gcdsaf7.af.mil

- U.S. Government -

Issued by DOD ID SW CA-38

About this certificate

This digital certificate with serial number 02:cc:cc was issued on by U.S. Government.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: subject:localityName MUST appear if subject:organizationName, subject:givenName, or subject:surname fields are present but the subject:stateOrProvinceName field is absent. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: subject:stateOrProvinceName MUST appear if the subject:organizationName, subject:givenName, or subject:surname fields are present and subject:localityName is absent. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Organization unit: PKI
Organization unit: USAF
Country: US

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Organization unit: PKI
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:cc:cc
Serial Number (int): 183500
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: 54:c9:de:65:4f:a9:f2:a2:70:88:9f:24:d0:67:17:90:04:af:2f:c3
AuthorityKeyId: 8e:c5:b9:cc:fc:ce:8e:53:b4:2a:ce:e8:11:2a:cf:9b:29:6c:67:ca

Fingerprint (sha1): c2:8b:ba:8d:d3:c7:5d:63:b2:0c:2e:46:57:25:92:e3:ef:c4:11:83
Fingerprint (sha256): 40:ab:e4:f6:21:06:ba:02:32:35:33:c1:01:1e:71:48:5c:33:84:db:28:95:cd:bc:49:84:35:2d:a2:58:2a:18

Issuing Certificate URL: http://crl.disa.mil/sign/DODIDSWCA_38.cer

Revocation information

OCSP Server: http://ocsp.disa.mil
CRL Distribution Point: http://crl.disa.mil/crl/DODIDSWCA_38.crl

Check the revocation status for certificate gcdsaf7.af.mil

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gcdsaf7.af.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gcdsaf7.af.mil
hags-epex-001.us.af.mil
116acw-epex.ang.af.mil
188wg.epex.ang.af.mil
193sow.epex.ang.af.mil
afaems.langley.af.mil
afvec.langley.af.mil
acms-portal.afpc.randolph.af.mil
afsac.wpafb.af.mil
www.efoia.af.mil
acms.afpc.randolph.af.mil
ww5.afpc.randolph.af.mil
stars.afpc.randolph.af.mil
mypers.af.mil
jagusaf.jag.af.mil
augateway.maxwell.af.mil
afcee-pm.lackland.af.mil
c130tableau.robins.af.mil
www.ns4r.milcloud.mil
aftoc.hill.af.mil
aftoc2.hill.af.mil
QKKG-WS-PEX2P.misawa.us.af.mil
aftoc-reports.hill.af.mil
vpn.prod.aws.cce.af.mil
vpn.preprod.aws.cce.af.mil
vpn.dev.aws.cce.af.mil
vpn.user.aws.cce.af.mil
pklunx.hill.af.mil
affirst.org
afcec.publicadmin-record.us.af.mil
ciscoasa.afams.af.mil
webmail.afams.af.mil
www2.afams.af.mil
msis.afams.af.mil
lims.wpafb.af.mil
webaims.hanscom.af.mil
jstars.hanscom.af.mil
crisfmweb.ogden.disa.mil
crisadmin.ogden.disa.mil
cris.af.mil
cris.ogden.disa.mil
lts.wpafb.af.mil
cdrs.wpafb.af.mil
mrdssschoolhouse.gunter.af.mil
AFOSI-DefenseReady.us.af.mil
AFOSI-DRLMS.us.af.mil
AFOSI-DRDS.us.af.mil
AFOSI-DRRECON.us.af.mil
AFOSI-DRWEBDAV.us.af.mil

