prdinfra02.tinker.af.mil
- U.S. Government -
Issued by DOD ID SW CA-38
About this certificate
This digital certificate with serial number 01:07:51 was issued on by U.S. Government.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: subject:localityName MUST appear if subject:organizationName, subject:givenName, or subject:surname fields are present but the subject:stateOrProvinceName field is absent. (BRs: 7.1.4.2.2)
- Subscriber Certificate: subject:stateOrProvinceName MUST appear if the subject:organizationName, subject:givenName, or subject:surname fields are present and subject:localityName is absent. (BRs: 7.1.4.2.2)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)
U.S. Government
Organization:
U.S. Government
Organization unit: DoD
Organization unit: PKI
Organization unit: USAF
Organization unit: DoD
Organization unit: PKI
Organization unit: USAF
Country:
US
U.S. Government
Organization:
U.S. Government
Organization unit: DoD
Organization unit: PKI
Organization unit: DoD
Organization unit: PKI
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:07:51Serial Number (int): 67409
Serial Number lenght: 17 bits, 3 octets
SubjectKeyId: a1:51:b2:2d:ed:1c:22:35:f2:1e:14:29:1c:54:43:e1:8d:e4:ff:63
AuthorityKeyId: 8e:c5:b9:cc:fc:ce:8e:53:b4:2a:ce:e8:11:2a:cf:9b:29:6c:67:ca
Fingerprint (sha1): 4e:78:43:f3:09:93:ec:ff:8c:86:47:87:58:78:6f:5a:31:43:14:f3
Fingerprint (sha256): ae:54:f2:61:da:a9:bc:d7:11:1d:4a:c8:82:ab:e0:49:77:f4:e6:d4:71:0d:39:00:34:fc:3d:ac:35:ed:77:57
Issuing Certificate URL: http://crl.disa.mil/sign/DODIDSWCA_38.cer
Revocation information
OCSP Server: http://ocsp.disa.milCRL Distribution Point: http://crl.disa.mil/crl/DODIDSWCA_38.crl
Check the revocation status for certificate prdinfra02.tinker.af.mil
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for prdinfra02.tinker.af.mil
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
prdinfra02.tinker.af.mil
prdmtier01.tinker.af.mil
prdmtier02.tinker.af.mil
prdinfra01.area52.afnoapps.usaf.mil
wbcpins.tinker.af.mil
asimis.tinker.af.mil
prdmtier01.tinker.af.mil
prdmtier02.tinker.af.mil
prdinfra01.area52.afnoapps.usaf.mil
wbcpins.tinker.af.mil
asimis.tinker.af.mil
Other certificates including the domain name af.mil
(limited to 100 certificates)
sso.nasiccloud.af.mil
angelfire.vdl.afrl.af.mil
www.honorguard.af.mil
apc3-ec-01.ang.ds.af.mil
cqmap.cce.af.mil
www.afncr.hq.af.mil
coins9iapp.scott.af.mil
www.afcyber.af.mil
www.afrc.af.mil
ar.afcec-cloud.af.mil
*.coder-gov.nasic.af.mil
oars189.dng.cie.af.mil
mdm.test.cce.af.mil
afbrac.hq.af.mil
WEDNG11645.dng.cie.af.mil
52arty-ws-005v.afrc.af.mil
www.af.mil
efoia.cce.af.mil
www.gil.cetl.gunter.af.mil
hcloginorigin.maxwell.af.mil
lrt2.my.af.mil
mow-g-mrly-001.afgate.ad.af.mil
deamsbpel.cie.af.mil
