wildcard.dodlive.mil
Issued by DOD ID SW CA-38
About this certificate
This digital certificate with serial number 01:98:30 was issued on by U.S. Government.
With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)
Certificate Subject
CN=wildcard.dodlive.mil,OU=USGOVT+OU=DoD+OU=PKI+OU=DMA,C=US
U.S. Government
Organization:
U.S. Government
Organization unit: DoD
Organization unit: PKI
Organization unit: DoD
Organization unit: PKI
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:98:30Serial Number (int): 104496
Serial Number lenght: 17 bits, 3 octets
SubjectKeyId: 7b:cb:22:ba:82:f3:fd:7d:77:b3:71:cc:54:03:cf:44:4a:cf:2b:44
AuthorityKeyId: 8e:c5:b9:cc:fc:ce:8e:53:b4:2a:ce:e8:11:2a:cf:9b:29:6c:67:ca
Fingerprint (sha1): 3a:75:67:46:49:5e:2b:3e:da:17:0c:73:aa:cd:60:dd:09:c3:43:ff
Fingerprint (sha256): e0:50:06:b4:f3:d7:b0:af:5f:c7:4b:60:bd:5b:6e:73:dc:e7:de:9a:31:5f:09:cd:40:b6:d7:98:ac:14:53:06
Issuing Certificate URL: http://crl.disa.mil/sign/DODIDSWCA_38.cer
Revocation information
OCSP Server: http://ocsp.disa.milCRL Distribution Point: http://crl.disa.mil/crl/DODIDSWCA_38.crl
Check the revocation status for certificate wildcard.dodlive.mil
11
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for wildcard.dodlive.mil
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
wildcard.dodlive.mil
*.staging.dodlive.mil
*.staging.armylive.dodlive.mil
*.staging.navylive.dodlive.mil
*.staging.defense.dodlive.mil
*.staging.coastguard.dodlive.mil
*.dodlive.mil
*.armylive.dodlive.mil
*.navylive.dodlive.mil
*.defense.dodlive.mil
*.coastguard.dodlive.mil
*.staging.dodlive.mil
*.staging.armylive.dodlive.mil
*.staging.navylive.dodlive.mil
*.staging.defense.dodlive.mil
*.staging.coastguard.dodlive.mil
*.dodlive.mil
*.armylive.dodlive.mil
*.navylive.dodlive.mil
*.defense.dodlive.mil
*.coastguard.dodlive.mil
Other certificates including the domain name dodlive.mil
(limited to 100 certificates)
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
*.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
*.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
*.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
*.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
*.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
*.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
*.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
*.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
www.dodlive.mil
Certificate
The complete raw certificate details for wildcard.dodlive.mil in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgIDAZgwMA0GCSqGSIb3DQEBCwUAMF0xCzAJBgNVBAYTAlVT MRgwFgYDVQQKEw9VLlMuIEdvdmVybm1lbnQxDDAKBgNVBAsTA0RvRDEMMAoGA1UE CxMDUEtJMRgwFgYDVQQDEw9ET0QgSUQgU1cgQ0EtMzgwHhcNMTcwNDE3MTE1MDMz WhcNMjAwNDE3MTE1MDMzWjBnMQswCQYDVQQGEwJVUzEPMA0GA1UECxMGVVNHT1ZU MQwwCgYDVQQLEwNEb0QxDDAKBgNVBAsTA1BLSTEMMAoGA1UECxMDRE1BMR0wGwYD VQQDExR3aWxkY2FyZC5kb2RsaXZlLm1pbDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALIQaAcA7BVJzj6WoTAV0iZITTuAM+fDypN4ltN4J42P/AGfQ+RU LMe/4uiCSiGNch0nXA0YVqSnsG/+LmVu3x0eQ5mT8EGwWFwWIhE4vSOVkbimJ5RP kJcmAcHYkxyrpm6A5KjqY+HfpEqh8eFoAsITGWlw7m+ErMNuTQi9/v/e24vUrysA ymsZUxGWnRdKNQynjEha1B875ttDwpFKpctvkz+vuj7OB6beu2D9YTbXsAjy0KrO ebiSP+fC7pA+12RAM8v+qQZDba2r3RhZeHAIuZ7TDnv/3GJ/JawPfqRqmWPZn5Xp 38evZ8Osuj9YGQAAFwzsJdbs5rApnNOiYhkCAwEAAaOCAmgwggJkMB8GA1UdIwQY MBaAFI7Fucz8zo5TtCrO6BEqz5spbGfKMB0GA1UdDgQWBBR7yyK6gvP9fXezccxU A89ESs8rRDBnBggrBgEFBQcBAQRbMFkwNQYIKwYBBQUHMAKGKWh0dHA6Ly9jcmwu ZGlzYS5taWwvc2lnbi9ET0RJRFNXQ0FfMzguY2VyMCAGCCsGAQUFBzABhhRodHRw Oi8vb2NzcC5kaXNhLm1pbDAOBgNVHQ8BAf8EBAMCBaAwOQYDVR0fBDIwMDAuoCyg KoYoaHR0cDovL2NybC5kaXNhLm1pbC9jcmwvRE9ESURTV0NBXzM4LmNybDCCASsG A1UdEQSCASIwggEeghR3aWxkY2FyZC5kb2RsaXZlLm1pbIIVKi5zdGFnaW5nLmRv ZGxpdmUubWlsgh4qLnN0YWdpbmcuYXJteWxpdmUuZG9kbGl2ZS5taWyCHiouc3Rh Z2luZy5uYXZ5bGl2ZS5kb2RsaXZlLm1pbIIdKi5zdGFnaW5nLmRlZmVuc2UuZG9k bGl2ZS5taWyCICouc3RhZ2luZy5jb2FzdGd1YXJkLmRvZGxpdmUubWlsgg0qLmRv ZGxpdmUubWlsghYqLmFybXlsaXZlLmRvZGxpdmUubWlsghYqLm5hdnlsaXZlLmRv