www.dodlive.mil

Issued by R3

About this certificate

This digital certificate with serial number 03:80:72:5d:e8:92:59:ad:93:9a:31:4f:ab:9d:6f:55:53:a7 was issued on by Let's Encrypt.

With 64 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.dodlive.mil

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:80:72:5d:e8:92:59:ad:93:9a:31:4f:ab:9d:6f:55:53:a7
Serial Number (int): 305045020353402281193007385102791141053351
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0c:b6:8e:4c:c4:17:bc:ea:be:e0:f4:d3:fe:77:e6:36:ad:cb:a6:a4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fc:b0:a6:3c:76:d8:ad:1c:59:b4:7e:65:da:84:64:b1:cc:b3:96:20
Fingerprint (sha256): 6a:67:92:ba:f3:5a:25:ad:81:e0:f8:61:18:99:05:69:b9:bb:c4:38:2d:5b:96:3f:f6:7a:fb:d7:49:3f:2e:ba

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.dodlive.mil

64

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dodlive.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

184jayhawks.dodlive.mil
afrl.dodlive.mil
afspace.dodlive.mil
airman.dodlive.mil
alaska.coastguard.dodlive.mil
allhands.coastguard.dodlive.mil
armylive.dodlive.mil
balancingthebasin.armylive.dodlive.mil
bootcamp.coastguard.dodlive.mil
chaplaincorps.navylive.dodlive.mil
coastguard.dodlive.mil
commissaryconnection.dodlive.mil
dantespulse.dodlive.mil
dasadec.dodlive.mil
dodlive-sandbox.dodlive.mil
donosbp.navylive.dodlive.mil
ew-navalstem.navylive.dodlive.mil
frcsw.navylive.dodlive.mil
futureforce.navylive.dodlive.mil
greatlakes.coastguard.dodlive.mil
greenfleet.dodlive.mil
jackson.armylive.dodlive.mil
jag.navylive.dodlive.mil
kentuckyguard.dodlive.mil
mariners.coastguard.dodlive.mil
midatlantic.coastguard.dodlive.mil
minationalguard.dodlive.mil
mscsealift.dodlive.mil
myafn.dodlive.mil
navalaviationnews.navylive.dodlive.mil
navalstem.navylive.dodlive.mil
navylive.dodlive.mil
navymedicine.navylive.dodlive.mil
navysustainability.dodlive.mil
ncojournal.dodlive.mil
ncolcoe.armylive.dodlive.mil
nmcb11.navylive.dodlive.mil
northwest.coastguard.dodlive.mil
pacesetterlive.dodlive.mil
peosoldier.armylive.dodlive.mil
plainsguardian.dodlive.mil
publicweb.dodlive.mil
purview.dodlive.mil
ra.defense.dodlive.mil
rcnsc.dodlive.mil
reporter.dodlive.mil
safety.navylive.dodlive.mil
science.dodlive.mil
scnewsltr.dodlive.mil
seabeemagazine.navylive.dodlive.mil
sfb.dodlive.mil
smtc.dodlive.mil
support.dodlive.mil
truax.dodlive.mil
usaceportland.armylive.dodlive.mil
usasd.armylive.dodlive.mil
usnhistory.navylive.dodlive.mil
vaguard.dodlive.mil
wallawalla.armylive.dodlive.mil
warriorcare.dodlive.mil
www.dodlive.mil
www.ffsp.navy.mil
www.ncoworldwide.army.mil
www.ready.navy.mil

Other certificates including the domain name dodlive.mil

(limited to 100 certificates)
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
*.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
*.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
*.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
*.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
www.dodlive.mil

Certificate

The complete raw certificate details for www.dodlive.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ta5lLbg5WIAEkFpNx3C
lN7WiPqaP0bceQiCvpsVf8fTpgWx2wD7TajN/xUTEBZZ8TxEh/G1vkW62aHYJGm7
BYLsUY8ZfvHzPZOHzEygKUtvNm+PoxZTEZrpEvN6w5cOaMZMzRqauvxwe5fQNiSa
Ac9/1Km1RWwyzVLBokJsg0iNnDS8KsRf0c2sUvNPafGGHw1437QmwOj62NT65Z/W
9jt0ciFHO/KO/2h/gXKQMxHnVTQYsnm1i2bCkV29IAz+Er7I+3scZjSrU74Nr92u
yWiTsbb7zYMdmL3WWn/D5bepbh26fHwqAjFIEvSoSXodFTOo3pbTl92pPVh46YMq
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305045020353402281193007385102791141053351
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-07 19:00:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-05 19:00:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.dodlive.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28935557703744424719395622862173717396269338712517538015476359757928835409984086354664785130902234329233819578050089751625140398491020408982451376811753954245339752667747381189744044885534379640361874741273436854552119650831223072482949353896186283294906073272845719671493233563671734311872122076023856312836800061628865096095696074752881368972658008726655082517734103488664956682769250910766428817863399175956796577368309062289604091742146753959750420939255742132326607321945464017136108168429177296857994612479171229348644435014699901803385019380893776184571277082071632414795119948661476219515945301704778583321197
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0cb68e4cc417bceabee0f4d3fe77e636adcba6a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1746 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '184jayhawks.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afrl.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afspace.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airman.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaska.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allhands.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balancingthebasin.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bootcamp.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaplaincorps.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commissaryconnection.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dantespulse.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dasadec.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodlive-sandbox.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donosbp.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ew-navalstem.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frcsw.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futureforce.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatlakes.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenfleet.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackson.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jag.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kentuckyguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariners.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midatlantic.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minationalguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mscsealift.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myafn.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navalaviationnews.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navalstem.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navymedicine.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navysustainability.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncojournal.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncolcoe.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmcb11.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwest.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacesetterlive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peosoldier.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plainsguardian.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicweb.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purview.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ra.defense.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcnsc.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reporter.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safety.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'science.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scnewsltr.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seabeemagazine.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfb.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtc.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truax.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usaceportland.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usasd.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usnhistory.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallawalla.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warriorcare.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ffsp.navy.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncoworldwide.army.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ready.navy.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186bda8fd690000040300473045022079a1b133ff57bf91126c18419ee15cb6202ea57e96c9757dff844afbf9a71e9e022100ddf86caa0d1e73e4e1d85a8ac1b233745f62aedbc407c4b63ebd183ac6b87dfa007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000186bda8fd8a00000403004730450220484d45b6697e8ceea4fd9b372ac48acb40cfda5ea84ba77d15c5031559a56636022100f27304362ca8d11e6797432a9310714d65d6f5e106f85ea149fb86d1ee5665c9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00178b677a552f893ebf13df5b8f5a2afd467216a313b6c36da3ce956cb01810c03e1aca8f069d35c308161e4cb442c5dc95e51470f2b01ccbc0b040ee148197533e4e1c15ee7bc246adaf27669ab47511f47260a6b5af14f2b9035368bf775a77da724b902896e3c37e0098b8721e3c1eb583b313b8848b88af9e9aa119b2222775d358df2dd86502da443b975031ed0a573f268921a3c8104b06ff911d38fc5dfe691330c0246f06c4e46d54cfa81ecb2c0f4466bebcdd5a0995b2ed0770162ff6d79293432f0be0d8ba7aaefb7d9dacff7f3a3196f52ef656246557e5ea4eb78c87b4ce393e054f96759b2fb9b052a190b909a8f3de4df289d74d06aa9848f2