Other certificates including the domain name af.mil

(limited to 100 certificates)
sso.nasiccloud.af.mil
angelfire.vdl.afrl.af.mil
www.honorguard.af.mil
apc3-ec-01.ang.ds.af.mil
cqmap.cce.af.mil
www.afncr.hq.af.mil
coins9iapp.scott.af.mil
www.afcyber.af.mil
www.afrc.af.mil
ar.afcec-cloud.af.mil
*.coder-gov.nasic.af.mil
oars189.dng.cie.af.mil
mdm.test.cce.af.mil
afbrac.hq.af.mil
WEDNG11645.dng.cie.af.mil
52arty-ws-005v.afrc.af.mil
www.af.mil
efoia.cce.af.mil
www.gil.cetl.gunter.af.mil
hcloginorigin.maxwell.af.mil
lrt2.my.af.mil
mow-g-mrly-001.afgate.ad.af.mil
deamsbpel.cie.af.mil
portal.jbsa.af.mil
ej-crl2.my.af.mil
ihs.afrc.af.mil
UAT.MEDXS.AF.MIL
owscollab.barksdale.af.mil
deamsoam0010a.cie.af.mil
acesdsso.cie.af.mil
deamsgrdintconsole.cie.af.mil
www.ang.af.mil
asli.af.mil
wargaming.hq.af.mil
wildcard.cce.af.mil
PETERSON-MAIL1.afnoc.af.mil
cie-sdp-dp.cie.af.mil
www.uat.medxs.af.mil
www.damis.afaa.hq.af.mil
netdev.hq.af.mil
afrcdesktops.us.af.mil
kir-g-mrly-002.afgate.ad.af.mil
bermuda.af.mil
crosslink.af.mil
development.lcmp.af.mil
remote1.afwa.af.mil
armsweb.afpc.randolph.af.mil
aiportal.acc.af.mil
f16ocm.hill.af.mil
diode.nasic.af.mil
aftoc.hill.af.mil
glens0057-web8.frontrange.afspc.ds.af.mil
ows.sembach.af.mil
www.honorguard.af.mil
pass.hq.af.mil
w40.afpc.randolph.af.mil
wecstclnt85.gateway.cie.af.mil
www.airforcefaptest.af.mil
52tymx-ws-200.randolph.aetc.ds.af.mil
www.afcyber.af.mil
www.airforcehollywood.af.mil
apims.af.mil
bsds.cie.af.mil
www.af.mil
www.af.mil
www.af.mil
adapts2.test.cce.af.mil
webmail.clear.af.mil
itsrd.cie.af.mil
www.afrc.af.mil
esgweb.afccc.af.mil
aflegalassistance.law.af.mil
deamsdisint1console.cie.af.mil
mocc.vandenberg.af.mil
52vejx-ucpool-001.area52.afnoapps.usaf.mil
deamsobiint2.cie.af.mil
bermuda.af.mil
www.af.mil
widds.afwa.af.mil
mail.ok.afmc.af.mil
teams.afsoc.af.mil
*.bermuda.af.mil
www.airforcehollywood.af.mil
c5galaxy.robins.af.mil
jagusaf.jag.af.mil
teleport.nasic.af.mil
nssi.cce.af.mil
digitalu.af.mil
mxprod.hq.af.mil
mail.kirtland.af.mil
etca.randolph.af.mil
www.my.af.mil
asli.af.mil
reports.arpc.afrc.af.mil
cx.hanscom.af.mil
software.af.mil
webmail.ajab.nosc.afcent.af.mil
afaems.us.af.mil
owsjet17.us.af.mil
bipweather.afwa.af.mil

