www.dodlive.mil

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:39:1f:17:0d:c6:f5:d7:da:98:50:ce:42:c2:24:ca:eb:04 was issued on by Let's Encrypt.

With 62 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.dodlive.mil

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:39:1f:17:0d:c6:f5:d7:da:98:50:ce:42:c2:24:ca:eb:04
Serial Number (int): 280774278479905896854418647422995492694788
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6d:55:f7:f8:a4:8d:c3:ef:6a:bc:12:6e:15:bc:30:3b:4a:e3:d9:7e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0f:b5:17:c6:24:21:31:78:25:13:1f:3d:03:9d:69:6c:fb:98:35:65
Fingerprint (sha256): 44:c0:90:93:d5:5a:29:66:05:6d:47:93:39:11:9b:b2:17:ae:87:59:d8:c8:2e:a4:01:4b:55:c8:cc:1f:0d:f5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.dodlive.mil

62

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dodlive.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

184jayhawks.dodlive.mil
afrl.dodlive.mil
afspace.dodlive.mil
airman.dodlive.mil
alaska.coastguard.dodlive.mil
allhands.coastguard.dodlive.mil
armylive.dodlive.mil
balancingthebasin.armylive.dodlive.mil
bootcamp.coastguard.dodlive.mil
chaplaincorps.navylive.dodlive.mil
coastguard.dodlive.mil
commissaryconnection.dodlive.mil
dantespulse.dodlive.mil
dasadec.dodlive.mil
dodlive-sandbox.dodlive.mil
donosbp.navylive.dodlive.mil
ew-navalstem.navylive.dodlive.mil
frcsw.navylive.dodlive.mil
futureforce.navylive.dodlive.mil
greatlakes.coastguard.dodlive.mil
greenfleet.dodlive.mil
jackson.armylive.dodlive.mil
jag.navylive.dodlive.mil
kentuckyguard.dodlive.mil
mariners.coastguard.dodlive.mil
midatlantic.coastguard.dodlive.mil
minationalguard.dodlive.mil
mscsealift.dodlive.mil
myafn.dodlive.mil
navalaviationnews.navylive.dodlive.mil
navalstem.navylive.dodlive.mil
navcms.dma.mil
navylive.dodlive.mil
navymedicine.navylive.dodlive.mil
navysustainability.dodlive.mil
ncojournal.dodlive.mil
ncolcoe.armylive.dodlive.mil
nmcb11.navylive.dodlive.mil
northwest.coastguard.dodlive.mil
pacesetterlive.dodlive.mil
peosoldier.armylive.dodlive.mil
plainsguardian.dodlive.mil
publicweb.dodlive.mil
purview.dodlive.mil
ra.defense.dodlive.mil
rcnsc.dodlive.mil
reporter.dodlive.mil
safety.navylive.dodlive.mil
science.dodlive.mil
scnewsltr.dodlive.mil
seabeemagazine.navylive.dodlive.mil
smtc.dodlive.mil
support.dodlive.mil
truax.dodlive.mil
usaceportland.armylive.dodlive.mil
usasd.armylive.dodlive.mil
usnhistory.navylive.dodlive.mil
vaguard.dodlive.mil
wallawalla.armylive.dodlive.mil
warriorcare.dodlive.mil
www.dodlive.mil
www.ncolcoeworldcampus.army.mil

Other certificates including the domain name dodlive.mil

(limited to 100 certificates)
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
*.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
*.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
*.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
*.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
www.dodlive.mil

Certificate

The complete raw certificate details for www.dodlive.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KT7VKH5IqkWgFPYyH5+
FKyYyOGsDXsp1NsUJ85FfKH9rileHgs2uc7uXBAsIuhhNISFhow6SgS9r92pW3uA
4IQYFDQ9HFD1KURAm1zveDszfbax2gp2/TR8auRygFF9fAocm5UdmfwWxrpjRUlH
p5ImeALhFmkkocsenMmKqxHJ1Pu6YoUDZkWIbEYj94wB5eyYY/WHK69rIBNVpL/u
F6Gy27u5RfVrNvvYw/Ij1nSpJSbGnCCv2S42zK1rfcs1jNK1uzacBJ9oVXpROH+w
/1iqqqe/lMgtXSDcBJ5Q3RzFqrJxtNqpE1N7dqcZcQZimEInBUG7vauuwhH8iVhc
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280774278479905896854418647422995492694788
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 21:04:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-29 21:04:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.dodlive.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28358735850485893671273535134538402865792239725165247696935827418678512259242389028859698701308606331182469241347697895412401175716037528559420456991480857731794430353150673602122938093081176366339455095032246980915781916368602478600282570677833069388669723435871563873091684889534612432446700565330983615798271110066607221441251935194935542671307178345326222336400317797975917708207672461618913164031665227733024783985513977181481777559837599136829576907552632957207747097152797940621421781354005495450230240634766286400110796157932554037812558000255571340278528505810082481847298352145294680769837378072038876929253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6d55f7f8a48dc3ef6abc126e15bc303b4ae3d97e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1712 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '184jayhawks.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afrl.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afspace.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airman.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaska.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allhands.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balancingthebasin.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bootcamp.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaplaincorps.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commissaryconnection.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dantespulse.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dasadec.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodlive-sandbox.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donosbp.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ew-navalstem.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frcsw.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futureforce.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatlakes.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenfleet.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackson.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jag.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kentuckyguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariners.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midatlantic.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minationalguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mscsealift.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myafn.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navalaviationnews.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navalstem.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navcms.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navymedicine.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navysustainability.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncojournal.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncolcoe.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmcb11.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwest.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacesetterlive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peosoldier.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plainsguardian.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicweb.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purview.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ra.defense.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcnsc.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reporter.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safety.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'science.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scnewsltr.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seabeemagazine.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtc.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truax.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usaceportland.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usasd.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usnhistory.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallawalla.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warriorcare.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncolcoeworldcampus.army.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ff87b86270000040300463044022075e0f8ab3c61e12de558b05310f4b49ce4460c842aae0f5103ea263b0951f40202205fd4b39db9cc44bdab937cf8e06c57341561527f87b2413e49eaea5d4c6270370075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ff87b865600000403004630440220029022583ce1924f8f72ae9df4d78b2f4e94b96f560acf15b33a9c32213c6d91022066f9807f5c7cf11719fc755eff73f658cf6d295d327820ebd9940ea32b5c2716
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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