closedbeta.spot.dmdc.mil

- U.S. Government -

Issued by DOD ID SW CA-37

About this certificate

This digital certificate with serial number 02:77:d7 was issued on by U.S. Government.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: subject:localityName MUST appear if subject:organizationName, subject:givenName, or subject:surname fields are present but the subject:stateOrProvinceName field is absent. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: subject:stateOrProvinceName MUST appear if the subject:organizationName, subject:givenName, or subject:surname fields are present and subject:localityName is absent. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

U.S. Government

Organization: U.S. Government
Organization unit: DOD
Organization unit: PKI
Organization unit: OSD
Country: US

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Organization unit: PKI
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:77:d7
Serial Number (int): 161751
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: 5c:39:b2:f0:5d:41:a2:a9:1b:5a:1f:2f:6d:09:38:99:a6:27:d3:c7
AuthorityKeyId: 16:24:7e:f7:2d:c1:ef:92:3f:be:44:e7:54:5e:e9:fe:17:ba:f3:a1

Fingerprint (sha1): 16:a2:7c:a1:d7:de:82:c4:b4:cb:9b:84:1a:06:d5:62:08:e6:5a:0d
Fingerprint (sha256): 7d:4f:24:64:69:9b:a8:be:0a:a6:fe:6f:61:fc:b3:cd:22:eb:4e:0b:26:81:e9:ab:71:6b:92:23:94:51:f4:1b

Issuing Certificate URL: http://crl.disa.mil/sign/DODIDSWCA_37.cer

Revocation information

OCSP Server: http://ocsp.disa.mil
CRL Distribution Point: http://crl.disa.mil/crl/DODIDSWCA_37.crl

Check the revocation status for certificate closedbeta.spot.dmdc.mil

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for closedbeta.spot.dmdc.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

closedbeta.spot.dmdc.mil

Other certificates including the domain name dmdc.mil

(limited to 100 certificates)
dbids-global-enroll.dmdc.mil
dmdc.osd.mil
vpnr.dmdc.mil
icat.dmdc.mil
ravpn4.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
ravpn3.dmdc.mil
vpnm.dmdc.mil
dmdc.mil
ravpn1.dmdc.mil
spottest-ws.dmdc.mil
training.topss.dmdc.mil
dmdc.mil
ravpn1.dmdc.mil
coburn.dmdc.mil
coburn.dmdc.mil
dbids-global-enroll.dmdc.mil
coburn.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
opmverify.dmdc.osd.mil
dmdc.mil
dmdc.mil
ravpn3.dmdc.mil
dmdc.mil
dbids-japan-enroll.dmdc.mil
check.dmdc.osd.mil
utility.spot.dmdc.mil
topss.training.dmdc.mil
dbids.dmdc.mil
dmdc.mil
fmts-pss.dmdc.mil
dmdc.mil
vpnw.dmdc.mil
dmdc.mil
dbids-global-enroll.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.osd.mil
icat.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
spot.dmdc.mil
training.topss.dmdc.mil
dmdc.mil
dbids-global-enroll.dmdc.mil
ravpn3.dmdc.mil
spot-ws.dmdc.mil
ravpn4.dmdc.mil
spot-training.dmdc.mil
dbids-global-enroll.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
topss.dmdc.mil
topss.dmdc.mil
dmdc.mil
closedbeta.topss.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
vpnw.dmdc.mil
dmdc.mil
dmdc.mil
swft.dmdc.mil
dbids.dmdc.mil
topsstest.dmdc.mil
dbids-global.dmdc.mil
vpnl.dmdc.mil
swft.dmdc.mil
swft.dmdc.osd.mil
oracle-f5-external-prod-poo1.cpms.osd.mil
dmdc.mil
topss.dmdc.mil
dmdc.mil
dmdc.mil
ravpn4.dmdc.mil
ravpn1.dmdc.mil
dmdc.mil
closedbeta.spot.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.osd.mil
dmdc.mil
spot.dmdc.mil
dmdc.mil
dmdc.mil

Certificate

The complete raw certificate details for closedbeta.spot.dmdc.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgDCEtsrvC4Npor1oKoE
4Ed6BlvXrB1YJNki6IjXZBa7R6S8/f/n8a7jpWkpHWMCW4NM+QdT4bdtQT1zB6ba
Yh929hFdM2upWGTjCfdbeDjRRzYFRMTEzUGCcd4Egcyoa6Z/aXBg4Y5xBXN/Audh
eYaSlHNRT6qZQVbSRidWCLePXDYgTtDYgB/WsqFcHM66/jyEOhRPZA2YqULQvHrf
wQd+ONrqAMdgrsNkDvrajjPZTPlKEmdRq+V/OKQnNODpj7K3IgrSPiokxgv3L8WU
abDAhTgUUAMNkyGTtSSLb4y38MKMkh2NPNjureKKT5XgBHO2Ee9iDo3+TpdxasfP
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 161751
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOD ID SW CA-37'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-10 15:22:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-10 15:22:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OSD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'closedbeta.spot.dmdc.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21460885677382289335163155334308826191782136651905136888795083287394631321507567851566477379444109892487025237244135228602724500765232011126467030823188768096716301880896551265723436490828105406529772858566771980836694245420115464128151463027097461998442679222155377514469878584389660717966602080009104832185367630002870040155764117120523913319365965492374990820341420161404896470708546290959289061324467594431509976376327718126734319067610945045972778295114952664625359891326712284855412537343426486648109160229476463932495197874311773385856418829581022738078630782219413571009945123443542364684446278598886674648877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 16247ef72dc1ef923fbe44e7545ee9fe17baf3a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c39b2f05d41a2a91b5a1f2f6d093899a627d3c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/sign/DODIDSWCA_37.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.disa.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/crl/DODIDSWCA_37.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'closedbeta.spot.dmdc.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.2.1.11.39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.8.2.2 (iKEIntermediate)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000f2f05c439d81342befe8a606c07e8475a6e57432a1f0dd18c525124fbecb05c4ad5bcda14353fb8ed55742b9a2f087d2f8567a1c398bc4761414fa982805dc09c15592c7f95dbff676d4f4356e92999b5530d9b3c54af5e67c7b5160d039af525eb9e78731ba3e5cb509b7bcac1a3b69be04d90e20ae1a0f450342fc88bc506caa14134158d3ec0ea9c61a1736a30b34dde9c93c6f4a7125b580e6e9764bf42e1f0971e095ce1d76527625a4880c28e41340a9759286280bdcca2e4a4848351438a372d1882681db5019bc1281dcc01b64c55f1f0c8c8b4b1816777e7ddd2876e141f64b5c2bb2c6a0052de5323e271327dd84a780509b4dbf785fd9e61a28e