www.pentagon.mil

Issued by R3

About this certificate

This digital certificate with serial number 04:46:cc:cc:ca:6c:39:66:a3:c7:71:50:da:c0:e7:08:b5:7c was issued on by Let's Encrypt.

With 77 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.pentagon.mil

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:46:cc:cc:ca:6c:39:66:a3:c7:71:50:da:c0:e7:08:b5:7c
Serial Number (int): 372541135256827089190436612895510251484540
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ec:ef:5f:35:bc:03:b1:e2:26:65:65:2e:7a:f5:f6:6d:6f:cc:56:d2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 73:ed:b1:f2:17:ea:52:d6:61:fd:99:14:04:1d:81:d8:44:5a:6f:94
Fingerprint (sha256): 41:42:91:38:70:d2:dc:90:63:62:4a:1e:3e:0e:59:38:d4:12:57:27:82:72:27:2d:fd:ef:84:89:e5:30:4c:30

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.pentagon.mil

77

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pentagon.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arkansas.nationalguard.mil
co.ng.mil
dc.ng.mil
dvisc.dma.mil
inside.dma.mil
jiraservicedesk.dma.mil
ky.ng.mil
media.dma.mil
oig.dia.mil
pac.whs.mil
pwservicedesk.dma.mil
servicedesk.dma.mil
slite.dma.mil
static.dma.mil
video.dma.mil
www.afneurope.net
www.afnpacific.net
www.army.nationalguard.mil
www.budget.mil
www.cac.mil
www.centcom.mil
www.cloud.mil
www.cybercom.mil
www.dcaa.mil
www.dcma.mil
www.dcsa.mil
www.defense.mil
www.defenseculture.mil
www.defenselink.mil
www.dfas.mil
www.dhra.mil
www.dia.mil
www.dimoc.mil
www.dinfos.dma.mil
www.dla.mil
www.dma.mil
www.dod.mil
www.dodig.mil
www.dote.osd.mil
www.dpaa.mil
www.dsp.dla.mil
www.dspo.mil
www.dss.mil
www.dtra.mil
www.esd.whs.mil
www.hacc.mil
www.jbmdl.jb.mil
www.jbml.jb.mil
www.jcs.mil
www.jcu.mil
www.jecc.mil
www.jiatfs.southcom.mil
www.jpeocbrnd.osd.mil
www.jtfb.southcom.mil
www.jtfcs.northcom.mil
www.jtfgtmo.southcom.mil
www.jtfn.northcom.mil
www.jtnc.mil
www.jwac.mil
www.metc.mil
www.nationalguard.mil
www.norad.mil
www.northcom.mil
www.nro.gov
www.nro.mil
www.pacom.mil
www.pentagon.mil
www.people.mil
www.pfpa.mil
www.prs.mil
www.repi.mil
www.southcom.mil
www.spacecom.mil
www.stratcom.mil
www.usfj.mil
www.warriorcare.mil
www.whitehousecommsagency.mil

