rdais.platform.milcloud.mil

- U.S. GOVERNMENT -

Issued by DOD ID SW CA-38

About this certificate

This digital certificate with serial number fa:3e was issued on by U.S. Government.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: subject:localityName MUST appear if subject:organizationName, subject:givenName, or subject:surname fields are present but the subject:stateOrProvinceName field is absent. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: subject:stateOrProvinceName MUST appear if the subject:organizationName, subject:givenName, or subject:surname fields are present and subject:localityName is absent. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

U.S. GOVERNMENT

Organization: U.S. GOVERNMENT
Organization unit: DoD
Organization unit: PKI
Organization unit: DISA
Country: US

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Organization unit: PKI
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): fa:3e
Serial Number (int): 64062
Serial Number lenght: 16 bits, 2 octets

SubjectKeyId: 38:7f:cd:48:8e:ea:68:1d:6e:38:12:05:76:b2:6f:fd:50:f4:c2:19
AuthorityKeyId: 8e:c5:b9:cc:fc:ce:8e:53:b4:2a:ce:e8:11:2a:cf:9b:29:6c:67:ca

Fingerprint (sha1): 76:3f:54:a5:24:8c:95:2d:f7:9a:c1:9b:ba:b3:d6:1d:89:46:ba:ca
Fingerprint (sha256): b7:33:94:73:71:93:8d:bb:dd:de:96:95:22:00:62:2a:3c:8b:ec:34:22:24:ce:b7:94:20:4b:86:46:e7:be:b6

Issuing Certificate URL: http://crl.disa.mil/sign/DODIDSWCA_38.cer

Revocation information

OCSP Server: http://ocsp.disa.mil
CRL Distribution Point: http://crl.disa.mil/crl/DODIDSWCA_38.crl

Check the revocation status for certificate rdais.platform.milcloud.mil

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rdais.platform.milcloud.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rdais.platform.milcloud.mil
rdais.navy.mil
rdais.stax.disa.mil

Other certificates including the domain name milcloud.mil

(limited to 100 certificates)
rdais.platform.milcloud.mil
cbrnis.jpmis.milcloud.mil
rdais.platform.milcloud.mil
rdais-test.platform.milcloud.mil
myseco-preprod.platform.milcloud.mil
trtcs.milcloud.mil
manager011u.platform.milcloud.mil
mcipac.mcop.milcloud.mil
utinvpn.milcloud.mil
ugunvpn.milcloud.mil
myseco-preprod.platform.milcloud.mil
els023uvpn.milcloud.mil
manager006u.platform.milcloud.mil
myseco-test.platform.milcloud.mil
apacs.milcloud.mil
ugunvpn.milcloud.mil
gcdsaf7.af.mil
milcloud.mil
myseco-test.platform.milcloud.mil
usaf-acq-test.platform.milcloud.mil
manager012u.platform.milcloud.mil
usaf-acq.platform.milcloud.mil
usaf-acq-test.platform.milcloud.mil
mcincr.mcop.milcloud.mil
manager011u.platform.milcloud.mil
cbrnis.jpmis.milcloud.mil
mciwest.mcop.milcloud.mil
usaf-acq.platform.milcloud.mil
rdais-test.platform.milcloud.mil
efoia.milcloud.mil
www.milcloud.mil
utinvpn.milcloud.mil
ui.csd.disa.mil
geo.mcop.milcloud.mil
rdais.platform.milcloud.mil
manager006u.platform.milcloud.mil
mcieast.mcop.milcloud.mil
apacs-stg.milcloud.mil
myseco-test.platform.milcloud.mil
efoia.milcloud.mil
USAFA-COP.psif.milcloud.mil
els023uvpn.milcloud.mil
efoia.milcloud.mil
milcloud.mil
ugunvpn.milcloud.mil
utinhuhl.platform.milcloud.mil
issp.platform.milcloud.mil
efoia.milcloud.mil
mcicom.mcop.milcloud.mil
utinvpn.milcloud.mil
utinhuhk.platform.milcloud.mil
myseco-preprod.platform.milcloud.mil
manager006u.platform.milcloud.mil

Certificate

The complete raw certificate details for rdais.platform.milcloud.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6j87to8b8N0IhcRBXn+7
6I2sVmlK78ff9NcnzJ9MXVOipznVaw2JGc0SRddF3KLGY3zrZfmrd0i3/cZJUeRu
Dmd+Npxq/R5EE1ZF6ul5rWQE3FtuxDfoOCOtO0il4Ptr86avQJZk3uVWWpNzNRgP
91NKqcBaS9Pgf7xaGGxAcrJWKlsNt0uN8NmKcSUZNVk5hByfB0hAhAT79dBiKoxA
r22zT3TU/2TIx2is/ouGTcYABCJ1zerti7GR00MTPt31XVUjY/V2pXShlAXSDwkx
SVzEQJoZxKeuz3Cqze5GtQYPRZifN5Oue93WWeB08o+hnKvu8gNKGPY8I34VvDWN
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 64062
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOD ID SW CA-38'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-17 23:10:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-18 23:10:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. GOVERNMENT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DISA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rdais.platform.milcloud.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29570944841941958487935678133007991594649472916127350482212789508354196934366539494534367381449666587962828169582598661888429144532900373747661709792548356830057049956522777446219834747076427110199167684453574672107697100100151831567316658690756139894506012973339021076999698274547045063336760417722274369395097448175534383493376208131402834900763565861312999382608661597459218098468671619662590736905231771310771680432823537693422825754349821323181753634938927634733871910411322348475175038194316788549549926658854065339063349713360165551403168659591160915491554064807803511767618868200513582343688863030675460427257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8ec5b9ccfcce8e53b42acee8112acf9b296c67ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							387fcd488eea681d6e38120576b26ffd50f4c219
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/sign/DODIDSWCA_38.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.disa.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/crl/DODIDSWCA_38.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdais.platform.milcloud.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdais.navy.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdais.stax.disa.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.2.1.11.39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.8.2.2 (iKEIntermediate)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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