qkkg-ws-pex2p.area52.afnoapps.usaf.mil

- U.S. Government -

Issued by DOD CA-28

About this certificate

This digital certificate with serial number 01:ea:34 was issued on by U.S. Government.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)
  • Subscriber certificates using the SHA-1 algorithm SHOULD NOT have an expiration date later than 1 Jan 2017 (BRs: 7.1.3)

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Organization unit: PKI
Organization unit: USAF
Country: US

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Organization unit: PKI
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:ea:34
Serial Number (int): 125492
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId: 7d:56:90:c2:72:45:23:73:03:9b:24:5f:86:47:dd:ba:ae:87:51:b5
AuthorityKeyId: 26:b4:ae:aa:2d:8e:e9:8d:8a:6f:b6:b5:5b:9d:ea:4e:ae:b1:9c:69

Fingerprint (sha1): 51:60:62:3d:1f:17:f2:d7:e1:fc:cc:4d:5a:d5:8d:5a:23:27:f5:02
Fingerprint (sha256): 88:d4:5f:70:a2:da:81:31:76:ae:51:35:16:00:0b:32:e5:42:ec:c3:d7:85:3b:6d:ee:9f:b2:d0:b7:8d:ed:65

Issuing Certificate URL: http://crl.disa.mil/sign/DODCA_28.cer

Revocation information

OCSP Server: http://ocsp.disa.mil
CRL Distribution Point: http://crl.disa.mil/crl/DODCA_28.crl
CRL Distribution Point: ldap://crl.gds.disa.mil/cn%3dDOD%20CA-28%2cou%3dPKI%2cou%3dDoD%2co%3dU.S.%20Government%2cc%3dUS?certificaterevocationlist;binary

Check the revocation status for certificate qkkg-ws-pex2p.area52.afnoapps.usaf.mil

2

DNS Names

0

Email Addresses

1

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qkkg-ws-pex2p.area52.afnoapps.usaf.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Any

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qkkg-ws-pex2p.area52.afnoapps.usaf.mil
qkkg-ws-pex2p.misawa.us.af.mil
132.20.254.34

Other certificates including the domain name usaf.mil

(limited to 100 certificates)
FTEV-WXA-B02P.AREA52.AFNOAPPS.USAF.MIL
52vejx-ucpool-001.area52.afnoapps.usaf.mil
52vejx-ucpool-003.area52.afnoapps.usaf.mil
pcwsvm701b.area52.afnoapps.usaf.mil
52vejx-ucpool-001.area52.afnoapps.usaf.mil
52uhhz-ucpool-001.area52.afnoapps.usaf.mil
52snaq-ucpool-001.area52.afnoapps.usaf.mil
epex.moody.af.mil
52zhtx-ucpool-004.area52.afnoapps.usaf.mil
plk-rcdb-01.area52.afnoapps.usaf.mil
sammc-eis.lackland.af.mil
52tdka-emts-a2.area52.afnoapps.usaf.mil
HKRV-WS-001P.AREA52.AFNOAPPS.USAF.MIL
52mqna-css-f01v.area52.afnoapps.usaf.mil
52tyfr-ucpool-001.area52.afnoapps.usaf.mil
52sdhm-ucpool-001.area52.afnoapps.usaf.mil
apps.tinker.af.mil
52lktc-as-epex.area52.afnoapps.usaf.mil
mail.acc.af.mil
52PSXX-VPN-003.us.af.mil
AYZZ-WS-001P.AREA52.AFNOAPPS.USAF.MIL
52qkkg-css-f02v.area52.afnoapps.usaf.mil
52mpls-ap-354.AREA52.AFNOAPPS.USAF.MIL
52zhtx-ucpool-002.area52.afnoapps.usaf.mil
52mpls-ws-511.area52.afnoapps.usaf.mil
147PEX.ANG.AF.MIL
qkkg-ws-pex2p.area52.afnoapps.usaf.mil
tstinfra02.tinker.af.mil
eim.us.af.mil
prdinfra01.tinker.afmc.ds.af.mil
apps.afnoapps.usaf.mil
52VDYD-WS-001.area52.afnoapps.usaf.mil
52VEJX-SP-012v.area52.afnoapps.usaf.mil
prdinfra02.tinker.af.mil
AFOSILMS.us.af.mil
52sgbp-WPS-SP13v.area52.afnoapps.usaf.mil
52mlwx-css-f02v.area52.afnoapps.usaf.mil
52VEJX-SP-001v.area52.afnoapps.usaf.mil
gcdsaf17.af.mil
126arw-ii-03.area52.afnoapps.usaf.mil
52PRPX-VPN-001.us.af.mil
uhhz-as-011v.afnoapps.usaf.mil
52PRPX-VPN-002.us.af.mil
52qkkg-css-f01v.area52.afnoapps.usaf.mil
lke-epex-01.area52.afnoapps.usaf.mil
52ljyc-css-f01v.area52.afnoapps.usaf.mil
52vejx-ucpool-002.area52.afnoapps.usaf.mil
52VDYD-WS-002.area52.afnoapps.usaf.mil
samhs.health.us.af.mil
52lxez-ucpool-001.area52.afnoapps.usaf.mil
52mlwx-css-f01v.area52.afnoapps.usaf.mil
52zhtx-ucpool-003.area52.afnoapps.usaf.mil
52zhtx-ucpool-001.area52.afnoapps.usaf.mil

