www.oshr.nc.gov
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:49:eb:66:86:cb:5b:a0:cc:32:b9:05:11:f0:cd:a0:0d:4f was issued on by Let's Encrypt.
With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.oshr.nc.gov
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:49:eb:66:86:cb:5b:a0:cc:32:b9:05:11:f0:cd:a0:0d:4fSerial Number (int): 286490371507752834963291359493342470606159
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: b6:db:e4:99:b0:ec:e1:be:b3:de:25:ac:6c:46:46:3a:f1:65:f9:73
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 95:5c:d4:06:f3:0f:ab:a5:ec:2c:0e:5b:5f:f6:22:ff:de:24:93:f0
Fingerprint (sha256): 0c:1d:59:39:88:2d:b3:7b:a1:9d:67:0a:b3:e4:25:e6:5e:8a:aa:b9:91:ec:b4:6a:91:84:f8:23:db:ba:b5:d3
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.oshr.nc.gov
20
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.oshr.nc.gov
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
employeediscounts.nc.gov
excellenceawards.nc.gov
hazards.nc.gov
ncflex.org
nctemporarysolutions.com
ncvip.nc.gov
osp.its.state.nc.us
osp.state.nc.us
serviceawards.nc.gov
workerscomp.nc.gov
www.employeediscounts.nc.gov
www.excellenceawards.nc.gov
www.hazards.nc.gov
www.ncflex.org
www.nctemporarysolutions.com
www.ncvip.nc.gov
www.oshr.nc.gov
www.osp.state.nc.us
www.serviceawards.nc.gov
www.workerscomp.nc.gov
excellenceawards.nc.gov
hazards.nc.gov
ncflex.org
nctemporarysolutions.com
ncvip.nc.gov
osp.its.state.nc.us
osp.state.nc.us
serviceawards.nc.gov
workerscomp.nc.gov
www.employeediscounts.nc.gov
www.excellenceawards.nc.gov
www.hazards.nc.gov
www.ncflex.org
www.nctemporarysolutions.com
www.ncvip.nc.gov
www.oshr.nc.gov
www.osp.state.nc.us
www.serviceawards.nc.gov
www.workerscomp.nc.gov
Other certificates including the domain name nc.gov
(limited to 100 certificates)
ncidp.nc.gov
dev.phonepurchase.nc.gov
tts-eu.inrix.com
edm.nc.gov
ssl1.revizesites.com
www.vitalrecords.nc.gov
www.auditor.nc.gov
ncgs.nc.gov
govadmin.nc.gov
qa.ibis.nc.gov
ncchildcareadmin.nc.gov
slot-gopay.digitalcommons.nc.gov
tax.des.nc.gov
firstnet.nc.gov
files.nc.gov
mybeacon.nc.gov
opendurham.nc.gov
imap.mail.nc.gov
test.epass.nc.gov
des.cara.nc.gov
ncfastcwsinquiry.nc.gov
flu.nc.gov
www.ltgov.nc.gov
svn.ic.nc.gov
labor.nc.gov
dor-ssl-2.dor.nc.gov
IRISK.NC.GOV
dor-2119-int-fw.nc.gov
dirweb.nc.gov
apps.ncagr.gov
wastetrader.deq.nc.gov
other-redirects-002.dc.nc.gov
ncfastvirusscan.nc.gov
dcdee.works.nc.gov
ccms-train.ic.nc.gov
ccms-test.ic.nc.gov
ncfast.nc.gov
WB03.QA.NC.GOV
oah.nc.gov
idppre.nc.gov
VC-EXP-E1.ncdps.gov
ibis.nc.gov
ssl1.revizesites.com
cmepprovidermap.dhhs.nc.gov
ssl1.revizesites.com
redirect.nc.gov
immunize.nc.gov
publichealth.nc.gov
des.qa.edm.nc.gov
uet002.ncfast.nc.gov
www.it.nc.gov
rlnciddl.nc.gov
admin.nccat.nc.gov
ivms.userpref.sip.nc.gov
qpi.ebs.nc.gov
ncfasttraining.nc.gov
providerportal.nc.gov
ncfastdmscnpp.nc.gov
files.nc.gov
