126arw-ii-03.area52.afnoapps.usaf.mil

- U.S. Government -

Issued by DOD ID SW CA-37

About this certificate

This digital certificate with serial number 2e:13 was issued on by U.S. Government.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Organization unit: PKI
Organization unit: USAF
Country: US

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Organization unit: PKI
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2e:13
Serial Number (int): 11795
Serial Number lenght: 14 bits, 2 octets

SubjectKeyId: b8:df:78:2a:21:dc:58:6d:ee:c7:e1:08:8a:98:82:b6:25:93:40:46
AuthorityKeyId: 16:24:7e:f7:2d:c1:ef:92:3f:be:44:e7:54:5e:e9:fe:17:ba:f3:a1

Fingerprint (sha1): 64:15:90:a8:63:ec:8a:0f:3e:7d:b2:6d:ff:52:26:04:a4:2c:03:52
Fingerprint (sha256): c8:e3:1f:e8:a0:05:7c:1f:87:68:8d:28:a6:cd:c3:f6:4b:f3:7f:98:33:a7:9b:0f:85:ac:7b:36:82:59:6d:e4

Issuing Certificate URL: http://crl.disa.mil/sign/DODIDSWCA_37.cer

Revocation information

OCSP Server: http://ocsp.disa.mil
CRL Distribution Point: http://crl.disa.mil/crl/DODIDSWCA_37.crl

Check the revocation status for certificate 126arw-ii-03.area52.afnoapps.usaf.mil

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 126arw-ii-03.area52.afnoapps.usaf.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

126arw-ii-03.area52.afnoapps.usaf.mil

Other certificates including the domain name usaf.mil

(limited to 100 certificates)
FTEV-WXA-B02P.AREA52.AFNOAPPS.USAF.MIL
52vejx-ucpool-001.area52.afnoapps.usaf.mil
52vejx-ucpool-003.area52.afnoapps.usaf.mil
pcwsvm701b.area52.afnoapps.usaf.mil
52vejx-ucpool-001.area52.afnoapps.usaf.mil
52uhhz-ucpool-001.area52.afnoapps.usaf.mil
52snaq-ucpool-001.area52.afnoapps.usaf.mil
epex.moody.af.mil
52zhtx-ucpool-004.area52.afnoapps.usaf.mil
plk-rcdb-01.area52.afnoapps.usaf.mil
sammc-eis.lackland.af.mil
52tdka-emts-a2.area52.afnoapps.usaf.mil
HKRV-WS-001P.AREA52.AFNOAPPS.USAF.MIL
52mqna-css-f01v.area52.afnoapps.usaf.mil
52tyfr-ucpool-001.area52.afnoapps.usaf.mil
52sdhm-ucpool-001.area52.afnoapps.usaf.mil
apps.tinker.af.mil
52lktc-as-epex.area52.afnoapps.usaf.mil
mail.acc.af.mil
52PSXX-VPN-003.us.af.mil
AYZZ-WS-001P.AREA52.AFNOAPPS.USAF.MIL
52qkkg-css-f02v.area52.afnoapps.usaf.mil
52mpls-ap-354.AREA52.AFNOAPPS.USAF.MIL
52zhtx-ucpool-002.area52.afnoapps.usaf.mil
52mpls-ws-511.area52.afnoapps.usaf.mil
147PEX.ANG.AF.MIL
qkkg-ws-pex2p.area52.afnoapps.usaf.mil
tstinfra02.tinker.af.mil
eim.us.af.mil
prdinfra01.tinker.afmc.ds.af.mil
apps.afnoapps.usaf.mil
52VDYD-WS-001.area52.afnoapps.usaf.mil
52VEJX-SP-012v.area52.afnoapps.usaf.mil
prdinfra02.tinker.af.mil
AFOSILMS.us.af.mil
52sgbp-WPS-SP13v.area52.afnoapps.usaf.mil
52mlwx-css-f02v.area52.afnoapps.usaf.mil
52VEJX-SP-001v.area52.afnoapps.usaf.mil
gcdsaf17.af.mil
126arw-ii-03.area52.afnoapps.usaf.mil
52PRPX-VPN-001.us.af.mil
uhhz-as-011v.afnoapps.usaf.mil
52PRPX-VPN-002.us.af.mil
52qkkg-css-f01v.area52.afnoapps.usaf.mil
lke-epex-01.area52.afnoapps.usaf.mil
52ljyc-css-f01v.area52.afnoapps.usaf.mil
52vejx-ucpool-002.area52.afnoapps.usaf.mil
52VDYD-WS-002.area52.afnoapps.usaf.mil
samhs.health.us.af.mil
52lxez-ucpool-001.area52.afnoapps.usaf.mil
52mlwx-css-f01v.area52.afnoapps.usaf.mil
52zhtx-ucpool-003.area52.afnoapps.usaf.mil
52zhtx-ucpool-001.area52.afnoapps.usaf.mil

Certificate

The complete raw certificate details for 126arw-ii-03.area52.afnoapps.usaf.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv20islsgBz/aQMLUgmRA
65q1q8BN50k8caHKCEXQ6XQO1Ync/T2aivXqGA+pKgBb+Zgyy1yt6AvAaKzEKeI3
NuV0da2w+DZXnXQGm8VnlPq1yMA42WAP/GmtPj5IA5NK+fvm+ssVMRVlRzJ+MhF1
2pwVLA27LGD2RJakiOL1zSVR9/VB/Fft1rrKzyAIi4p6gDjAMubaT8SV/fQKlqV8
PF0mDJpss0T5UwD9nxGpUW4UvoYtoGVkehBPHYZ4FDm+sVVeLhwO9WgIFvnILPgE
Icxmmai6/TtcwkGWBHl159h+lP3IFpOFstdZ+9LepyLvqbGbdciAdfzpNcY2Yko/
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11795
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOD ID SW CA-37'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-13 17:05:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-14 17:05:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USAF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '126arw-ii-03.area52.afnoapps.usaf.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24165332986107869685616161014900457800940467082290284543135592145708404190375081720841771092562405510575263444975571905880718687380389320556343913870852061058034923608662986261593001407111437113964548381915730760083809622426319933947840626423208380996432435467913799966867175213002205162449030248855509888066239335467039101473476637645489953242850325541566570362180678640070357819333740024591270846321580927472125031156569324272286959227895566170644712460110481431175009400053623350484078023363863029695782985175896685301211052816269682891538675942101336314988282849389108248081528503525816562626777958725463457808193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 16247ef72dc1ef923fbe44e7545ee9fe17baf3a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b8df782a21dc586deec7e1088a9882b625934046
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/sign/DODIDSWCA_37.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.disa.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/crl/DODIDSWCA_37.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '126arw-ii-03.area52.afnoapps.usaf.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.2.1.11.39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.8.2.2 (iKEIntermediate)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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