dmdc.mil
- DMDC -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 1d:a2:68:cc:ca:b5:2a:02:dd:3b:f8:95:73:01:d9:2d was issued on by Entrust, Inc..
With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
DMDC
Organization:
DMDC
State / Province:
California
Locality: Seaside
Country: US
Locality: Seaside
Country: US
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 1d:a2:68:cc:ca:b5:2a:02:dd:3b:f8:95:73:01:d9:2dSerial Number (int): 39390889564724121023170633812880251181
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId: 03:16:00:16:47:8f:d0:5e:1a:1a:9c:e0:a2:a7:a3:ee:5d:20:74:6c
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 56:e2:54:b2:a4:aa:f6:a2:b2:43:65:56:74:26:a6:3f:4c:1d:42:d1
Fingerprint (sha256): 89:30:04:cc:4d:8d:53:d7:d5:8f:c0:dc:22:35:5b:39:39:04:26:4f:7c:0b:83:9b:01:f6:73:55:49:ee:4d:30
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate dmdc.mil
17
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dmdc.mil
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dmdc.mil
*.dmdc.mil
dmdc.osd.mil
*.militaryfuneralhonors.osd.mil
*.dodtap.mil
*.dodsurveys.mil
*.cap.mil
*.dmdc.osd.mil
*.int.dmdc.osd.mil
militaryfuneralhonors.osd.mil
dodtap.mil
dodsurveys.mil
cap.mil
*.cpms.osd.mil
*.dcpas.osd.mil
cpms.osd.mil
dcpas.osd.mil
*.dmdc.mil
dmdc.osd.mil
*.militaryfuneralhonors.osd.mil
*.dodtap.mil
*.dodsurveys.mil
*.cap.mil
*.dmdc.osd.mil
*.int.dmdc.osd.mil
militaryfuneralhonors.osd.mil
dodtap.mil
dodsurveys.mil
cap.mil
*.cpms.osd.mil
*.dcpas.osd.mil
cpms.osd.mil
dcpas.osd.mil
Other certificates including the domain name dmdc.mil
(limited to 100 certificates)
dbids-global-enroll.dmdc.mil
dmdc.osd.mil
vpnr.dmdc.mil
icat.dmdc.mil
ravpn4.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
ravpn3.dmdc.mil
vpnm.dmdc.mil
dmdc.mil
ravpn1.dmdc.mil
spottest-ws.dmdc.mil
training.topss.dmdc.mil
dmdc.mil
ravpn1.dmdc.mil
coburn.dmdc.mil
coburn.dmdc.mil
dbids-global-enroll.dmdc.mil
coburn.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
opmverify.dmdc.osd.mil
dmdc.mil
dmdc.mil
ravpn3.dmdc.mil
dmdc.mil
dbids-japan-enroll.dmdc.mil
check.dmdc.osd.mil
utility.spot.dmdc.mil
topss.training.dmdc.mil
dbids.dmdc.mil
dmdc.mil
fmts-pss.dmdc.mil
dmdc.mil
vpnw.dmdc.mil
dmdc.mil
dbids-global-enroll.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.osd.mil
icat.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
spot.dmdc.mil
training.topss.dmdc.mil
dmdc.mil
dbids-global-enroll.dmdc.mil
ravpn3.dmdc.mil
spot-ws.dmdc.mil
ravpn4.dmdc.mil
spot-training.dmdc.mil
dbids-global-enroll.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
topss.dmdc.mil
topss.dmdc.mil
dmdc.mil
closedbeta.topss.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
vpnw.dmdc.mil
dmdc.mil
dmdc.mil
swft.dmdc.mil
dbids.dmdc.mil
topsstest.dmdc.mil
dbids-global.dmdc.mil
vpnl.dmdc.mil
swft.dmdc.mil
swft.dmdc.osd.mil
oracle-f5-external-prod-poo1.cpms.osd.mil
dmdc.mil
topss.dmdc.mil
dmdc.mil
dmdc.mil
ravpn4.dmdc.mil
ravpn1.dmdc.mil
dmdc.mil
closedbeta.spot.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.osd.mil
dmdc.mil
spot.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.osd.mil
vpnr.dmdc.mil
icat.dmdc.mil
ravpn4.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
ravpn3.dmdc.mil
vpnm.dmdc.mil
dmdc.mil
ravpn1.dmdc.mil
spottest-ws.dmdc.mil
training.topss.dmdc.mil