portal.jbsa.af.mil
ej-crl2.my.af.mil
ihs.afrc.af.mil
UAT.MEDXS.AF.MIL
owscollab.barksdale.af.mil
deamsoam0010a.cie.af.mil
acesdsso.cie.af.mil
deamsgrdintconsole.cie.af.mil
www.ang.af.mil
asli.af.mil
wargaming.hq.af.mil
wildcard.cce.af.mil
PETERSON-MAIL1.afnoc.af.mil
cie-sdp-dp.cie.af.mil
www.uat.medxs.af.mil
www.damis.afaa.hq.af.mil
netdev.hq.af.mil
afrcdesktops.us.af.mil
kir-g-mrly-002.afgate.ad.af.mil
bermuda.af.mil
crosslink.af.mil
development.lcmp.af.mil
remote1.afwa.af.mil
armsweb.afpc.randolph.af.mil
aiportal.acc.af.mil
f16ocm.hill.af.mil
diode.nasic.af.mil
aftoc.hill.af.mil
glens0057-web8.frontrange.afspc.ds.af.mil
ows.sembach.af.mil
www.honorguard.af.mil
pass.hq.af.mil
w40.afpc.randolph.af.mil
wecstclnt85.gateway.cie.af.mil
www.airforcefaptest.af.mil
52tymx-ws-200.randolph.aetc.ds.af.mil
www.afcyber.af.mil
www.airforcehollywood.af.mil
apims.af.mil
bsds.cie.af.mil
www.af.mil
www.af.mil
www.af.mil
adapts2.test.cce.af.mil
webmail.clear.af.mil
itsrd.cie.af.mil
www.afrc.af.mil
esgweb.afccc.af.mil
aflegalassistance.law.af.mil
deamsdisint1console.cie.af.mil
mocc.vandenberg.af.mil
52vejx-ucpool-001.area52.afnoapps.usaf.mil
deamsobiint2.cie.af.mil
bermuda.af.mil
www.af.mil
widds.afwa.af.mil
mail.ok.afmc.af.mil
teams.afsoc.af.mil
*.bermuda.af.mil
www.airforcehollywood.af.mil
c5galaxy.robins.af.mil
jagusaf.jag.af.mil
teleport.nasic.af.mil
nssi.cce.af.mil
digitalu.af.mil
mxprod.hq.af.mil
mail.kirtland.af.mil
etca.randolph.af.mil
www.my.af.mil
asli.af.mil
reports.arpc.afrc.af.mil
cx.hanscom.af.mil
software.af.mil
webmail.ajab.nosc.afcent.af.mil
afaems.us.af.mil
owsjet17.us.af.mil
bipweather.afwa.af.mil
angelfire.vdl.afrl.af.mil
www.honorguard.af.mil
apc3-ec-01.ang.ds.af.mil
cqmap.cce.af.mil
www.afncr.hq.af.mil
coins9iapp.scott.af.mil
www.afcyber.af.mil
www.afrc.af.mil
ar.afcec-cloud.af.mil
*.coder-gov.nasic.af.mil
oars189.dng.cie.af.mil
mdm.test.cce.af.mil
afbrac.hq.af.mil
WEDNG11645.dng.cie.af.mil
52arty-ws-005v.afrc.af.mil
www.af.mil
efoia.cce.af.mil
www.gil.cetl.gunter.af.mil
hcloginorigin.maxwell.af.mil
lrt2.my.af.mil
mow-g-mrly-001.afgate.ad.af.mil
deamsbpel.cie.af.mil
portal.jbsa.af.mil
ej-crl2.my.af.mil
ihs.afrc.af.mil
UAT.MEDXS.AF.MIL
owscollab.barksdale.af.mil
deamsoam0010a.cie.af.mil
acesdsso.cie.af.mil
deamsgrdintconsole.cie.af.mil
www.ang.af.mil
asli.af.mil
wargaming.hq.af.mil
wildcard.cce.af.mil
PETERSON-MAIL1.afnoc.af.mil
cie-sdp-dp.cie.af.mil
www.uat.medxs.af.mil
www.damis.afaa.hq.af.mil
netdev.hq.af.mil
afrcdesktops.us.af.mil
kir-g-mrly-002.afgate.ad.af.mil
bermuda.af.mil
crosslink.af.mil
development.lcmp.af.mil
remote1.afwa.af.mil
armsweb.afpc.randolph.af.mil
aiportal.acc.af.mil
f16ocm.hill.af.mil
diode.nasic.af.mil
aftoc.hill.af.mil
glens0057-web8.frontrange.afspc.ds.af.mil
ows.sembach.af.mil
www.honorguard.af.mil
