www.pentagon.mil

Issued by R3

About this certificate

This digital certificate with serial number 04:52:88:1e:9a:31:ad:7b:a8:bd:72:a7:7e:5d:a3:54:5e:3e was issued on by Let's Encrypt.

With 61 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.pentagon.mil

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:52:88:1e:9a:31:ad:7b:a8:bd:72:a7:7e:5d:a3:54:5e:3e
Serial Number (int): 376533231718317394521019458083875445825086
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 22:6b:bb:88:69:52:c0:e2:99:d8:b4:14:00:c0:2d:8e:71:80:fe:42
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ae:82:a3:1a:29:35:a6:c6:d8:c7:74:c0:8c:8c:64:50:0f:f5:41:81
Fingerprint (sha256): 85:c9:52:cf:e4:89:36:42:0a:35:bf:a9:63:ed:2c:08:08:78:30:8e:b5:1b:c5:4e:28:88:79:e8:9b:81:a7:99

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.pentagon.mil

61

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pentagon.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arkansas.nationalguard.mil
co.ng.mil
dc.ng.mil
ky.ng.mil
oig.dia.mil
pac.whs.mil
www.afneurope.net
www.afnpacific.net
www.army.nationalguard.mil
www.budget.mil
www.cac.mil
www.centcom.mil
www.cloud.mil
www.cybercom.mil
www.dcaa.mil
www.dcma.mil
www.dcsa.mil
www.defense.mil
www.defenseculture.mil
www.defenselink.mil
www.dfas.mil
www.dhra.mil
www.dia.mil
www.dimoc.mil
www.dla.mil
www.dod.mil
www.dodig.mil
www.dote.osd.mil
www.dpaa.mil
www.dsp.dla.mil
www.dspo.mil
www.dss.mil
www.dtra.mil
www.esd.whs.mil
www.hacc.mil
www.jbmdl.jb.mil
www.jbml.jb.mil
www.jcs.mil
www.jcu.mil
www.jiatfs.southcom.mil
www.jpeocbrnd.osd.mil
www.jtfb.southcom.mil
www.jtfgtmo.southcom.mil
www.jtnc.mil
www.jwac.mil
www.metc.mil
www.nationalguard.mil
www.nro.gov
www.nro.mil
www.pacom.mil
www.pentagon.mil
www.people.mil
www.pfpa.mil
www.prs.mil
www.repi.mil
www.southcom.mil
www.spacecom.mil
www.stratcom.mil
www.usfj.mil
www.warriorcare.mil
www.whitehousecommsagency.mil

Other certificates including the domain name pentagon.mil

(limited to 100 certificates)
www.dami.army.pentagon.mil
fa49.hqda.pentagon.mil
www.dma.mil
enbosswistagingcac.ocar.army.pentagon.mil
isrtrain.hqda.pentagon.mil
www.dma.mil
adminapps1.hqda.pentagon.mil
www.dma.mil
www.dma.mil
www.pentagon.mil
www.dma.mil
HQDAC2N00062-03.hqda.pentagon.mil
www.dma.mil
ariddashboard.ocar.army.pentagon.mil
www.dma.mil
www.pentagon.mil
www.asamra.army.mil
visitors.pentagon.mil
eeoa.army.pentagon.mil
jagc61-250.army.pentagon.mil
www.g357intranet.hqda.pentagon.mil
wias.hqda.pentagon.mil
www.pentagon.mil
www.acp.army.pentagon.mil
jspwin.pentagon.mil
www.dma.mil
meeting.pentagon.mil
pubssod2.acsap.hqda.pentagon.mil
citrixgw1.hqda.pentagon.mil
saprp.pentagon.mil
arba.army.pentagon.mil
*.hqda.pentagon.mil
minuteman.ngb.army.mil
www.dma.mil
www.pentagon.mil
www.daig.pentagon.mil
arba.army.pentagon.mil
arba.army.pentagon.mil
www.dma.mil
www.pentagon.mil
www.dma.mil
enbossteamtrackanon.ocar.army.pentagon.mil
www.dami.army.pentagon.mil
rbuild.pentagon.mil
SSOREGISTRATION.OCAR.ARMY.PENTAGON.MIL
EPASR.OCAR.ARMY.PENTAGON.MIL
smms.army.pentagon.mil
www.dma.mil
www.dma.mil
staging.rovr.army.pentagon.mil
smartbook.armyg1.pentagon.mil
RbuilderMMSupplemental.pentagon.mil
www.atrrs.army.pentagon.mil
pmdwtstest.ocar.army.pentagon.mil
interface.rovr.army.pentagon.mil
www.dma.mil
drrb-risk-reserve.acsap.hqda.pentagon.mil
www.dma.mil
cppm-pwn-s4.nsmc.pentagon.mil
www.dma.mil
usarbasops.ocar.army.pentagon.mil
vdi.hqda.pentagon.mil
www.dma.mil
aewrs.hqda.pentagon.mil
ssoregistrationdev.ocar.army.pentagon.mil
actsonline.army.mil
fdbtraining.ocar.army.pentagon.mil
ocsp5.army.pentagon.mil
visitors.pentagon.mil
eis.hqda.pentagon.mil
ecdrs.ocar.army.pentagon.mil
citrixgw2.hqda.pentagon.mil
www.dma.mil
drr-risk.acsap.hqda.pentagon.mil
citrixgw2.hqda.pentagon.mil
portal.doha.pentagon.mil
interface.eval.atrrs.army.pentagon.mil
ecdrs.ocar.army.pentagon.mil
www.g357intranet.hqda.pentagon.mil
www.dma.mil
www.amhs.pentagon.mil
cppm-pwn-s2.nsmc.pentagon.mil
www.dma.mil
fmwebdav.hqda.pentagon.mil
prissod1.acsap.hqda.pentagon.mil
www.asamra.army.mil
staging.rovr.army.pentagon.mil
www.dma.mil
www.dma.mil
connect.dtmo.pentagon.mil
www.atrrs.army.pentagon.mil
www.dma.mil
wias.pentagon.mil
casa.army.mil
rbuilder.pentagon.mil
webmail.dtmo.pentagon.mil
isr.hqda.pentagon.mil
www.dma.mil
arba.army.pentagon.mil
enbosscsg.ocar.army.pentagon.mil