dmdc.mil
ravpn1.dmdc.mil
coburn.dmdc.mil
coburn.dmdc.mil
dbids-global-enroll.dmdc.mil
coburn.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
opmverify.dmdc.osd.mil
dmdc.mil
dmdc.mil
ravpn3.dmdc.mil
dmdc.mil
dbids-japan-enroll.dmdc.mil
check.dmdc.osd.mil
utility.spot.dmdc.mil
topss.training.dmdc.mil
dbids.dmdc.mil
dmdc.mil
fmts-pss.dmdc.mil
dmdc.mil
vpnw.dmdc.mil
dmdc.mil
dbids-global-enroll.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.osd.mil
icat.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
spot.dmdc.mil
training.topss.dmdc.mil
dmdc.mil
dbids-global-enroll.dmdc.mil
ravpn3.dmdc.mil
spot-ws.dmdc.mil
ravpn4.dmdc.mil
spot-training.dmdc.mil
dbids-global-enroll.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
topss.dmdc.mil
topss.dmdc.mil
dmdc.mil
closedbeta.topss.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
vpnw.dmdc.mil
dmdc.mil
dmdc.mil
swft.dmdc.mil
dbids.dmdc.mil
topsstest.dmdc.mil
dbids-global.dmdc.mil
vpnl.dmdc.mil
swft.dmdc.mil
swft.dmdc.osd.mil
oracle-f5-external-prod-poo1.cpms.osd.mil
dmdc.mil
topss.dmdc.mil
dmdc.mil
dmdc.mil
ravpn4.dmdc.mil
ravpn1.dmdc.mil
dmdc.mil
closedbeta.spot.dmdc.mil
dmdc.mil
dmdc.mil
dmdc.mil
dmdc.osd.mil
dmdc.mil
spot.dmdc.mil
dmdc.mil
dmdc.mil
Certificate
The complete raw certificate details for dmdc.mil in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIQHaJozMq1KgLdO/iVcwHZLTANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y MTAyMTkwMDU0MjdaFw0yMjAyMTkwMDU0MjZaMFYxCzAJBgNVBAYTAlVTMRMwEQYD VQQIEwpDYWxpZm9ybmlhMRAwDgYDVQQHEwdTZWFzaWRlMQ0wCwYDVQQKEwRETURD MREwDwYDVQQDEwhkbWRjLm1pbDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGdvRv/CzzTwqF0szRAdy6WvBYLdIgAvYb6Ol5R73Nr7H0szIEl9zly5L5p 66BKkOJS923iEPE36THYtnrL9LhUtwkrpLfndnBC2sF9/asysQJMSB4foGwkcqfX XTXVPbHECbkGVmnLfcYx1zJyViydFfWdb/edFrinZ0hOLnu2vbA9T0ZDv88p7GRY I91jkmcF0vHEdmcD0OJhhJiPcTyt4VVZS3iqqnnBcC/rOTSbp0gTfEwMrfKxcuYP mS8z6NsUa6Z+viUMqev5Cz/QWcOte1EKLDP4U2xeFVITQJ4tZA1l2BNHE6/qzZp7 o7aasEdOi5YHSCYeJras39CJyU0CAwEAAaOCAqowggKmMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFAMWABZHj9BeGhqc4KKno+5dIHRsMB8GA1UdIwQYMBaAFIKicHTd vFM/z3vU981/p2DGCky/MGgGCCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0 cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50 cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjAzBgNVHR8ELDAqMCigJqAkhiJodHRw Oi8vY3JsLmVudHJ1c3QubmV0L2xldmVsMWsuY3JsMIIBIwYDVR0RBIIBGjCCARaC CGRtZGMubWlsggoqLmRtZGMubWlsggxkbWRjLm9zZC5taWyCHyoubWlsaXRhcnlm dW5lcmFsaG9ub3JzLm9zZC5taWyCDCouZG9kdGFwLm1pbIIQKi5kb2RzdXJ2ZXlz Lm1pbIIJKi5jYXAubWlsgg4qLmRtZGMub3NkLm1pbIISKi5pbnQuZG1kYy5vc2Qu bWlsgh1taWxpdGFyeWZ1bmVyYWxob25vcnMub3NkLm1pbIIKZG9kdGFwLm1pbIIO ZG9kc3VydmV5cy5taWyCB2NhcC5taWyCDiouY3Btcy5vc2QubWlsgg8qLmRjcGFz Lm9zZC5taWyCDGNwbXMub3NkLm1pbIINZGNwYXMub3NkLm1pbDAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEwGA1UdIARFMEMw NwYKYIZIAYb6bAoBBTApMCcGCCsGAQUFBwIBFhtodHRwczovL3d3dy5lbnRydXN0 Lm5ldC9ycGEwCAYGZ4EMAQICMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQAh63s0Z+rt/1AHrRDGgSs1XKtunHyEVEnbVOgvHV4K8IX3tLcv tjRG9n6Jpm1jbE3rkws3qoPpvvOiFQ9HL9pusKLU5us0SBC60c7Mvn7Q8GRKU9dd 68U5jCCFogt9J9/AC0+NwTmkGVzh+H/dx0SrAA/nOEx5cBfqhNCxdxiMnD7HELoD ORzn2XL/9vqWUQV5ZHrvxlkR7YlDm9pMVmeRMXRAdXrTtllSwkKGXRdz5IJCHADw 2rJHKqpF4oW3upJzWsN1jdBI8sXc24cKyUL8jg035Lz03LDxalm1PCRcil8tUaZz