www.dma.mil

Issued by R3

About this certificate

This digital certificate with serial number 03:bb:5f:4f:8d:f0:5a:4f:24:dd:d0:8b:b5:44:22:88:fa:b1 was issued on by Let's Encrypt.

With 83 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.dma.mil

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bb:5f:4f:8d:f0:5a:4f:24:dd:d0:8b:b5:44:22:88:fa:b1
Serial Number (int): 325096350139410086315260858215661226752689
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 85:47:db:a8:6e:de:c5:33:a8:b4:78:0d:a4:0e:c6:c9:60:ec:21:be
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7f:d6:6e:ce:54:b0:4d:ed:a7:f7:61:7f:7e:c1:1b:22:98:3f:dc:d7
Fingerprint (sha256): 6e:79:f3:f3:7a:e1:c8:ea:c2:ec:2b:ce:e8:f8:b1:7d:46:71:a0:88:dd:3f:60:97:db:e6:43:d3:52:dc:22:24

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.dma.mil

83

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dma.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arkansas.nationalguard.mil
at.dod.mil
briefingbook.dma.mil
co.ng.mil
dc.ng.mil
dvisc.dma.mil
inside.dma.mil
jiraservicedesk.dma.mil
media.dma.mil
oig.dia.mil
pwservicedesk.dma.mil
sd.ng.mil
servicedesk.dma.mil
slite.dma.mil
static.dma.mil
tasa.dma.mil
travel.dod.mil
video.dma.mil
www.aaro.mil
www.afneurope.net
www.afnpacific.net
www.army.nationalguard.mil
www.budget.mil
www.cac.mil
www.centcom.mil
www.cloud.mil
www.cybercom.mil
www.dcaa.mil
www.dcma.mil
www.dcsa.mil
www.defense.mil
www.defenseculture.mil
www.defenselink.mil
www.defensesbirsttr.mil
www.dfas.mil
www.dhra.mil
www.dia.mil
www.dimoc.mil
www.dinfos.dma.mil
www.dla.mil
www.dma.mil
www.dod.mil
www.dodig.mil
www.dodmantech.mil
www.dote.osd.mil
www.dpaa.mil
www.dsp.dla.mil
www.dspo.mil
www.dss.mil
www.dtra.mil
www.esd.whs.mil
www.jbmdl.jb.mil
www.jbml.jb.mil
www.jcs.mil
www.jcu.mil
www.jecc.ustranscom.mil
www.jiatfs.southcom.mil
www.jpra.mil
www.jtfb.southcom.mil
www.jtfgtmo.southcom.mil
www.jtnc.mil
www.jwac.mil
www.metc.mil
www.nationalguard.mil
www.nro.mil
www.pacom.mil
www.pentagon.mil
www.people.mil
www.pfpa.mil
www.prevention.mil
www.prs.mil
www.publicweb.dma.mil
www.repi.mil
www.shadowsedge.mil
www.southcom.mil
www.spacecom.mil
www.stratcom.mil
www.travel.dod.mil
www.usfj.mil
www.warriorcare.mil
www.web.dma.mil
www.web.mil
www.whitehousecommsagency.mil

Other certificates including the domain name dma.mil

(limited to 100 certificates)
www.dma.mil
www.dma.mil
dras.dinfos.dma.mil
www.dma.mil
www.dma.mil
www.dma.mil
www.dma.mil
www.pentagon.mil
www.dma.mil
www.dma.mil
www.dma.mil
www.pentagon.mil
dcp.dinfos.dma.mil
www.dma.mil
www.dodlive.mil
smc-ctgwy
dma-rdg.dma.pa.mil
www.dodlive.mil
www.pentagon.mil
connect38.dma.mil
tracking.dmaana.dma.mil
www.dodlive.mil
www.dodlive.mil
afstaging.dma.mil
remoteconnect.dma.mil
www.dodlive.mil
www.dma.mil
www.dma.mil
www.dma.mil
www.pentagon.mil
www.dodlive.mil
hnforms.dmasa.dma.mil
www.dma.mil
www.dodlive.mil
www.pentagon.mil
www.dma.mil
jhns.release.dma.mil
www.dma.mil
www.dma.mil
www.dodlive.mil
www.dma.mil
www.dma.mil
www.dma.mil
www.dma.mil
www.dma.mil
www.dodlive.mil
www.dodlive.mil
www.dma.mil
www.dma.mil
www.dma.mil
www.dodlive.mil
www.dma.mil
www.dma.mil
dels.dinfos.dma.mil
www.dodlive.mil
www.dma.mil
aftraining.dma.mil
dras.dinfos.dma.mil
www.dma.mil
www.dma.mil
DMALyncHQ.dma.mil
www.dodlive.mil
navcms.dma.mil
www.dodlive.mil
www.pentagon.mil
www.dodlive.mil
www.pentagon.mil
www.dma.mil
www.dma.mil
www.dma.mil
www.dma.mil
DMALyncHQ.dma.mil
www.dodlive.mil
www.dma.mil
www.dma.mil
navcms.staging.dma.mil
www.dma.mil
www.dma.mil
external.dma.mil
www.pentagon.mil
www.pentagon.mil
www.dma.mil
www.dma.mil
www.dma.mil
www.dodlive.mil
www.dodlive.mil
www.dma.mil
navcms.dma.mil
dras.dinfos.dma.mil
arkansas.nationalguard.mil
portal.dinfos.dma.mil
www.dma.mil
www.dma.mil
www.dma.mil
www.dma.mil
www.dma.mil
www.dma.mil
www.dma.mil
www.dma.mil
www.pentagon.mil

