www.oshr.nc.gov

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:49:eb:66:86:cb:5b:a0:cc:32:b9:05:11:f0:cd:a0:0d:4f was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.oshr.nc.gov

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:49:eb:66:86:cb:5b:a0:cc:32:b9:05:11:f0:cd:a0:0d:4f
Serial Number (int): 286490371507752834963291359493342470606159
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b6:db:e4:99:b0:ec:e1:be:b3:de:25:ac:6c:46:46:3a:f1:65:f9:73
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 95:5c:d4:06:f3:0f:ab:a5:ec:2c:0e:5b:5f:f6:22:ff:de:24:93:f0
Fingerprint (sha256): 0c:1d:59:39:88:2d:b3:7b:a1:9d:67:0a:b3:e4:25:e6:5e:8a:aa:b9:91:ec:b4:6a:91:84:f8:23:db:ba:b5:d3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.oshr.nc.gov

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.oshr.nc.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

employeediscounts.nc.gov
excellenceawards.nc.gov
hazards.nc.gov
ncflex.org
nctemporarysolutions.com
ncvip.nc.gov
osp.its.state.nc.us
osp.state.nc.us
serviceawards.nc.gov
workerscomp.nc.gov
www.employeediscounts.nc.gov
www.excellenceawards.nc.gov
www.hazards.nc.gov
www.ncflex.org
www.nctemporarysolutions.com
www.ncvip.nc.gov
www.oshr.nc.gov
www.osp.state.nc.us
www.serviceawards.nc.gov
www.workerscomp.nc.gov

Other certificates including the domain name nc.gov

(limited to 100 certificates)
ncidp.nc.gov
dev.phonepurchase.nc.gov
tts-eu.inrix.com
edm.nc.gov
ssl1.revizesites.com
www.vitalrecords.nc.gov
www.auditor.nc.gov
ncgs.nc.gov
govadmin.nc.gov
qa.ibis.nc.gov
ncchildcareadmin.nc.gov
slot-gopay.digitalcommons.nc.gov
tax.des.nc.gov
firstnet.nc.gov
files.nc.gov
mybeacon.nc.gov
opendurham.nc.gov
imap.mail.nc.gov
test.epass.nc.gov
des.cara.nc.gov
ncfastcwsinquiry.nc.gov
flu.nc.gov
www.ltgov.nc.gov
svn.ic.nc.gov
labor.nc.gov
dor-ssl-2.dor.nc.gov
IRISK.NC.GOV
dor-2119-int-fw.nc.gov
dirweb.nc.gov
apps.ncagr.gov
wastetrader.deq.nc.gov
other-redirects-002.dc.nc.gov
ncfastvirusscan.nc.gov
dcdee.works.nc.gov
ccms-train.ic.nc.gov
ccms-test.ic.nc.gov
ncfast.nc.gov
WB03.QA.NC.GOV
oah.nc.gov
idppre.nc.gov
VC-EXP-E1.ncdps.gov
ibis.nc.gov
ssl1.revizesites.com
cmepprovidermap.dhhs.nc.gov
ssl1.revizesites.com
redirect.nc.gov
immunize.nc.gov
publichealth.nc.gov
des.qa.edm.nc.gov
uet002.ncfast.nc.gov
www.it.nc.gov
rlnciddl.nc.gov
admin.nccat.nc.gov
ivms.userpref.sip.nc.gov
qpi.ebs.nc.gov
ncfasttraining.nc.gov
providerportal.nc.gov
ncfastdmscnpp.nc.gov
files.nc.gov
ncidws.nc.gov
bi.nc.gov
www.b3council.nc.gov
Qa.phoneRepair.nc.gov
files.nc.gov
www.dcdee.moodle.nc.gov
swucintf.doa.nc.gov
ncgs.nc.gov
www.djjdp.org
ncchildcare.nc.gov
www.vitalrecords.nc.gov
qa.cjleads.nc.gov
fw2vpn.dor.nc.gov
ncidp.nc.gov
ncfastebcc.nc.gov
ncguardview.nc.gov
www.sos.nc.gov
cas35.mail.nc.gov
economicbenefits.nc.gov
www.it.nc.gov
mybeacon.nc.gov
legacy.ibis.nc.gov
touchdown.nc.gov
hiea.nc.gov
redirect.nc.gov
sni.cloudflaressl.com
ncidws.nc.gov
fris.nc.gov
ncidsspr.nc.gov
ncc870.its.state.nc.us
files.nc.gov
www.vras.nc.gov
ccms-test.ic.nc.gov
ncfastapp08.nc.gov
mybeacon.nc.gov
qa.ibis.nc.gov
svn.ic.nc.gov
devt.vts.nc.gov
Qa.phonepurchase.nc.gov
ncdcr.gov
RMP.NC.GOV

Certificate

The complete raw certificate details for www.oshr.nc.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtABLyZ0t3+eh3jJBSx2
WtQ60MV/pi/yDs7TCiQVOzogXI3EwyeYdVMzGL5mlVWE4VUkJZ8YtZ7kbliNN0Tn
H42brTJAk1Y05wK4I6rMOh7RbfXYWfHtXupiCC4IAtxE5BtnVIbCN24fFlGRkPAL
EjpHbP+LmzyLg3bzmBPuG37uM6wovW/JEjyU3ER4/nElQlXK7ed25fHb1iAFYJEZ
ZEExtZ0kDoNG1R6r6B3L5FeVSzVAsIqC14rUSw5V6/dZ2ihWvP3la9voNf+vAy7E
7k8Ox8sGneiiJn3tz1ytE+6qFmnfYeLSSmvH64OpBpIzZiFxJC3hsIuyMYs3StVe
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286490371507752834963291359493342470606159
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-11 01:09:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-09 01:09:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.oshr.nc.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24592802067220562842530871617258321366697754065428412158242504994398187597152179323585850631696313848400370738913950611310472340296969350229254602384202802729675127789570590623888959025904600526697574309635975193569650072659527454588969818202818629424933264710472435459224930298600938450655033245308063773524514172664834305694465322998755190012781839321822414023880866020549549975539296825756226209529148417301444210993072035909787009680856101279527797279724869100951881957078997843773633222610134192761513036058932446312960136167973981457502624518110977592392230927708271501504668957140046015299594909512886406962849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b6dbe499b0ece1beb3de25ac6c46463af165f973
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (434 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employeediscounts.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excellenceawards.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hazards.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncflex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nctemporarysolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncvip.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osp.its.state.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osp.state.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceawards.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workerscomp.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.employeediscounts.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.excellenceawards.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hazards.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncflex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nctemporarysolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncvip.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oshr.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osp.state.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serviceawards.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workerscomp.nc.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016db89451b50000040300483046022100b6960b24fdaae096bc2d30f9af455cba635d6b35262b1457bae6487f759d4de7022100b1d9bfea15b67381e173e0c88f16d10f19034eaa3439554b0525361e0a5ae2790076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016db89453940000040300473045022100a5fb026a30479c2537fa39c04b9562873b70598874bd4b8b2ef008b64fc4ca8502200c4f207f33579875fe44fa9bafb42c31f24a222c323ea53e3461fc7d931c3df9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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