Certificate

The complete raw certificate details for qkkg-ws-pex2p.area52.afnoapps.usaf.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgIDAeo0MA0GCSqGSIb3DQEBBQUAMFcxCzAJBgNVBAYTAlVT
MRgwFgYDVQQKEw9VLlMuIEdvdmVybm1lbnQxDDAKBgNVBAsTA0RvRDEMMAoGA1UE
CxMDUEtJMRIwEAYDVQQDEwlET0QgQ0EtMjgwHhcNMTUwODI4MDEwMzIwWhcNMTcw
OTA4MTU1NzAxWjCBgzELMAkGA1UEBhMCVVMxGDAWBgNVBAoTD1UuUy4gR292ZXJu
bWVudDEMMAoGA1UECxMDRG9EMQwwCgYDVQQLEwNQS0kxDTALBgNVBAsTBFVTQUYx
LzAtBgNVBAMTJnFra2ctd3MtcGV4MnAuYXJlYTUyLmFmbm9hcHBzLnVzYWYubWls
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1WNnKwvvjQq2Hd1rils
0n7WZYTvBOAurI6xDLYknEEJMA2l9khkSAKbCvmHUEgs/tJy2fmtTVkBTEC/0Nqf
mvYnZV2eXUcDwWM2yyRUOOaXp1Uxd9bAxo1CsCtfQExejJLYDnDHrBY0bHkIP4qY
tF5DekkLJe7d7878AjMvdobNcASs7ErfyBH9+3gWtzloOaN3vIXBN4DsKdxu2Xo/
lwsX4JXLwqdDvuAbzAZB/AFB3xNMP5OpXOjZablv67ncDnnWPIP0c+OaakQY7lBK
uC+evP/ZIZlmSt8Li86VIf3L3eI6aYamftnAGTwglJifpln98M3wQZLBEcRptmk3
IwIDAQABo4ICLDCCAigwHwYDVR0jBBgwFoAUJrSuqi2O6Y2Kb7a1W53qTq6xnGkw
HQYDVR0OBBYEFH1WkMJyRSNzA5skX4ZH3bquh1G1MGMGCCsGAQUFBwEBBFcwVTAx
BggrBgEFBQcwAoYlaHR0cDovL2NybC5kaXNhLm1pbC9zaWduL0RPRENBXzI4LmNl
cjAgBggrBgEFBQcwAYYUaHR0cDovL29jc3AuZGlzYS5taWwwDgYDVR0PAQH/BAQD
AgWgMIHDBgNVHR8EgbswgbgwKqAooCaGJGh0dHA6Ly9jcmwuZGlzYS5taWwvY3Js
L0RPRENBXzI4LmNybDCBiaCBhqCBg4aBgGxkYXA6Ly9jcmwuZ2RzLmRpc2EubWls
L2NuJTNkRE9EJTIwQ0EtMjglMmNvdSUzZFBLSSUyY291JTNkRG9EJTJjbyUzZFUu
Uy4lMjBHb3Zlcm5tZW50JTJjYyUzZFVTP2NlcnRpZmljYXRlcmV2b2NhdGlvbmxp
c3Q7YmluYXJ5MFcGA1UdEQRQME6CJnFra2ctd3MtcGV4MnAuYXJlYTUyLmFmbm9h
cHBzLnVzYWYubWlsgh5xa2tnLXdzLXBleDJwLm1pc2F3YS51cy5hZi5taWyHBIQU
/iIwIwYDVR0gBBwwGjALBglghkgBZQIBCwUwCwYJYIZIAWUCAQsSMC0GA1UdJQQm
MCQGCCsGAQUFBwMBBggrBgEFBQcDAgYIKwYBBQUIAgIGBFUdJQAwDQYJKoZIhvcN
AQEFBQADggEBAGsYAdpm5DnRHcR5VBwIyQjcKgEBYIciT2Tf50VYKYR4/O9l7x5V
RIzn6uxejo+xVQjZOKCepLHJP0KTSIzrFHK/fmlVSkPZvtuuSNbbdO1+RoK8gcHe
t+N4SbjTwQ4MEzHk/BLeluTVrR+rL5ovuWgecL/QrCqasOlRgpkEf6akkgE+8DoS
GP1059VctZRHQofaOcUyE3blB2SC/sBvIRKfD/1hv+PUk0TI8QIahyOoRRSQdeql
xUtwdYsxJKkExGBg/RE4TORfLahNKcwqiu2pv+rqCmxqbjG3wjry10TEPDIhPPZ5
dmKNVQhkYrEdatgqVu5BEV23iYNuHVopYE0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1WNnKwvvjQq2Hd1rils
0n7WZYTvBOAurI6xDLYknEEJMA2l9khkSAKbCvmHUEgs/tJy2fmtTVkBTEC/0Nqf
mvYnZV2eXUcDwWM2yyRUOOaXp1Uxd9bAxo1CsCtfQExejJLYDnDHrBY0bHkIP4qY
tF5DekkLJe7d7878AjMvdobNcASs7ErfyBH9+3gWtzloOaN3vIXBN4DsKdxu2Xo/
lwsX4JXLwqdDvuAbzAZB/AFB3xNMP5OpXOjZablv67ncDnnWPIP0c+OaakQY7lBK