Other certificates including the domain name pentagon.mil

(limited to 100 certificates)
www.dami.army.pentagon.mil
fa49.hqda.pentagon.mil
www.dma.mil
enbosswistagingcac.ocar.army.pentagon.mil
isrtrain.hqda.pentagon.mil
www.dma.mil
adminapps1.hqda.pentagon.mil
www.dma.mil
www.dma.mil
www.pentagon.mil
www.dma.mil
HQDAC2N00062-03.hqda.pentagon.mil
www.dma.mil
ariddashboard.ocar.army.pentagon.mil
www.dma.mil
www.pentagon.mil
www.asamra.army.mil
visitors.pentagon.mil
eeoa.army.pentagon.mil
jagc61-250.army.pentagon.mil
www.g357intranet.hqda.pentagon.mil
wias.hqda.pentagon.mil
www.pentagon.mil
www.acp.army.pentagon.mil
jspwin.pentagon.mil
www.dma.mil
meeting.pentagon.mil
pubssod2.acsap.hqda.pentagon.mil
citrixgw1.hqda.pentagon.mil
saprp.pentagon.mil
arba.army.pentagon.mil
*.hqda.pentagon.mil
minuteman.ngb.army.mil
www.dma.mil
www.pentagon.mil
www.daig.pentagon.mil
arba.army.pentagon.mil
arba.army.pentagon.mil
www.dma.mil
www.pentagon.mil
www.dma.mil
enbossteamtrackanon.ocar.army.pentagon.mil
www.dami.army.pentagon.mil
rbuild.pentagon.mil
SSOREGISTRATION.OCAR.ARMY.PENTAGON.MIL
EPASR.OCAR.ARMY.PENTAGON.MIL
smms.army.pentagon.mil
www.dma.mil
www.dma.mil
staging.rovr.army.pentagon.mil
smartbook.armyg1.pentagon.mil
RbuilderMMSupplemental.pentagon.mil
www.atrrs.army.pentagon.mil
pmdwtstest.ocar.army.pentagon.mil
interface.rovr.army.pentagon.mil
www.dma.mil
drrb-risk-reserve.acsap.hqda.pentagon.mil
www.dma.mil
cppm-pwn-s4.nsmc.pentagon.mil
www.dma.mil
usarbasops.ocar.army.pentagon.mil
vdi.hqda.pentagon.mil
www.dma.mil
aewrs.hqda.pentagon.mil
ssoregistrationdev.ocar.army.pentagon.mil
actsonline.army.mil
fdbtraining.ocar.army.pentagon.mil
ocsp5.army.pentagon.mil
visitors.pentagon.mil
eis.hqda.pentagon.mil
ecdrs.ocar.army.pentagon.mil
citrixgw2.hqda.pentagon.mil
www.dma.mil
drr-risk.acsap.hqda.pentagon.mil
citrixgw2.hqda.pentagon.mil
portal.doha.pentagon.mil
interface.eval.atrrs.army.pentagon.mil
ecdrs.ocar.army.pentagon.mil
www.g357intranet.hqda.pentagon.mil
www.dma.mil
www.amhs.pentagon.mil
cppm-pwn-s2.nsmc.pentagon.mil
www.dma.mil
fmwebdav.hqda.pentagon.mil
prissod1.acsap.hqda.pentagon.mil
www.asamra.army.mil
staging.rovr.army.pentagon.mil
www.dma.mil
www.dma.mil
connect.dtmo.pentagon.mil
www.atrrs.army.pentagon.mil
www.dma.mil
wias.pentagon.mil
casa.army.mil
rbuilder.pentagon.mil
webmail.dtmo.pentagon.mil
isr.hqda.pentagon.mil
www.dma.mil
arba.army.pentagon.mil
enbosscsg.ocar.army.pentagon.mil