Certificate

The complete raw certificate details for gcdsaf7.af.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJCzCCB/OgAwIBAgIDAszMMA0GCSqGSIb3DQEBCwUAMF0xCzAJBgNVBAYTAlVT
MRgwFgYDVQQKEw9VLlMuIEdvdmVybm1lbnQxDDAKBgNVBAsTA0RvRDEMMAoGA1UE
CxMDUEtJMRgwFgYDVQQDEw9ET0QgSUQgU1cgQ0EtMzgwHhcNMTcxMDMxMTIyNTU4
WhcNMjAxMDMxMTIyNTU4WjBrMQswCQYDVQQGEwJVUzEYMBYGA1UEChMPVS5TLiBH
b3Zlcm5tZW50MQwwCgYDVQQLEwNEb0QxDDAKBgNVBAsTA1BLSTENMAsGA1UECxME
VVNBRjEXMBUGA1UEAxMOZ2Nkc2FmNy5hZi5taWwwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCsnxRLb7QvO4KhwdOJBvuCrFyO5FqDwJ9W6xt1I8wBZQTo
M/7j8TDEGBQHXp+LjEICSKr1+WMKrmRFxywYNFGCt0eaWmOlZKGccyDdwKFNYymk
WXQTb3bHpKMMpn1AvsqlfAD/4XKzYNlmd/XO/GP26IifjxR3by7b4APkth49A5nC
DKEYA47WGGp/azjPpXZrLCklJRCCHc7bub0n4aB7Xd/BowYTyc+DIFQa+yDi9cRj
0LysKBWWsdnaoV4+duwVaI0G/v7OqoLjV8B+bBUKit8CelRIVbkquYNDBEMPLByy
RE1/oX0N5QBF4sa4psMZzMgvci/a2VjNXbI06hPnAgMBAAGjggXEMIIFwDAfBgNV
HSMEGDAWgBSOxbnM/M6OU7QqzugRKs+bKWxnyjAdBgNVHQ4EFgQUVMneZU+p8qJw
iJ8k0GcXkASvL8MwZwYIKwYBBQUHAQEEWzBZMDUGCCsGAQUFBzAChilodHRwOi8v
Y3JsLmRpc2EubWlsL3NpZ24vRE9ESURTV0NBXzM4LmNlcjAgBggrBgEFBQcwAYYU
aHR0cDovL29jc3AuZGlzYS5taWwwDgYDVR0PAQH/BAQDAgWgMDkGA1UdHwQyMDAw
LqAsoCqGKGh0dHA6Ly9jcmwuZGlzYS5taWwvY3JsL0RPRElEU1dDQV8zOC5jcmww
ggSHBgNVHREEggR+MIIEeoIOZ2Nkc2FmNy5hZi5taWyCF2hhZ3MtZXBleC0wMDEu
dXMuYWYubWlsghYxMTZhY3ctZXBleC5hbmcuYWYubWlsghUxODh3Zy5lcGV4LmFu
Zy5hZi5taWyCFjE5M3Nvdy5lcGV4LmFuZy5hZi5taWyCFWFmYWVtcy5sYW5nbGV5
LmFmLm1pbIIUYWZ2ZWMubGFuZ2xleS5hZi5taWyCIGFjbXMtcG9ydGFsLmFmcGMu
cmFuZG9scGguYWYubWlsghJhZnNhYy53cGFmYi5hZi5taWyCEHd3dy5lZm9pYS5h
Zi5taWyCGWFjbXMuYWZwYy5yYW5kb2xwaC5hZi5taWyCGHd3NS5hZnBjLnJhbmRv
bHBoLmFmLm1pbIIac3RhcnMuYWZwYy5yYW5kb2xwaC5hZi5taWyCDW15cGVycy5h
Zi5taWyCEmphZ3VzYWYuamFnLmFmLm1pbIIYYXVnYXRld2F5Lm1heHdlbGwuYWYu
bWlsghhhZmNlZS1wbS5sYWNrbGFuZC5hZi5taWyCGWMxMzB0YWJsZWF1LnJvYmlu
cy5hZi5taWyCFXd3dy5uczRyLm1pbGNsb3VkLm1pbIIRYWZ0b2MuaGlsbC5hZi5t
aWyCEmFmdG9jMi5oaWxsLmFmLm1pbIIeUUtLRy1XUy1QRVgyUC5taXNhd2EudXMu
YWYubWlsghlhZnRvYy1yZXBvcnRzLmhpbGwuYWYubWlsghd2cG4ucHJvZC5hd3Mu
Y2NlLmFmLm1pbIIadnBuLnByZXByb2QuYXdzLmNjZS5hZi5taWyCFnZwbi5kZXYu
YXdzLmNjZS5hZi5taWyCF3Zwbi51c2VyLmF3cy5jY2UuYWYubWlsghJwa2x1bngu
aGlsbC5hZi5taWyCC2FmZmlyc3Qub3JngiJhZmNlYy5wdWJsaWNhZG1pbi1yZWNv
cmQudXMuYWYubWlsghVjaXNjb2FzYS5hZmFtcy5hZi5taWyCFHdlYm1haWwuYWZh
bXMuYWYubWlsghF3d3cyLmFmYW1zLmFmLm1pbIIRbXNpcy5hZmFtcy5hZi5taWyC
EWxpbXMud3BhZmIuYWYubWlsghZ3ZWJhaW1zLmhhbnNjb20uYWYubWlsghVqc3Rh
cnMuaGFuc2NvbS5hZi5taWyCGGNyaXNmbXdlYi5vZ2Rlbi5kaXNhLm1pbIIYY3Jp
c2FkbWluLm9nZGVuLmRpc2EubWlsggtjcmlzLmFmLm1pbIITY3Jpcy5vZ2Rlbi5k
aXNhLm1pbIIQbHRzLndwYWZiLmFmLm1pbIIRY2Rycy53cGFmYi5hZi5taWyCHm1y
ZHNzc2Nob29saG91c2UuZ3VudGVyLmFmLm1pbIIcQUZPU0ktRGVmZW5zZVJlYWR5
LnVzLmFmLm1pbIIVQUZPU0ktRFJMTVMudXMuYWYubWlsghRBRk9TSS1EUkRTLnVz
LmFmLm1pbIIXQUZPU0ktRFJSRUNPTi51cy5hZi5taWyCGEFGT1NJLURSV0VCREFW
LnVzLmFmLm1pbDAWBgNVHSAEDzANMAsGCWCGSAFlAgELJzAnBgNVHSUEIDAeBggr
BgEFBQcDAQYIKwYBBQUHAwIGCCsGAQUFCAICMA0GCSqGSIb3DQEBCwUAA4IBAQCj
n1Mf/pFZm2G2++urjRPAyEdAen2fqpNnoGk19IPTKQeKZJENxZ7vqoF/IUgg1hZg
or/Rv2X5SsRcVkOC52BrdZjqTEqe1Vqu1TdiWQ8bRuyGA8wgRoWXiGhDbYA2vvd8
Xl6Ig+5DEC1aeGRKiY5EZ8VjAYXVdQBw8U31vgv+QWFaupY15CTm1isj9b+US6Xq
F8jXseaB1fANiupqwQGnSEwIXnqxD2pbJS0rUn6L/hrUqptb4bgeGwMgimfclA8I
7szcXyyRtFtyqih3UNbNqdZz7mrK6vG1JMluIrOOlP6MHmCEgPRnpcqPa37IZi3W
kg/Q1OZl9NYKTxKSGgrB
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ8US2+0LzuCocHTiQb7
gqxcjuRag8CfVusbdSPMAWUE6DP+4/EwxBgUB16fi4xCAkiq9fljCq5kRccsGDRR
grdHmlpjpWShnHMg3cChTWMppFl0E292x6SjDKZ9QL7KpXwA/+Fys2DZZnf1zvxj
9uiIn48Ud28u2+AD5LYePQOZwgyhGAOO1hhqf2s4z6V2aywpJSUQgh3O27m9J+Gg
e13fwaMGE8nPgyBUGvsg4vXEY9C8rCgVlrHZ2qFePnbsFWiNBv7+zqqC41fAfmwV
CorfAnpUSFW5KrmDQwRDDywcskRNf6F9DeUAReLGuKbDGczIL3Iv2tlYzV2yNOoT
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 183500
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOD ID SW CA-38'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-31 12:25:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-31 12:25:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USAF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gcdsaf7.af.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21791433368872852755913503544703355314859723979614206174962666391164485830517288409767971304835321391745343037973679737807701199158564990921568869511769987193125255807353367742823509168493161460756919078079018961362582360597352124351031090683162658447542202832914935760905046957835476802581784176505687488053018778795094994355176927642292614421789821748556385712398781005420369201978130400239760547950246005119443699101244278063832067155273679267338657321612904866321157589314024508141309257023159234852866329140572865874126489291262775204512545569802904976106148899925476841565642752824220000083239434235059402052583