Ra7JgoXAVrXL330hlq21zhGfvkvQCjEsHDaW -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZ29G/8LPNPCoXSzNEB3 Lpa8Fgt0iAC9hvo6XlHvc2vsfSzMgSX3OXLkvmnroEqQ4lL3beIQ8TfpMdi2esv0 uFS3CSukt+d2cELawX39qzKxAkxIHh+gbCRyp9ddNdU9scQJuQZWact9xjHXMnJW LJ0V9Z1v950WuKdnSE4ue7a9sD1PRkO/zynsZFgj3WOSZwXS8cR2ZwPQ4mGEmI9x PK3hVVlLeKqqecFwL+s5NJunSBN8TAyt8rFy5g+ZLzPo2xRrpn6+JQyp6/kLP9BZ w617UQosM/hTbF4VUhNAni1kDWXYE0cTr+rNmnujtpqwR06LlgdIJh4mtqzf0InJ TQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 39390889564724121023170633812880251181 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-19 00:54:27 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-19 00:54:26 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seaside' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DMDC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dmdc.mil' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24441776714624657898853821707424634320673098414791847744291119198820068843295315225558346602042045793474186825391053908464993105971018443697664836094143478233836948665184790660048599320847947876405786488552179859786724709449734583645048411491512779030968472388165174604424448142921754047818838248930959621599706062242587501596986313003934002232412474355686813126154097399246416021237888712282103902084090205815621608450878118088355805774802780009766458473726846100547726884276131748206704576572230291630937950546142232167424027698080197734993800633542188411480280587611897616460765577162273899633530045764583769622861 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 03160016478fd05e1a1a9ce0a2a7a3ee5d20746c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (282 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmdc.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmdc.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmdc.osd.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.militaryfuneralhonors.osd.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dodtap.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dodsurveys.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cap.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmdc.osd.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.int.dmdc.osd.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'militaryfuneralhonors.osd.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodtap.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodsurveys.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cap.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cpms.osd.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dcpas.osd.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpms.osd.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcpas.osd.mil' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0021eb7b3467eaedff5007ad10c6812b355cab6e9c7c845449db54e82f1d5e0af085f7b4b72fb63446f67e89a66d636c4deb930b37aa83e9bef3a2150f472fda6eb0a2d4e6eb344810bad1ceccbe7ed0f0644a53d75debc5398c2085a20b7d27dfc00b4f8dc139a4195ce1f87fddc744ab000fe7384c797017ea84d0b177188c9c3ec710ba03391ce7d972fff6fa96510579647aefc65911ed89439bda4c566791317440757ad3b65952c242865d1773e482421c00f0dab2472aaa45e285b7ba92735ac3758dd048f2c5dcdb870ac942fc8e0d37e4bcf4dcb0f16a59b53c245c8a5f2d51a67345aec98285c056b5cbdf7d2196adb5ce119fbe4bd00a312c1c3696