Certificate

The complete raw certificate details for www.pentagon.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJPTCCCCWgAwIBAgISBEbMzMpsOWajx3FQ2sDnCLV8MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjA2MjQxNzQ0MThaFw0yMjA5MjIxNzQ0MTdaMBsxGTAXBgNVBAMT
EHd3dy5wZW50YWdvbi5taWwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDcdBuYr0NelyotrfcdtvbjCjfD8WxBIXOR0dKl7TKCiwjs693XAPjanZ6uiZui
oJRCsgWQMQdVyq82HGFcRBI+AVfvbTMTWFRvM60BIJqglgZkV5ZmuBoOypImnN+F
AEKfKsyyp0+LUbNfKxkgkjjOulDvabLE0W3vfhPh0Lla6tHthubzbPpiNEvS/NLM
gc4t7x1nrXX3YSKkav6AvpMUQYo+EIsY7DDlA4aqv2Ub3csyc6+lx+tpbulcvPha
mVJo1aN9CX5lEsJCAsH7QVPgbCK5gCqcf1kUi7URijbF3NR4FsW5asDhH+GjKQi3
RoCEGszm+clsQhkF7D7P97E5AgMBAAGjggZiMIIGXjAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD
VR0OBBYEFOzvXzW8A7HiJmVlLnr19m1vzFbSMB8GA1UdIwQYMBaAFBQusxe3WFbL
rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov
L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v
cmcvMIIFIwYDVR0RBIIFGjCCBRaCGmFya2Fuc2FzLm5hdGlvbmFsZ3VhcmQubWls
ggljby5uZy5taWyCCWRjLm5nLm1pbIINZHZpc2MuZG1hLm1pbIIOaW5zaWRlLmRt
YS5taWyCF2ppcmFzZXJ2aWNlZGVzay5kbWEubWlsgglreS5uZy5taWyCDW1lZGlh
LmRtYS5taWyCC29pZy5kaWEubWlsggtwYWMud2hzLm1pbIIVcHdzZXJ2aWNlZGVz
ay5kbWEubWlsghNzZXJ2aWNlZGVzay5kbWEubWlsgg1zbGl0ZS5kbWEubWlsgg5z
dGF0aWMuZG1hLm1pbIINdmlkZW8uZG1hLm1pbIIRd3d3LmFmbmV1cm9wZS5uZXSC
End3dy5hZm5wYWNpZmljLm5ldIIad3d3LmFybXkubmF0aW9uYWxndWFyZC5taWyC
Dnd3dy5idWRnZXQubWlsggt3d3cuY2FjLm1pbIIPd3d3LmNlbnRjb20ubWlsgg13
d3cuY2xvdWQubWlsghB3d3cuY3liZXJjb20ubWlsggx3d3cuZGNhYS5taWyCDHd3
dy5kY21hLm1pbIIMd3d3LmRjc2EubWlsgg93d3cuZGVmZW5zZS5taWyCFnd3dy5k
ZWZlbnNlY3VsdHVyZS5taWyCE3d3dy5kZWZlbnNlbGluay5taWyCDHd3dy5kZmFz
Lm1pbIIMd3d3LmRocmEubWlsggt3d3cuZGlhLm1pbIINd3d3LmRpbW9jLm1pbIIS
d3d3LmRpbmZvcy5kbWEubWlsggt3d3cuZGxhLm1pbIILd3d3LmRtYS5taWyCC3d3
dy5kb2QubWlsgg13d3cuZG9kaWcubWlsghB3d3cuZG90ZS5vc2QubWlsggx3d3cu
ZHBhYS5taWyCD3d3dy5kc3AuZGxhLm1pbIIMd3d3LmRzcG8ubWlsggt3d3cuZHNz
Lm1pbIIMd3d3LmR0cmEubWlsgg93d3cuZXNkLndocy5taWyCDHd3dy5oYWNjLm1p
bIIQd3d3LmpibWRsLmpiLm1pbIIPd3d3LmpibWwuamIubWlsggt3d3cuamNzLm1p
bIILd3d3LmpjdS5taWyCDHd3dy5qZWNjLm1pbIIXd3d3LmppYXRmcy5zb3V0aGNv
bS5taWyCFXd3dy5qcGVvY2JybmQub3NkLm1pbIIVd3d3Lmp0ZmIuc291dGhjb20u
bWlsghZ3d3cuanRmY3Mubm9ydGhjb20ubWlsghh3d3cuanRmZ3Rtby5zb3V0aGNv
bS5taWyCFXd3dy5qdGZuLm5vcnRoY29tLm1pbIIMd3d3Lmp0bmMubWlsggx3d3cu
andhYy5taWyCDHd3dy5tZXRjLm1pbIIVd3d3Lm5hdGlvbmFsZ3VhcmQubWlsgg13
d3cubm9yYWQubWlsghB3d3cubm9ydGhjb20ubWlsggt3d3cubnJvLmdvdoILd3d3
Lm5yby5taWyCDXd3dy5wYWNvbS5taWyCEHd3dy5wZW50YWdvbi5taWyCDnd3dy5w
ZW9wbGUubWlsggx3d3cucGZwYS5taWyCC3d3dy5wcnMubWlsggx3d3cucmVwaS5t
aWyCEHd3dy5zb3V0aGNvbS5taWyCEHd3dy5zcGFjZWNvbS5taWyCEHd3dy5zdHJh
dGNvbS5taWyCDHd3dy51c2ZqLm1pbIITd3d3LndhcnJpb3JjYXJlLm1pbIIdd3d3
LndoaXRlaG91c2Vjb21tc2FnZW5jeS5taWwwTAYDVR0gBEUwQzAIBgZngQwBAgEw
NwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j
cnlwdC5vcmcwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEB
AAvGlK/DY2u25qn3XbLvJTjHg+uVmcWW65e6jBHz0LVb9KmVmzEH0wPEMcE5HIYf
wyzH3ZkCHpFDoKDKvFU05lJFO2wADv9NuGhbU7A+iMwe9/iRGvdzWtmnhhuktYBE
hXrONF/37EhYEs4GPBB/zPec1nUXOVTAPSnzT6DIMn8bCI+/dkjOkQjoA2zaRqj0
T8UlEwHurhGxeF7hEAhK9sfAM3q8MzIx3jTb455bSy3ThTBj5GJd/DJAfR52wdln
UT5+aY4Q4PVdvKt7dxdCg0jOBp7QzFXM0D5cC/5ImfmEmI5DZQrNokAluQagtSXd
YZ8DfpgRn0OF4iQXm1l4y8M=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HQbmK9DXpcqLa33Hbb2
4wo3w/FsQSFzkdHSpe0ygosI7Ovd1wD42p2eromboqCUQrIFkDEHVcqvNhxhXEQS
PgFX720zE1hUbzOtASCaoJYGZFeWZrgaDsqSJpzfhQBCnyrMsqdPi1GzXysZIJI4
zrpQ72myxNFt734T4dC5WurR7Ybm82z6YjRL0vzSzIHOLe8dZ61192EipGr+gL6T
FEGKPhCLGOww5QOGqr9lG93LMnOvpcfraW7pXLz4WplSaNWjfQl+ZRLCQgLB+0FT
4GwiuYAqnH9ZFIu1EYo2xdzUeBbFuWrA4R/hoykIt0aAhBrM5vnJbEIZBew+z/ex
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 372541135256827089190436612895510251484540
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-24 17:44:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-22 17:44:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pentagon.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27829681981908191242144837009786645283135157880195175231071014614075756922013394696672977015372953566145223472743224455763913111440836274077399205698425933590652946708409583712575064712765509235518736115832021155238081404508353756146918243764904222572818628944012150658080875994119856544548121413846826189563118872466945270688676013684568358927644473345420066496569997285356048504396567980680664010401712582088524318860240271096802425748289662350474365699451240594823161159472354581323535285101843650716128369629481696115290069206720680313863178642544134885111845909094948185831697893983626190466278839715984831918393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ecef5f35bc03b1e22665652e7af5f66d6fcc56d2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1306 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkansas.nationalguard.