ncidws.nc.gov
bi.nc.gov
www.b3council.nc.gov
Qa.phoneRepair.nc.gov
files.nc.gov
www.dcdee.moodle.nc.gov
swucintf.doa.nc.gov
ncgs.nc.gov
www.djjdp.org
ncchildcare.nc.gov
www.vitalrecords.nc.gov
qa.cjleads.nc.gov
fw2vpn.dor.nc.gov
ncidp.nc.gov
ncfastebcc.nc.gov
ncguardview.nc.gov
www.sos.nc.gov
cas35.mail.nc.gov
economicbenefits.nc.gov
www.it.nc.gov
mybeacon.nc.gov
legacy.ibis.nc.gov
touchdown.nc.gov
hiea.nc.gov
redirect.nc.gov
sni.cloudflaressl.com
ncidws.nc.gov
fris.nc.gov
ncidsspr.nc.gov
ncc870.its.state.nc.us
files.nc.gov
www.vras.nc.gov
ccms-test.ic.nc.gov
ncfastapp08.nc.gov
mybeacon.nc.gov
qa.ibis.nc.gov
svn.ic.nc.gov
devt.vts.nc.gov
Qa.phonepurchase.nc.gov
ncdcr.gov
RMP.NC.GOV
dev.phonepurchase.nc.gov
tts-eu.inrix.com
edm.nc.gov
ssl1.revizesites.com
www.vitalrecords.nc.gov
www.auditor.nc.gov
ncgs.nc.gov
govadmin.nc.gov
qa.ibis.nc.gov
ncchildcareadmin.nc.gov
slot-gopay.digitalcommons.nc.gov
tax.des.nc.gov
firstnet.nc.gov
files.nc.gov
mybeacon.nc.gov
opendurham.nc.gov
imap.mail.nc.gov
test.epass.nc.gov
des.cara.nc.gov
ncfastcwsinquiry.nc.gov
flu.nc.gov
www.ltgov.nc.gov
svn.ic.nc.gov
labor.nc.gov
dor-ssl-2.dor.nc.gov
IRISK.NC.GOV
dor-2119-int-fw.nc.gov
dirweb.nc.gov
apps.ncagr.gov
wastetrader.deq.nc.gov
other-redirects-002.dc.nc.gov
ncfastvirusscan.nc.gov
dcdee.works.nc.gov
ccms-train.ic.nc.gov
ccms-test.ic.nc.gov
ncfast.nc.gov
WB03.QA.NC.GOV
oah.nc.gov
idppre.nc.gov
VC-EXP-E1.ncdps.gov
ibis.nc.gov
ssl1.revizesites.com
cmepprovidermap.dhhs.nc.gov
ssl1.revizesites.com
redirect.nc.gov
immunize.nc.gov
publichealth.nc.gov
des.qa.edm.nc.gov
uet002.ncfast.nc.gov
www.it.nc.gov
rlnciddl.nc.gov
admin.nccat.nc.gov
ivms.userpref.sip.nc.gov
qpi.ebs.nc.gov
ncfasttraining.nc.gov
providerportal.nc.gov
ncfastdmscnpp.nc.gov
files.nc.gov
ncidws.nc.gov
bi.nc.gov
www.b3council.nc.gov
Qa.phoneRepair.nc.gov
files.nc.gov
www.dcdee.moodle.nc.gov
swucintf.doa.nc.gov
ncgs.nc.gov
www.djjdp.org
ncchildcare.nc.gov
www.vitalrecords.nc.gov
qa.cjleads.nc.gov
fw2vpn.dor.nc.gov
ncidp.nc.gov
ncfastebcc.nc.gov
ncguardview.nc.gov
www.sos.nc.gov
cas35.mail.nc.gov
economicbenefits.nc.gov
www.it.nc.gov
mybeacon.nc.gov
legacy.ibis.nc.gov
touchdown.nc.gov
hiea.nc.gov
redirect.nc.gov
sni.cloudflaressl.com
ncidws.nc.gov
fris.nc.gov
ncidsspr.nc.gov
ncc870.its.state.nc.us
files.nc.gov
www.vras.nc.gov
ccms-test.ic.nc.gov
ncfastapp08.nc.gov
mybeacon.nc.gov
qa.ibis.nc.gov
svn.ic.nc.gov
devt.vts.nc.gov
Qa.phonepurchase.nc.gov
ncdcr.gov
RMP.NC.GOV
Certificate