uC+evP/ZIZlmSt8Li86VIf3L3eI6aYamftnAGTwglJifpln98M3wQZLBEcRptmk3
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 125492
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOD CA-28'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-28 01:03:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-08 15:57:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USAF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qkkg-ws-pex2p.area52.afnoapps.usaf.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22638844430342979197086185283359695020043693272370507062050981126327967069679282701165003623917525665591048480789181926138370655766222420351437622725098302247881555127462939420407817326531749758511013637128056392255378362555951738595697764769799829001351725617095402990116745587310187545159522139408409875144193188657094594379610255690068783894922437259731779170661140784349375997982590702276914967362117687746602357368708782416745270007192799723757479681312260022423449483215554351478394498242347147105888896707721386567515300501932872711624527104499834808359938644651485384355127299333050137621484848169731347789603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26b4aeaa2d8ee98d8a6fb6b55b9dea4eaeb19c69
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d5690c272452373039b245f8647ddbaae8751b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/sign/DODCA_28.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.disa.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (187 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/crl/DODCA_28.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://crl.gds.disa.mil/cn%3dDOD%20CA-28%2cou%3dPKI%2cou%3dDoD%2co%3dU.S.%20Government%2cc%3dUS?certificaterevocationlist;binary'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qkkg-ws-pex2p.area52.afnoapps.usaf.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qkkg-ws-pex2p.misawa.us.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:7|false] OCTET STRING '132.20.254.34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.2.1.11.5 (usDODClass3)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.2.1.11.18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.8.2.2 (iKEIntermediate)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37.0 (anyExtendedKeyUsage)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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