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8ec5b9ccfcce8e53b42acee8112acf9b296c67ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54c9de654fa9f2a270889f24d067179004af2fc3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/sign/DODIDSWCA_38.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.disa.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/crl/DODIDSWCA_38.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1150 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcdsaf7.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hags-epex-001.us.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '116acw-epex.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '188wg.epex.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '193sow.epex.ang.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afaems.langley.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afvec.langley.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acms-portal.afpc.randolph.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afsac.wpafb.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.efoia.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acms.afpc.randolph.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww5.afpc.randolph.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stars.afpc.randolph.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypers.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jagusaf.jag.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augateway.maxwell.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afcee-pm.lackland.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c130tableau.robins.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ns4r.milcloud.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aftoc.hill.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aftoc2.hill.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'QKKG-WS-PEX2P.misawa.us.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aftoc-reports.hill.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.prod.aws.cce.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.preprod.aws.cce.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.dev.aws.cce.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.user.aws.cce.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pklunx.hill.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affirst.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afcec.publicadmin-record.us.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciscoasa.afams.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.afams.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.afams.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msis.afams.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lims.wpafb.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webaims.hanscom.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jstars.hanscom.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crisfmweb.ogden.disa.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crisadmin.ogden.disa.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cris.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cris.ogden.disa.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lts.wpafb.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdrs.wpafb.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrdssschoolhouse.gunter.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AFOSI-DefenseReady.us.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AFOSI-DRLMS.us.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AFOSI-DRDS.us.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AFOSI-DRRECON.us.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AFOSI-DRWEBDAV.us.af.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.2.1.11.39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.8.2.2 (iKEIntermediate)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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