The complete raw certificate details for www.oshr.nc.gov in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG+jCCBeKgAwIBAgISA0nrZobLW6DMMrkFEfDNoA1PMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTEwMTA5NTBaFw0y MDAxMDkwMTA5NTBaMBoxGDAWBgNVBAMTD3d3dy5vc2hyLm5jLmdvdjCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMLQAS8mdLd/nod4yQUsdlrUOtDFf6Yv 8g7O0wokFTs6IFyNxMMnmHVTMxi+ZpVVhOFVJCWfGLWe5G5YjTdE5x+Nm60yQJNW NOcCuCOqzDoe0W312Fnx7V7qYgguCALcROQbZ1SGwjduHxZRkZDwCxI6R2z/i5s8 i4N285gT7ht+7jOsKL1vyRI8lNxEeP5xJUJVyu3nduXx29YgBWCRGWRBMbWdJA6D RtUeq+gdy+RXlUs1QLCKgteK1EsOVev3WdooVrz95Wvb6DX/rwMuxO5PDsfLBp3o oiZ97c9crRPuqhZp32Hi0kprx+uDqQaSM2YhcSQt4bCLsjGLN0rVXqECAwEAAaOC BAgwggQEMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUttvkmbDs4b6z3iWsbEZGOvFl +XMwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu b3JnLzCCAbsGA1UdEQSCAbIwggGughhlbXBsb3llZWRpc2NvdW50cy5uYy5nb3aC F2V4Y2VsbGVuY2Vhd2FyZHMubmMuZ292gg5oYXphcmRzLm5jLmdvdoIKbmNmbGV4 Lm9yZ4IYbmN0ZW1wb3Jhcnlzb2x1dGlvbnMuY29tggxuY3ZpcC5uYy5nb3aCE29z cC5pdHMuc3RhdGUubmMudXOCD29zcC5zdGF0ZS5uYy51c4IUc2VydmljZWF3YXJk cy5uYy5nb3aCEndvcmtlcnNjb21wLm5jLmdvdoIcd3d3LmVtcGxveWVlZGlzY291 bnRzLm5jLmdvdoIbd3d3LmV4Y2VsbGVuY2Vhd2FyZHMubmMuZ292ghJ3d3cuaGF6 YXJkcy5uYy5nb3aCDnd3dy5uY2ZsZXgub3Jnghx3d3cubmN0ZW1wb3Jhcnlzb2x1 dGlvbnMuY29tghB3d3cubmN2aXAubmMuZ292gg93d3cub3Noci5uYy5nb3aCE3d3 dy5vc3Auc3RhdGUubmMudXOCGHd3dy5zZXJ2aWNlYXdhcmRzLm5jLmdvdoIWd3d3 LndvcmtlcnNjb21wLm5jLmdvdjBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEE AYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9y ZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3ACk8UZZUyDlluqpQ/FgH1Ldvv1h6 KXLcpMMM9OVFR/R4AAABbbiUUbUAAAQDAEgwRgIhALaWCyT9quCWvC0w+a9FXLpj XWs1JisUV7rmSH91nU3nAiEAsdm/6hW2c4Hhc+DIjxbRDxkDTqo0OVVLBSU2Hgpa 4nkAdgBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW24lFOUAAAE AwBHMEUCIQCl+wJqMEecJTf6OcBLlWKHO3BZiHS9S4su8Ai2T8TKhQIgDE8gfzNX mHX+RPqbr7QsMfJKIiwyPqU+NGH8fZMcPfkwDQYJKoZIhvcNAQELBQADggEBAI/U qmcWJAc+OT5Ap6BnD2Kkm1xkWb9MN1Ec0qnPsVS0u3N84wASLQWkGj4Wela0KwIa I/wyr6i59BleIG9VTXU55AHNRtQDxJg4Pq/P6NXz8XGyBDjG05eCAFzDqLI2WbhR iJL+H12veWn+urmpaDcC93f8adehBY3omIs5gQe/dGCSmvqQRAIGwk68E2sSbJrr 5pQU0jN7MMIq5o5hhZQ3qbNZVmu2eSg2KJJIUYKxlXBAuLuhhQN6ra7vpJ8FSKFU KjjxG9D6xXBToqi7wlTN75hx9oukb0NMu0y7Fk/lN1Q6XO/E2ofAyF5LqC268oYH UahEpFyiC0Bu55rh2kU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtABLyZ0t3+eh3jJBSx2 WtQ60MV/pi/yDs7TCiQVOzogXI3EwyeYdVMzGL5mlVWE4VUkJZ8YtZ7kbliNN0Tn H42brTJAk1Y05wK4I6rMOh7RbfXYWfHtXupiCC4IAtxE5BtnVIbCN24fFlGRkPAL EjpHbP+LmzyLg3bzmBPuG37uM6wovW/JEjyU3ER4/nElQlXK7ed25fHb1iAFYJEZ ZEExtZ0kDoNG1R6r6B3L5FeVSzVAsIqC14rUSw5V6/dZ2ihWvP3la9voNf+vAy7E 7k8Ox8sGneiiJn3tz1ytE+6qFmnfYeLSSmvH64OpBpIzZiFxJC3hsIuyMYs3StVe oQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 286490371507752834963291359493342470606159 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-11 01:09:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-09 01:09:50 