ZGxpdmUubWlsghUqLmRlZmVuc2UuZG9kbGl2ZS5taWyCGCouY29hc3RndWFyZC5k b2RsaXZlLm1pbDAWBgNVHSAEDzANMAsGCWCGSAFlAgELJzAnBgNVHSUEIDAeBggr BgEFBQcDAQYIKwYBBQUHAwIGCCsGAQUFCAICMA0GCSqGSIb3DQEBCwUAA4IBAQCr uF6OhP4WnXZTInQoEEKOfzRnkeo05j67AzqI+xXJy0XqKp5ss4SNyBOSiOXpvwcC Mcswhir24FomYNQwkj2ToUVZMZ5RWvjU/7wHeTfhzAmrP5UZ1Jd4PMn4Ot5wkQbE DUuVLB06RyTEEHRUdS8s5mZp3IvyHd3X6TkLeuM2mg2Q13rS3OupWkp9jV3T9wsQ zQZZKpDU/Psa4ZXvWHhqncb+bOkpZHY8nt4rRNXyeUUXHDjOeQpR3aj/PyVhH/Ea VUlW/STmfow4ZTk+QdYFm/dO931tnVXpP6JmKrzpk/DCPMKiAjNSGsqXQRMiPqqs m5sAAuqR7LrCnQGdMcJ0 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshBoBwDsFUnOPpahMBXS JkhNO4Az58PKk3iW03gnjY/8AZ9D5FQsx7/i6IJKIY1yHSdcDRhWpKewb/4uZW7f HR5DmZPwQbBYXBYiETi9I5WRuKYnlE+QlyYBwdiTHKumboDkqOpj4d+kSqHx4WgC whMZaXDub4Ssw25NCL3+/97bi9SvKwDKaxlTEZadF0o1DKeMSFrUHzvm20PCkUql y2+TP6+6Ps4Hpt67YP1hNtewCPLQqs55uJI/58LukD7XZEAzy/6pBkNtravdGFl4 cAi5ntMOe//cYn8lrA9+pGqZY9mflenfx69nw6y6P1gZAAAXDOwl1uzmsCmc06Ji GQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 104496 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOD ID SW CA-38' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-17 11:50:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-17 11:50:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USGOVT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DMA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wildcard.dodlive.mil' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22478508560058020933497254953963747509711865259502495266173565436320164496705609757116042509476225079853819941890376584017354055658764285537914564286440229432494078569930510945188802377556555479301279379609824092555450393269945780150473016828104831432969422045692916055675898037786847139817796944435531250151240612917200613018792640299175026552994167054025326086341008852456674784087668997083192956283400144373374307279585544528768811955115214105739914505603984484646429508080912222487280108707941672719122152612556565852514165125586680612588790983110692926127879882113370506300633015288618213765630181723741081461273 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8ec5b9ccfcce8e53b42acee8112acf9b296c67ca . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7bcb22ba82f3fd7d77b371cc5403cf444acf2b44 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/sign/DODIDSWCA_38.cer' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.disa.mil' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/crl/DODIDSWCA_38.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (290 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildcard.dodlive.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.dodlive.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.armylive.dodlive.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.navylive.dodlive.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.defense.dodlive.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.coastguard.dodlive.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dodlive.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.armylive.dodlive.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.navylive.dodlive.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.defense.dodlive.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coastguard.dodlive.mil' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.2.1.11.39 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.8.2.2 (iKEIntermediate) . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00abb85e8e84fe169d765322742810428e7f346791ea34e63ebb033a88fb15c9cb45ea2a9e6cb3848dc8139288e5e9bf070231cb30862af6e05a2660d430923d93a14559319e515af8d4ffbc077937e1cc09ab3f9519d497783cc9f83ade709106c40d4b952c1d3a4724c4107454752f2ce66669dc8bf21dddd7e9390b7ae3369a0d90d77ad2dceba95a4a7d8d5dd3f70b10cd06592a90d4fcfb1ae195ef58786a9dc6fe6ce92964763c9ede2b44d5f27945171c38ce790a51dda8ff3f25611ff11a554956fd24e67e8c3865393e41d6059bf74ef77d6d9d55e93fa2662abce993f0c23cc2a20233521aca974113223eaaac9b9b0002ea91ecbac29d019d31c274