pass.hq.af.mil
w40.afpc.randolph.af.mil
wecstclnt85.gateway.cie.af.mil
www.airforcefaptest.af.mil
52tymx-ws-200.randolph.aetc.ds.af.mil
www.afcyber.af.mil
www.airforcehollywood.af.mil
apims.af.mil
bsds.cie.af.mil
www.af.mil
www.af.mil
www.af.mil
adapts2.test.cce.af.mil
webmail.clear.af.mil
itsrd.cie.af.mil
www.afrc.af.mil
esgweb.afccc.af.mil
aflegalassistance.law.af.mil
deamsdisint1console.cie.af.mil
mocc.vandenberg.af.mil
52vejx-ucpool-001.area52.afnoapps.usaf.mil
deamsobiint2.cie.af.mil
bermuda.af.mil
www.af.mil
widds.afwa.af.mil
mail.ok.afmc.af.mil
teams.afsoc.af.mil
*.bermuda.af.mil
www.airforcehollywood.af.mil
c5galaxy.robins.af.mil
jagusaf.jag.af.mil
teleport.nasic.af.mil
nssi.cce.af.mil
digitalu.af.mil
mxprod.hq.af.mil
mail.kirtland.af.mil
etca.randolph.af.mil
www.my.af.mil
asli.af.mil
reports.arpc.afrc.af.mil
cx.hanscom.af.mil
software.af.mil
webmail.ajab.nosc.afcent.af.mil
afaems.us.af.mil
owsjet17.us.af.mil
bipweather.afwa.af.mil
Certificate
The complete raw certificate details for prdinfra02.tinker.af.mil in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIDAQdRMA0GCSqGSIb3DQEBCwUAMF0xCzAJBgNVBAYTAlVT MRgwFgYDVQQKEw9VLlMuIEdvdmVybm1lbnQxDDAKBgNVBAsTA0RvRDEMMAoGA1UE CxMDUEtJMRgwFgYDVQQDEw9ET0QgSUQgU1cgQ0EtMzgwHhcNMTYxMjEzMTQwMDQw WhcNMTkxMjE0MTQwMDQwWjB1MQswCQYDVQQGEwJVUzEYMBYGA1UEChMPVS5TLiBH b3Zlcm5tZW50MQwwCgYDVQQLEwNEb0QxDDAKBgNVBAsTA1BLSTENMAsGA1UECxME VVNBRjEhMB8GA1UEAxMYcHJkaW5mcmEwMi50aW5rZXIuYWYubWlsMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkZkUmjCJLtZXJ1yeM+sI3RNXuESdIj1 ZQdTIXY62KSLSLZO6LO69qUVRSXn7G/h20XThx1I9tyGgLyyJE+/5Cb6nRngu/z+ FVyQq8YCTQhE5d6fflRHweOhAP9E/+dH3KOPAjd6zKbTRtAIDq3Dt/5zfDYZ6qPP 93PvBA0V8VeDErzN8K0z2KaxP+w7QLjQbIiqXS9AjMIbzfP4XckGJPNtblP7/mng lSXPZHJ1W30Lq2Yv/h6XaP7+qxLXSMJTJJ+fihDOXuIIpNcE89vw+V9Rs5506DjV yl6WXjStZJmDAZK54nXiMEvLa31QjzxoYlaPwC4HHDMxnKGnsGOAAwIDAQABo4IB 5zCCAeMwHwYDVR0jBBgwFoAUjsW5zPzOjlO0Ks7oESrPmylsZ8owHQYDVR0OBBYE FKFRsi3tHCI18h4UKRxUQ+GN5P9jMGcGCCsGAQUFBwEBBFswWTA1BggrBgEFBQcw AoYpaHR0cDovL2NybC5kaXNhLm1pbC9zaWduL0RPRElEU1dDQV8zOC5jZXIwIAYI KwYBBQUHMAGGFGh0dHA6Ly9vY3NwLmRpc2EubWlsMA4GA1UdDwEB/wQEAwIFoDA5 BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLmRpc2EubWlsL2NybC9ET0RJRFNX Q0FfMzguY3JsMIGrBgNVHREEgaMwgaCCGHByZGluZnJhMDIudGlua2VyLmFmLm1p bIIYcHJkbXRpZXIwMS50aW5rZXIuYWYubWlsghhwcmRtdGllcjAyLnRpbmtlci5h Zi5taWyCI3ByZGluZnJhMDEuYXJlYTUyLmFmbm9hcHBzLnVzYWYubWlsghV3YmNw aW5zLnRpbmtlci5hZi5taWyCFGFzaW1pcy50aW5rZXIuYWYubWlsMBYGA1UdIAQP MA0wCwYJYIZIAWUCAQsnMCcGA1UdJQQgMB4GCCsGAQUFBwMBBggrBgEFBQcDAgYI KwYBBQUIAgIwDQYJKoZIhvcNAQELBQADggEBAMuZ2nh3LSLHyb5GnRKhnPHTinH3 Y4N2el9YLvmKVRuYtNpKWFi8Kehx4vt53BwqR5xuJ0fW8WkBr9xUlzTYMJjvfJ/j e/4sGHvh5UpGfgqXj/2brsZ4JeWHTXznNRS7NEhQl7MI0YYV6q+KGe1Ofnqt/PQb MUO9wD6g6cnBVBFB1VTE28GHOBy8H3yROwGQu2PT4NZ8ft1v0o5u1p0qGQHn8NKj 