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.oshr.nc.gov' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24592802067220562842530871617258321366697754065428412158242504994398187597152179323585850631696313848400370738913950611310472340296969350229254602384202802729675127789570590623888959025904600526697574309635975193569650072659527454588969818202818629424933264710472435459224930298600938450655033245308063773524514172664834305694465322998755190012781839321822414023880866020549549975539296825756226209529148417301444210993072035909787009680856101279527797279724869100951881957078997843773633222610134192761513036058932446312960136167973981457502624518110977592392230927708271501504668957140046015299594909512886406962849 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b6dbe499b0ece1beb3de25ac6c46463af165f973 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (434 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employeediscounts.nc.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excellenceawards.nc.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hazards.nc.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncflex.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nctemporarysolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncvip.nc.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osp.its.state.nc.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osp.state.nc.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceawards.nc.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workerscomp.nc.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.employeediscounts.nc.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.excellenceawards.nc.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hazards.nc.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncflex.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nctemporarysolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncvip.nc.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oshr.nc.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osp.state.nc.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serviceawards.nc.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workerscomp.nc.gov' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016db89451b50000040300483046022100b6960b24fdaae096bc2d30f9af455cba635d6b35262b1457bae6487f759d4de7022100b1d9bfea15b67381e173e0c88f16d10f19034eaa3439554b0525361e0a5ae2790076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016db89453940000040300473045022100a5fb026a30479c2537fa39c04b9562873b70598874bd4b8b2ef008b64fc4ca8502200c4f207f33579875fe44fa9bafb42c31f24a222c323ea53e3461fc7d931c3df9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 008fd4aa671624073e393e40a7a0670f62a49b5c6459bf4c37511cd2a9cfb154b4bb737ce300122d05a41a3e167a56b42b021a23fc32afa8b9f4195e206f554d7539e401cd46d403c498383eafcfe8d5f3f171b20438c6d39782005cc3a8b23659b8518892fe1f5daf7969febab9a9683702f777fc69d7a1058de8988b398107bf7460929afa90440206c24ebc136b126c9aebe69414d2337b30c22ae68e61859437a9b359566bb67928362892485182b1957040b8bba185037aadaeefa49f0548a1542a38f11bd0fac57053a2a8bbc254cdef9871f68ba46f434cbb4cbb164fe537543a5cefc4da87c0c85e4ba82dbaf2860751a844a45ca20b406ee79ae1da45