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co.ng.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc.ng.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvisc.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiraservicedesk.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ky.ng.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oig.dia.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pac.whs.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwservicedesk.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slite.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afneurope.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afnpacific.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.army.nationalguard.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.budget.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cac.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cloud.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cybercom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dcaa.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dcma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dcsa.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defense.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defenseculture.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defenselink.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dfas.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dhra.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dia.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dimoc.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dinfos.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dla.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dod.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dodig.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dote.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dpaa.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsp.dla.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dspo.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dss.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dtra.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esd.whs.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hacc.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jbmdl.jb.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jbml.jb.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcs.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcu.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jecc.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jiatfs.southcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jpeocbrnd.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jtfb.southcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jtfcs.northcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jtfgtmo.southcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jtfn.northcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jtnc.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jwac.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metc.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationalguard.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norad.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nro.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nro.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pacom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pentagon.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.people.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pfpa.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prs.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.repi.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spacecom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stratcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usfj.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warriorcare.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whitehousecommsagency.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000bc694afc3636bb6e6a9f75db2ef2538c783eb9599c596eb97ba8c11f3d0b55bf4a9959b3107d303c431c1391c861fc32cc7dd99021e9143a0a0cabc5534e652453b6c000eff4db8685b53b03e88cc1ef7f8911af7735ad9a7861ba4b58044857ace345ff7ec485812ce063c107fccf79cd675173954c03d29f34fa0c8327f1b088fbf7648ce9108e8036cda46a8f44fc5251301eeae11b1785ee110084af6c7c0337abc333231de34dbe39e5b4b2dd3853063e4625dfc32407d1e76c1d967513e7e698e10e0f55dbcab7b7717428348ce069ed0cc55ccd03e5c0bfe4899f984988e43650acda24025b906a0b525dd619f037e98119f4385e224179b5978cbc3