www.dodlive.mil

Issued by R11

About this certificate

This digital certificate with serial number 03:74:67:0b:b5:b0:26:57:3a:16:83:34:46:53:09:ac:60:82 was issued on by Let's Encrypt.

With 64 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.dodlive.mil

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:74:67:0b:b5:b0:26:57:3a:16:83:34:46:53:09:ac:60:82
Serial Number (int): 300946583642013052664331085303518803550338
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 01:f9:35:f6:06:e4:95:6e:7b:ae:87:e1:5e:20:91:a4:39:90:3e:98
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): 98:6f:5f:3d:06:49:22:a2:a3:17:04:51:04:05:53:0c:bc:67:dd:a3
Fingerprint (sha256): fc:7d:43:bf:5f:bb:9e:e7:ad:74:3c:b3:11:06:cb:d9:1a:65:28:3f:af:7e:71:84:19:bd:53:59:67:4d:ec:7d

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate www.dodlive.mil

64

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dodlive.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

184jayhawks.dodlive.mil
afrl.dodlive.mil
afspace.dodlive.mil
airman.dodlive.mil
alaska.coastguard.dodlive.mil
allhands.coastguard.dodlive.mil
armylive.dodlive.mil
balancingthebasin.armylive.dodlive.mil
bootcamp.coastguard.dodlive.mil
chaplaincorps.navylive.dodlive.mil
coastguard.dodlive.mil
commissaryconnection.dodlive.mil
dantespulse.dodlive.mil
dasadec.dodlive.mil
dodlive-sandbox.dodlive.mil
donosbp.navylive.dodlive.mil
ew-navalstem.navylive.dodlive.mil
frcsw.navylive.dodlive.mil
futureforce.navylive.dodlive.mil
greatlakes.coastguard.dodlive.mil
greenfleet.dodlive.mil
jackson.armylive.dodlive.mil
jag.navylive.dodlive.mil
kentuckyguard.dodlive.mil
mariners.coastguard.dodlive.mil
midatlantic.coastguard.dodlive.mil
minationalguard.dodlive.mil
mscsealift.dodlive.mil
myafn.dodlive.mil
navalaviationnews.navy.mil
navalaviationnews.navylive.dodlive.mil
navalstem.navylive.dodlive.mil
navylive.dodlive.mil
navymedicine.navylive.dodlive.mil
navysustainability.dodlive.mil
ncojournal.dodlive.mil
ncolcoe.armylive.dodlive.mil
nmcb11.navylive.dodlive.mil
northwest.coastguard.dodlive.mil
pacesetterlive.dodlive.mil
peosoldier.armylive.dodlive.mil
plainsguardian.dodlive.mil
publicweb.dodlive.mil
purview.dodlive.mil
ra.defense.dodlive.mil
rcnsc.dodlive.mil
reporter.dodlive.mil
science.dodlive.mil
seabeemagazine.navylive.dodlive.mil
sfb.dodlive.mil
smtc.dodlive.mil
support.dodlive.mil
truax.dodlive.mil
usaceportland.armylive.dodlive.mil
usasd.armylive.dodlive.mil
usnhistory.navylive.dodlive.mil
vaguard.dodlive.mil
wallawalla.armylive.dodlive.mil
warriorcare.dodlive.mil
www.cmts.gov
www.dodlive.mil
www.ffsp.navy.mil
www.ncoworldwide.army.mil
www.ready.navy.mil

Other certificates including the domain name dodlive.mil

(limited to 100 certificates)
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
*.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
*.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
*.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
*.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil

Certificate

The complete raw certificate details for www.dodlive.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbweTCr4UcPlbOVSJaQB
463YZc/A/YIJC2tsVT4pKfmSsXZ6WFg4dCTT0bh/qvFhftWqzhBfL4yi57fcMy9r
O92c0jm/kSkoF+iioaBPeC4dmuwCr55iLEaWQXFSpxyt55JEBfd6wXT7ku9tESg8
wmVY2T17Fv886Lem+MMUEA5DX+vFJFRsaQNHDP4IgL6iwFhXHi/F5HDa1G1Mkzb3
U2pcMDO17VoD0YWvCPAzWL9Ae3gCZC7Qbo5IUuyJObiZtHp9APIEGT1M/2b+GyiB
aMm8fFOSCHBKa5mjhZtHO05wr7M0tbtnnqx4V40ZOY3M8D3A5d0tumKfqBa2XGLf
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300946583642013052664331085303518803550338
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 15:29:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-05 15:29:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.dodlive.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24961710693949579527966376159294359989366913091442405660820785215465333382384882772480359080059625492345842292463232741135090911293583692643783168153183524362932560577033198643439483255697954397059061792394309162546557741233766785142381905233998328378326503818230801486380317603279441776727994588449217347902034311410712047188078426696067853164216168667407940575248525642417673446817396159636475873266998257008452015945035189336910404916992396026436459938538381073985843792534974148785828917653851146501851660723183764860020642171571501029437297391340929682192777218334452266058700591847924758123968290718586490773457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							01f935f606e4956e7bae87e15e2091a439903e98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1736 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '184jayhawks.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afrl.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afspace.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airman.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaska.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allhands.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balancingthebasin.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bootcamp.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaplaincorps.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commissaryconnection.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dantespulse.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dasadec.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodlive-sandbox.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donosbp.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ew-navalstem.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frcsw.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futureforce.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatlakes.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenfleet.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackson.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jag.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kentuckyguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariners.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midatlantic.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minationalguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mscsealift.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myafn.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navalaviationnews.navy.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navalaviationnews.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navalstem.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navymedicine.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navysustainability.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncojournal.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncolcoe.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmcb11.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwest.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacesetterlive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peosoldier.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plainsguardian.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicweb.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purview.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ra.defense.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcnsc.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reporter.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'science.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seabeemagazine.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfb.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtc.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truax.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usaceportland.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usasd.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usnhistory.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallawalla.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warriorcare.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmts.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ffsp.navy.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncoworldwide.army.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ready.navy.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ff388a370000004030046304402200120112bded78c90228d4dfd4c4ad9e5ad351ea6a1fa1a279e8300de5e61abc10220563dda2bb85a43e487fecacc831cc2161097481bd0bfc0ba8ba54d971fa876e8007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ff388a373000004030046304402205e16e0b373adcf16cb72567be6fd11bc49d813c15c7bdd366f95852f652c3b2402204b7167c7e93b64c2056479335648bbc20f4d2e675c720ce37050ea85b43ab05a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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