Certificate

The complete raw certificate details for www.pentagon.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8B0tgJbDs9zFqZZ/vHEf
hooemRTsTdUlGQcf3+vCZQvKJgvpuK1m8j9hEIlxcuyYxiAzTs4YF8WMAemGAB8L
wdTZQkTDkroUaW7GX19aoH4WGX+X0aKwrOZ89owVsaKlEBqGEqM0QmlsUdEDskAI
WBAkUusXbp1DeAXcuqc69AE1JicQWTT4UMH5k+WuU79dCfS+H7isNWr65e/Y6mZF
hw/7F+qVW+Wrjb+a0l26HV6tF+SshC3/Z7tNjUa7+qRUWrWFKxQIWBzF7xjPyGj7
btO6LZuaHh1spOT8fMshhsx5E2CmSQ6fumjEF2AKk5/7zP3jPBsHsCLL7isgMnAd
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 376533231718317394521019458083875445825086
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-30 20:15:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-29 20:15:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pentagon.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30311581273356649108239150563075780368610132448783014824146936621846815570473882246987615536304063346815014496647713187469233834701998041539869506057256054953283193738076855784178984187005606606631832679990581688271040097177026864418574068677036318778696654703469491991190738396605164722533403395489868198045490711522029105178867263053835427485080601620499334030351113329610323702436853727664132570451650905404366635875674968536975282115664444782939834525565885180064843367818419885143860440919338369250517079767360145888014336825489361678648630460489815853557398716699104638439865747787864011692468826626236626246963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							226bbb886952c0e299d8b41400c02d8e7180fe42
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1018 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkansas.nationalguard.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co.ng.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc.ng.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ky.ng.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oig.dia.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pac.whs.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afneurope.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afnpacific.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.army.nationalguard.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.budget.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cac.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cloud.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cybercom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dcaa.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dcma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dcsa.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defense.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defenseculture.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defenselink.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dfas.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dhra.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dia.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dimoc.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dla.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dod.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dodig.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dote.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dpaa.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsp.dla.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dspo.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dss.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dtra.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esd.whs.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hacc.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jbmdl.jb.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jbml.jb.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcs.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcu.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jiatfs.southcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jpeocbrnd.osd.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jtfb.southcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jtfgtmo.southcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jtnc.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jwac.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metc.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationalguard.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nro.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nro.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pacom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pentagon.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.people.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pfpa.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prs.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.repi.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spacecom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stratcom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usfj.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warriorcare.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whitehousecommsagency.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d5c3a61370000040300483046022100ce98d8e8f909e118e1327d25f48092791cce95cf92782d9afdf6bfe493c2900a022100ee7ba8b871b30a7ed21ef3ab8e2a2b3d99322b98519ca816ca9e3b427efecc5e00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d5c3a61800000040300473045022100cb9a370c0cc6eecd259e36138eec9eb36edf68af2d5a7895289ddd503c0711300220456ef20ebe70e49e1d4518bdd797654495b9374cc1523bb9ee5b315d6cd5bbe0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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