52VDYD-WS-002.area52.afnoapps.usaf.mil

- U.S. Government -

Issued by DOD ID SW CA-37

About this certificate

This digital certificate with serial number 01:a0:89 was issued on by U.S. Government.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DNSNames must have a valid TLD. (BRs: 3.2.2.4)
  • Subscriber Certificate: subject:localityName MUST appear if subject:organizationName, subject:givenName, or subject:surname fields are present but the subject:stateOrProvinceName field is absent. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: subject:stateOrProvinceName MUST appear if the subject:organizationName, subject:givenName, or subject:surname fields are present and subject:localityName is absent. (BRs: 7.1.4.2.2)
  • 1 DNS name(s) are bare public suffixes: 52VDYD-WS-002 The domain SHOULD NOT have a bare public suffix (awslabs certlint)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Organization unit: PKI
Organization unit: USAF
Country: US

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Organization unit: PKI
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:a0:89
Serial Number (int): 106633
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId: 5a:4b:e5:ca:6a:93:86:98:a4:67:1c:22:b8:60:1d:22:07:4f:67:65
AuthorityKeyId: 16:24:7e:f7:2d:c1:ef:92:3f:be:44:e7:54:5e:e9:fe:17:ba:f3:a1

Fingerprint (sha1): e3:31:06:e5:8f:6d:fc:c6:bf:48:af:68:e9:e5:96:96:ac:82:eb:e1
Fingerprint (sha256): de:75:08:8c:4e:ac:9e:f5:67:e0:37:75:60:74:fc:4e:17:6a:17:f4:f5:ae:cd:19:a5:d0:c9:bc:a9:0b:4b:e4

Issuing Certificate URL: http://crl.disa.mil/sign/DODIDSWCA_37.cer

Revocation information

OCSP Server: http://ocsp.disa.mil
CRL Distribution Point: http://crl.disa.mil/crl/DODIDSWCA_37.crl

Check the revocation status for certificate 52VDYD-WS-002.area52.afnoapps.usaf.mil

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 52VDYD-WS-002.area52.afnoapps.usaf.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

52VDYD-WS-002.area52.afnoapps.usaf.mil
52VDYD-WS-002
eim.amc.af.mil
*.eim.amc.af.mil

Other certificates including the domain name usaf.mil

(limited to 100 certificates)
FTEV-WXA-B02P.AREA52.AFNOAPPS.USAF.MIL
52vejx-ucpool-001.area52.afnoapps.usaf.mil
52vejx-ucpool-003.area52.afnoapps.usaf.mil
pcwsvm701b.area52.afnoapps.usaf.mil
52vejx-ucpool-001.area52.afnoapps.usaf.mil
52uhhz-ucpool-001.area52.afnoapps.usaf.mil
52snaq-ucpool-001.area52.afnoapps.usaf.mil
epex.moody.af.mil
52zhtx-ucpool-004.area52.afnoapps.usaf.mil
plk-rcdb-01.area52.afnoapps.usaf.mil
sammc-eis.lackland.af.mil
52tdka-emts-a2.area52.afnoapps.usaf.mil
HKRV-WS-001P.AREA52.AFNOAPPS.USAF.MIL
52mqna-css-f01v.area52.afnoapps.usaf.mil
52tyfr-ucpool-001.area52.afnoapps.usaf.mil
52sdhm-ucpool-001.area52.afnoapps.usaf.mil
apps.tinker.af.mil
52lktc-as-epex.area52.afnoapps.usaf.mil
mail.acc.af.mil
52PSXX-VPN-003.us.af.mil
AYZZ-WS-001P.AREA52.AFNOAPPS.USAF.MIL
52qkkg-css-f02v.area52.afnoapps.usaf.mil
52mpls-ap-354.AREA52.AFNOAPPS.USAF.MIL
52zhtx-ucpool-002.area52.afnoapps.usaf.mil
52mpls-ws-511.area52.afnoapps.usaf.mil
147PEX.ANG.AF.MIL
qkkg-ws-pex2p.area52.afnoapps.usaf.mil
tstinfra02.tinker.af.mil
eim.us.af.mil
prdinfra01.tinker.afmc.ds.af.mil
apps.afnoapps.usaf.mil
52VDYD-WS-001.area52.afnoapps.usaf.mil
52VEJX-SP-012v.area52.afnoapps.usaf.mil
prdinfra02.tinker.af.mil
AFOSILMS.us.af.mil
52sgbp-WPS-SP13v.area52.afnoapps.usaf.mil
52mlwx-css-f02v.area52.afnoapps.usaf.mil
52VEJX-SP-001v.area52.afnoapps.usaf.mil
gcdsaf17.af.mil
126arw-ii-03.area52.afnoapps.usaf.mil
52PRPX-VPN-001.us.af.mil
uhhz-as-011v.afnoapps.usaf.mil
52PRPX-VPN-002.us.af.mil
52qkkg-css-f01v.area52.afnoapps.usaf.mil
lke-epex-01.area52.afnoapps.usaf.mil
52ljyc-css-f01v.area52.afnoapps.usaf.mil
52vejx-ucpool-002.area52.afnoapps.usaf.mil
52VDYD-WS-002.area52.afnoapps.usaf.mil
samhs.health.us.af.mil
52lxez-ucpool-001.area52.afnoapps.usaf.mil
52mlwx-css-f01v.area52.afnoapps.usaf.mil
52zhtx-ucpool-003.area52.afnoapps.usaf.mil
52zhtx-ucpool-001.area52.afnoapps.usaf.mil

Certificate

The complete raw certificate details for 52VDYD-WS-002.area52.afnoapps.usaf.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF/WyLnaf07VCOMRfmsS
tAKWlCdaMuraMnTbp2IxYUCxbm6Umo3I1W3ZH+0RE1KieZxKM8JupE6n+stpVAae
sKKAOj5rxTA6uRmnEJ0n1pSnkTsBRgCIWSlWU07C/kqgNuR/3IP+NoYce4JiZ2p1
nsf+Wl2rX3LfEEdwqWlSdblh33wqrK8aimKbyeYMYzNoBz+9fP0+Uv6oZrvkAj1S
mx+pqqtEQwE1ppr9S75CFVi6/87modWZKHLmH/V5PUsHTBir2VU35mAQE6e7nwh4
2yb4783pSUBM4Dlgwc1rMI66UKbjYhNPQJrnld6E2wiYmpsv/PoEfXB5/rfmMjbU
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 106633
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOD ID SW CA-37'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-25 20:36:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-25 20:36:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USAF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '52VDYD-WS-002.area52.afnoapps.usaf.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21760248426630835686859102904399246584099335406124452913914225020758990315587829388362291382262036343856896036345042792973364780696459589240217766481789393358756953316471492259900747889354883242174922082160958602702547232827651979427719116842568140988334892080840583712063836292226618858949672290993717152507734875452704221161276309566434704896722301218714001443386211023586406866708226569921472664804836896241549300383877212628430177578932837952458777557237001545562438862086614520926485713999114018110248890666878723793702500773387767811478597314475499659679545666502835719986725567982013879018840820141615406830831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 16247ef72dc1ef923fbe44e7545ee9fe17baf3a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a4be5ca6a938698a4671c22b8601d22074f6765
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/sign/DODIDSWCA_37.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.disa.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/crl/DODIDSWCA_37.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '52VDYD-WS-002.area52.afnoapps.usaf.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '52VDYD-WS-002'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eim.amc.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eim.amc.af.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.2.1.11.39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.8.2.2 (iKEIntermediate)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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