7+KvsnxqyCvzJDzr82ZETEdzl9lJCxRcd+DcBtt4lClabBz/BaYQbx35Q+1jZK4x rdK0WHbALEq3/0S4wXecXEHK3Itb9M+OibuLK6KzM3QQP74nl/uQbOjo89M= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkZkUmjCJLtZXJ1yeM+s I3RNXuESdIj1ZQdTIXY62KSLSLZO6LO69qUVRSXn7G/h20XThx1I9tyGgLyyJE+/ 5Cb6nRngu/z+FVyQq8YCTQhE5d6fflRHweOhAP9E/+dH3KOPAjd6zKbTRtAIDq3D t/5zfDYZ6qPP93PvBA0V8VeDErzN8K0z2KaxP+w7QLjQbIiqXS9AjMIbzfP4XckG JPNtblP7/mnglSXPZHJ1W30Lq2Yv/h6XaP7+qxLXSMJTJJ+fihDOXuIIpNcE89vw +V9Rs5506DjVyl6WXjStZJmDAZK54nXiMEvLa31QjzxoYlaPwC4HHDMxnKGnsGOA AwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 67409 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOD ID SW CA-38' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-13 14:00:40 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-14 14:00:40 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USAF' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prdinfra02.tinker.af.mil' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19475410495732890932776606984171858878332108732999852856238465222751208684431076572435536350344296033806581621192937868900903079465100361912702899283026069011924352536312780951220623517325062034495261696148021673666078905027493836729571882017886122939861732416754417467532449462624103246536607507584619189107813740923130739847406228313531361327527443749070451394506172556310309393355195301683368062592863517606413382547325982229930024293106769374604838159687254252790538091355295953806559016081964359674761943489610861505327366776308463679177541431463476483003884749571732095514947794094798670759303147826449832181763 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8ec5b9ccfcce8e53b42acee8112acf9b296c67ca . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a151b22ded1c2235f21e14291c5443e18de4ff63 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/sign/DODIDSWCA_38.cer' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.disa.mil' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/crl/DODIDSWCA_38.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (163 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prdinfra02.tinker.af.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prdmtier01.tinker.af.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prdmtier02.tinker.af.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prdinfra01.area52.afnoapps.usaf.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbcpins.tinker.af.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asimis.tinker.af.mil' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.2.1.11.39 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.8.2.2 (iKEIntermediate) . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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