Certificate

The complete raw certificate details for www.dma.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy8up6gyqlWHvB39t3bY
qU8bkoGWDNa2kd+66Jzcjt1H+Uwzan1qpAudldbMYu51oCYB0cBWCnGzQvJgv+Wa
A9XI4GT65nDh40i8Pn8zCvuhdFSzjgBpAJkrnVd7v4YnJ53Yjjqc+hM2ibY5Q//b
gg+VuBmfTXw6lmZXnaYyEKd8S1PDeoV16TpY35TgW8GioNvHSyqTemZu2TlYGDRa
eUwA9W46gh4K2FBK4zHKbb5mWF8Dt4iDGImyds80kYXhXYDTxxIOjjsvff74vKa1
capKmNREqtaLzhbMAzuN2e1uqUW7zdiqOXIlAOqXy6IGg6a1+yrHhfC2KvniwBFf
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325096350139410086315260858215661226752689
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 20:07:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-08 20:07:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.dma.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21105063361859552877554978805031850565567641671482231701708454575519303096279149907180504130440379654899315760133562093018414795126312869411999091430845609897254374151692087332665013069200541168442771599932358101989686534939738476414799447767470472946118677320926741325849338453593047814961104874909392501730015313264257670837374059095817805837625390694394654069986663576609130641309985610805764151440734792762622492677755503133297253026762746351633496066538794332404878155551877539371522679971808905833289721615893738672928434854932291681190440561584902231602263407188480695868628729472722432391782259126837655461693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8547dba86edec533a8b4780da40ec6c960ec21be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1425 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkansas.nationalguard.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.dod.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briefingbook.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co.ng.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc.ng.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvisc.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiraservicedesk.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oig.dia.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwservicedesk.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sd.ng.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slite.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasa.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.dod.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aaro.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afneurope.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afnpacific.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.army.nationalguard.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.budget.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cac.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cloud.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cybercom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dcaa.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dcma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dcsa.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defense.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defenseculture.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defenselink.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defensesbirsttr.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dfas.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dhra.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dia.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dimoc.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dinfos.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dla.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dod.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dodig.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dodmantech.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dote.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dpaa.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsp.dla.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dspo.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dss.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dtra.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esd.whs.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jbmdl.jb.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jbml.jb.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcs.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcu.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jecc.ustranscom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jiatfs.southcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jpra.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jtfb.southcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jtfgtmo.southcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jtnc.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jwac.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metc.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationalguard.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nro.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pacom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pentagon.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.people.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pfpa.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prevention.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prs.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.publicweb.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.repi.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shadowsedge.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spacecom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stratcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travel.dod.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usfj.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warriorcare.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.web.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.web.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whitehousecommsagency.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cf00d4f2e000004030046304402207577fd699b01296bef591169b139f755e49e256d5cdba9fa419b38455cf5d240022048c0735f66a79d95e18a423e87ad9ecb689991cdddf1d9ae2c432cf444639916007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cf00d4f280000040300483046022100af33bd7e4e22feeeb272eb86850d2b5716d7ded0b015b2f0babcaa95daee4aff022100ba4a2de4ff29e163624b865220f2fec0f51275f5fcdc04dd3dc50e7108529833
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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