lke-epex-01.area52.afnoapps.usaf.mil

- U.S. Government -

Issued by DOD CA-27

About this certificate

This digital certificate with serial number 01:1a:6f was issued on by U.S. Government.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DNSNames must have a valid TLD. (BRs: 3.2.2.4)
  • Subscriber certificates MUST have the extended key usage extension present (BRs: 7.1.2.3)
  • 1 DNS name(s) are bare public suffixes: lke-epex-01 The domain SHOULD NOT have a bare public suffix (awslabs certlint)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Organization unit: PKI
Organization unit: USAF
Country: US

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Organization unit: PKI
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:1a:6f
Serial Number (int): 72303
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId: de:2f:46:4b:e4:3d:00:63:04:f0:aa:37:b1:92:4b:03:a6:d4:08:52
AuthorityKeyId: 1b:04:04:40:45:5e:7d:2b:5e:0b:cc:99:65:4d:f3:a4:de:90:77:17

Fingerprint (sha1): 12:94:b4:26:ba:f8:ee:62:5a:0f:b2:e7:81:01:ac:5b:07:9d:9f:8c
Fingerprint (sha256): d4:5f:36:72:70:9a:15:93:d4:fe:2d:a8:4e:c2:57:58:31:0a:77:b3:e5:14:bc:1d:26:50:2c:66:a0:48:1e:13

Issuing Certificate URL: http://crl.disa.mil/sign/DODCA_27.cer

Revocation information

OCSP Server: http://ocsp.disa.mil
CRL Distribution Point: http://crl.disa.mil/crl/DODCA_27.crl
CRL Distribution Point: ldap://crl.gds.disa.mil/cn%3dDOD%20CA-27%2cou%3dPKI%2cou%3dDoD%2co%3dU.S.%20Government%2cc%3dUS?certificaterevocationlist;binary

Check the revocation status for certificate lke-epex-01.area52.afnoapps.usaf.mil

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lke-epex-01.area52.afnoapps.usaf.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Extensions

7 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lke-epex-01.area52.afnoapps.usaf.mil
lke-epex-01

Other certificates including the domain name usaf.mil

(limited to 100 certificates)
FTEV-WXA-B02P.AREA52.AFNOAPPS.USAF.MIL
52vejx-ucpool-001.area52.afnoapps.usaf.mil
52vejx-ucpool-003.area52.afnoapps.usaf.mil
pcwsvm701b.area52.afnoapps.usaf.mil
52vejx-ucpool-001.area52.afnoapps.usaf.mil
52uhhz-ucpool-001.area52.afnoapps.usaf.mil
52snaq-ucpool-001.area52.afnoapps.usaf.mil
epex.moody.af.mil
52zhtx-ucpool-004.area52.afnoapps.usaf.mil
plk-rcdb-01.area52.afnoapps.usaf.mil
sammc-eis.lackland.af.mil
52tdka-emts-a2.area52.afnoapps.usaf.mil
HKRV-WS-001P.AREA52.AFNOAPPS.USAF.MIL
52mqna-css-f01v.area52.afnoapps.usaf.mil
52tyfr-ucpool-001.area52.afnoapps.usaf.mil
52sdhm-ucpool-001.area52.afnoapps.usaf.mil
apps.tinker.af.mil
52lktc-as-epex.area52.afnoapps.usaf.mil
mail.acc.af.mil
52PSXX-VPN-003.us.af.mil
AYZZ-WS-001P.AREA52.AFNOAPPS.USAF.MIL
52qkkg-css-f02v.area52.afnoapps.usaf.mil
52mpls-ap-354.AREA52.AFNOAPPS.USAF.MIL
52zhtx-ucpool-002.area52.afnoapps.usaf.mil
52mpls-ws-511.area52.afnoapps.usaf.mil
147PEX.ANG.AF.MIL
qkkg-ws-pex2p.area52.afnoapps.usaf.mil
tstinfra02.tinker.af.mil
eim.us.af.mil
prdinfra01.tinker.afmc.ds.af.mil
apps.afnoapps.usaf.mil
52VDYD-WS-001.area52.afnoapps.usaf.mil
52VEJX-SP-012v.area52.afnoapps.usaf.mil
prdinfra02.tinker.af.mil
AFOSILMS.us.af.mil
52sgbp-WPS-SP13v.area52.afnoapps.usaf.mil
52mlwx-css-f02v.area52.afnoapps.usaf.mil
52VEJX-SP-001v.area52.afnoapps.usaf.mil
gcdsaf17.af.mil
126arw-ii-03.area52.afnoapps.usaf.mil
52PRPX-VPN-001.us.af.mil
uhhz-as-011v.afnoapps.usaf.mil
52PRPX-VPN-002.us.af.mil
52qkkg-css-f01v.area52.afnoapps.usaf.mil
lke-epex-01.area52.afnoapps.usaf.mil
52ljyc-css-f01v.area52.afnoapps.usaf.mil
52vejx-ucpool-002.area52.afnoapps.usaf.mil
52VDYD-WS-002.area52.afnoapps.usaf.mil
samhs.health.us.af.mil
52lxez-ucpool-001.area52.afnoapps.usaf.mil
52mlwx-css-f01v.area52.afnoapps.usaf.mil
52zhtx-ucpool-003.area52.afnoapps.usaf.mil
52zhtx-ucpool-001.area52.afnoapps.usaf.mil

Certificate

The complete raw certificate details for lke-epex-01.area52.afnoapps.usaf.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdO6pHNsPqGGp9GV6xUj
6ZvldFV1YZeZV/lWV2an/px0cwuqyudh4KC078vR+4upfkdFvszOy0wvdgEnJti8
TclVwfGPQQGYXmfa1nyS/PbIMhpCNqulDZpvGGltp+C36trWR/NwslW3SVyLqz8u
IrCp2MvhxWDQcikqFM8UyMbRiYvgdfD24/nTXI5VZ5mwWMzp+aflaPpWBP6Dhkbw
DOWTyPSBjU4WKIQGXIB/0MgIYSxYB8oNN2Cd6iXdVAaMkrVxdwOwoS66k/yj3rCK
VE4xpx0g9pWG0geBgYgjcZWJSGt9HhU5tan9Ku24xWqvwTpaFzLvTKHGm+17mIZA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 72303
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOD CA-27'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-03-28 13:12:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-28 13:12:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USAF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lke-epex-01.area52.afnoapps.usaf.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21438681035899602429256372191779484091594358157716203702273565586852291660560284355837905697072010824952642921497159884551531226940629552802696889859283850665444867482655833231355532376961025961492598344607448274344401092382909195294029516305581229450486664331788829609433313433851184005731161154876535748669509901838327850056393704231964282377670571469250999446494140913323941074857899701346915700008414002304342788218157580596274054175525558347886749503124458578174923402729735836679786597172271314440064058329085003659227720898436361644547088057953933804877488326925451887213236170371948690456639419514480006414533
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1b040440455e7d2b5e0bcc99654df3a4de907717
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de2f464be43d006304f0aa37b1924b03a6d40852
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/sign/DODCA_27.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.disa.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (187 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/crl/DODCA_27.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://crl.gds.disa.mil/cn%3dDOD%20CA-27%2cou%3dPKI%2cou%3dDoD%2co%3dU.S.%20Government%2cc%3dUS?certificaterevocationlist;binary'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lke-epex-01.area52.afnoapps.usaf.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lke-epex-01'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.2.1.11.5 (usDODClass3)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.2.1.11.18
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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