apps.ncagr.gov

Issued by R3

About this certificate

This digital certificate with serial number 03:5b:94:6e:8a:a2:cb:a9:00:f3:14:8c:b4:cb:fe:9f:46:64 was issued on by Let's Encrypt.

With 52 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=apps.ncagr.gov

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:5b:94:6e:8a:a2:cb:a9:00:f3:14:8c:b4:cb:fe:9f:46:64
Serial Number (int): 292499852892987263896450318266640214476388
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2a:0b:89:85:d4:1b:7a:0e:53:a7:ed:d5:be:da:e2:83:66:b0:dc:8d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 00:fa:77:f8:69:9b:c0:e5:5b:2f:07:2c:b8:3a:cc:1b:ce:1f:bb:fe
Fingerprint (sha256): 02:0e:43:95:ac:66:9d:bd:88:b0:2e:d6:63:76:73:8f:c3:92:1e:3b:91:92:a1:bb:a5:63:8e:7c:89:5e:9a:3d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate apps.ncagr.gov

52

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apps.ncagr.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apps.ncagr.gov
appsdev.ncagr.gov
appsuat.ncagr.gov
boss.ncagr.gov
bossdesk.ncagr.gov
dev.ncmhtd.com
dupontstaterecreationalforest.com
foodsafetytaskforce.nc.gov
gatehouse.ncagr.gov
gottobencfestival.com
intranet.ncagr.gov
iqs.nc.gov
labworks.ncagr.gov
labworkstest.ncagr.gov
lf.ncagr.gov
lfdev.ncagr.gov
mfsdev.ncagr.gov
mountainislandforest.com
ncesf.org
ncfarmfresh.com
ncfooddist.com
ncfoodsafety.com
ncforestactionplan.com
ncforestassessment.com
ncforestservice.gov
ncfreshlink.com
ncfriendsofagriculture.org
nclongleaf.org
ncstatefair.org
resistwildfirenc.org
teamsites.ncagr.gov
test.ncmhtd.com
www.dupontstaterecreationalforest.com
www.foodsafetytaskforce.nc.gov
www.gottobencfestival.com
www.iqs.nc.gov
www.mountainislandforest.com
www.ncesf.org
www.ncfarmfresh.com
www.ncfooddist.com
www.ncfoodsafety.com
www.ncforestactionplan.com
www.ncforestassessment.com
www.ncforestservice.gov
www.ncfreshlink.com
www.ncfriendsofagriculture.org
www.nclongleaf.org
www.ncmhtd.com
www.ncstatefair.org
www.resistwildfirenc.org
wwwdev.ncfooddist.com
wwwuat.ncfooddist.com

Other certificates including the domain name ncagr.gov

(limited to 100 certificates)
apps.ncagr.gov
*.blog.ncagr.gov
www.ncagr.gov
ncagr.gov
mfs.ncagr.gov
www.ncagr.gov
*.blog.ncagr.gov
apps.ncagr.gov
www.ncagr.gov
www.ncagr.gov
ncagr.gov
intranet.ncagr.gov
teamsites.ncagr.gov
teamsites.ncagr.gov
apps.ncagr.gov
files.nc.gov
files.nc.gov
www.ncagr.gov
www.ncagr.gov
files.nc.gov
apps.ncagr.gov
apps.ncagr.gov
teamsites.ncagr.gov
mfs.ncagr.gov
teamsites.ncagr.gov
www.ncagr.gov
apps.ncagr.gov
www.ncagr.gov
teamsites.ncagr.gov
www.ncagr.gov
www.ncagr.gov
apps.ncagr.gov
www.ncagr.gov
ncagr.gov
intranet.ncagr.gov
intranet.ncagr.gov
files.nc.gov
www.ncagr.gov
www.ncagr.gov
www.ncagr.gov
files.nc.gov
www.ncagr.gov
apps.ncagr.gov
intranet.ncagr.gov
apps.ncagr.gov
apps.ncagr.gov
apps.ncagr.gov
intranet.ncagr.gov
www.ncagr.gov
apps.ncagr.gov
www.ncagr.gov
*.blog.ncagr.gov
intranet.ncagr.gov
teamsites.ncagr.gov
apps.ncagr.gov
apps.ncagr.gov
support.ncagr.gov
apps.ncagr.gov
ncagr.gov
apps.ncagr.gov
www.ncagr.gov
mfs.ncagr.gov
files.nc.gov
apps.ncagr.gov
apps.ncagr.gov
apps.ncagr.gov
www.ncagr.gov
*.blog.ncagr.gov
apps.ncagr.gov
apps.ncagr.gov
intranet.ncagr.gov
ncagr.gov
apps.ncagr.gov

Certificate

The complete raw certificate details for apps.ncagr.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT0yxL+NASLUYA7E0dtL
C0JR+t2siQWrMf4uZak8ea6UP2ObioZSpJLwDuo4u/N9URovEC5kCFLq0PsXsAOm
KGJI1vWKP7t4HM1n4oN67kmW2LnbUUtJaAybBNSx1aPExLmU5SnnqaHxbKvbl1AX
GmwIK7ucLvSE26MsUCNjXImzFLwcpXbpCx1G7ZBax6Ae4Xh0w9kSqpNHMcmHiAuw
CO6dntCnUp89XYG3Uy+mZp0VfYbQhlsiI1NaGpflaZfbaOjViIzfp3ZWuIDawKvo
hcqm22o+9fNhEMChN3FRJIBGZgnl8j0OCB3+M3Yf+mkKnJ+l6pZupENEdoJBMMen
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292499852892987263896450318266640214476388
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 12:24:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-02 12:24:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apps.ncagr.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19344638673505913706488871877266711254807555358888203268015528047432133700971836330932163322865217570422713274211803915946768219182751299412390544112410029199764659893670058945402001769133794800364044378830945594864016246130653506191471744803747861078426515262641059505102177034187301072893184038499857355088327830304976990969437018965228743485849825311075551403078769818161661379697219033613718658256479536045938914286228449107501718587889411771702807013380924471459532739867375117699418009656204135587673666996830814803579808868355573100239244302095603686075605021698734221768970509484709413860842563924354721621921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a0b8985d41b7a0e53a7edd5bedae28366b0dc8d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appsdev.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appsuat.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boss.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bossdesk.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ncmhtd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dupontstaterecreationalforest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodsafetytaskforce.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatehouse.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gottobencfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iqs.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labworks.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labworkstest.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lf.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lfdev.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfsdev.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountainislandforest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncesf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncfarmfresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncfooddist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncfoodsafety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncforestactionplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncforestassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncforestservice.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncfreshlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncfriendsofagriculture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nclongleaf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncstatefair.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resistwildfirenc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamsites.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ncmhtd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dupontstaterecreationalforest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foodsafetytaskforce.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gottobencfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iqs.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountainislandforest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncesf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncfarmfresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncfooddist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncfoodsafety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncforestactionplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncforestassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncforestservice.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncfreshlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncfriendsofagriculture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nclongleaf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncmhtd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncstatefair.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resistwildfirenc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwdev.ncfooddist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwuat.ncfooddist.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ea4220127000004030046304402205e88fef856361c03daa600e66a0ad51294d3cea4a89afc78787157fde4179f9602200e85f9f8d7423d8b16b637db578e905e35a272efb0cec8e3343de2018095d6d30075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ea42201310000040300463044022021ffe2401abf79b862b7dfdc1dac2a9bf74f3c769714aae3000e527b4dcc2dde022014a4580dee6278d665ee672273fe23e086612fd89624b1a2e7b94a876bd04e75
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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