.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commissaryconnection.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csafreadinglist.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dantespulse.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dasadec.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodlive-sandbox.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodvsw.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donosbp.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ew-navalstem.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frcsw.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futureforce.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatlakes.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenfleet.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hackthepentagon.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackson.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jag.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kentuckyguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariners.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marinesmagazine.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midatlantic.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minationalguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mscsealift.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myafn.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navalaviationnews.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navalstem.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navcms.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navymedicine.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navysustainability.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncojournal.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncolcoe.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmcb11.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwest.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacesetterlive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pantherbrigade.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peosoldier.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plainsguardian.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicweb.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purview.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ra.defense.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcnsc.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reporter.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safety.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'science.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciencestaging.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scnewsltr.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seabeemagazine.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtc.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truax.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usaceportland.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usasd.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usnhistory.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallawalla.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warriorcare.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warriorgames.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dodlive.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169a181191e00000403004730450220205eea46c45d1648f5243c5b31f29eb311aa992075cb69b96cff2cf7648ee5910221008b916637c9ffdad4f7bfdce79a4a622152142d78fb3833246a94c530ee1d5b8b00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169a181192000000403004630440220531cf2cfaae20875406a3fecd07c7c97741c0136bc6997c64ecd9aba6c42020302204aab58de85ff966299fd3d29d554c298abb178b98a02907bce8f7eaf78573b18
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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