www.archaeology.ncdcr.gov

Issued by R3

About this certificate

This digital certificate with serial number 04:db:e1:f3:45:e3:31:95:4b:d6:ea:10:87:5f:43:fe:49:b4 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.archaeology.ncdcr.gov

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:db:e1:f3:45:e3:31:95:4b:d6:ea:10:87:5f:43:fe:49:b4
Serial Number (int): 423271321527401140915765314487513295767988
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 25:df:9e:fe:d5:c0:64:b4:48:a1:41:6b:75:6f:93:39:9f:f5:27:e0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f5:ab:37:3e:2c:19:2f:e3:a4:3e:c5:e7:c0:c5:37:be:4e:a7:82:f5
Fingerprint (sha256): 10:65:4a:0b:43:bc:46:d5:86:c8:44:76:12:53:27:88:44:57:28:f6:2d:f2:96:59:3b:b8:79:a0:46:1e:e1:8a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.archaeology.ncdcr.gov

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.archaeology.ncdcr.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arch.dcr.state.nc.us
www.arch.dcr.state.nc.us
www.archaeology.ncdcr.gov

Other certificates including the domain name ncdcr.gov

(limited to 100 certificates)
Ead.archives.ncdcr.gov
files.nc.gov
files.nc.gov
files.nc.gov
www.archaeology.ncdcr.gov
files.nc.gov
ncdcr.gov
files.nc.gov
www.museumofthecapefear.ncdcr.gov
capitalareavisitorservices.ncdcr.gov
files.nc.gov
files.nc.gov
www.archaeology.ncdcr.gov
www.archives.ncdcr.gov
files.nc.gov
www.archives.ncdcr.gov
files.nc.gov
www.archaeology.ncdcr.gov
ncdcr.gov
www.archaeology.ncdcr.gov
ncdcr.gov
files.nc.gov
hpo.ncdcr.gov
files.nc.gov
roanokeisland.com
files.nc.gov
files.nc.gov
files.nc.gov
roanokeisland.com
files.nc.gov
files.nc.gov
ncdcr.gov
www.archives.ncdcr.gov
files.nc.gov
files.nc.gov
files.nc.gov
www.museumofthecapefear.ncdcr.gov
www.aplus-schools.ncdcr.gov
roanokeisland.com
files.nc.gov
files.nc.gov
hpo.ncdcr.gov
statelibrary2.ncdcr.gov
files.nc.gov
Ead.archives.ncdcr.gov
capitalareavisitorservices.ncdcr.gov
files.nc.gov
files.nc.gov
ncdcr.gov
files.nc.gov
files.nc.gov
roanokeisland.com
files.nc.gov
www.museumofthecapefear.ncdcr.gov
files.nc.gov
dncr.nc.gov
www.archives.ncdcr.gov
files.nc.gov
files.nc.gov
files.nc.gov
www.archaeology.ncdcr.gov
www.ncsbe.gov
Ead.archives.ncdcr.gov
files.nc.gov
files.nc.gov
files.nc.gov
www.archaeology.ncdcr.gov
files.nc.gov
Ead.archives.ncdcr.gov
capitalareavisitorservices.ncdcr.gov
files.nc.gov
www.museumofthecapefear.ncdcr.gov
www.ncsbe.gov
roanokeisland.com
www.archaeology.ncdcr.gov
files.nc.gov
dncr.nc.gov
www.aplus-schools.ncdcr.gov
ncdcr.gov
files.nc.gov
roanokeisland.com
ncdcr.gov
www.aplus-schools.ncdcr.gov
ncdcr.gov
ncdcr.gov
capitalareavisitorservices.ncdcr.gov
www.archaeology.ncdcr.gov
www.aplus-schools.ncdcr.gov
files.nc.gov
www.archaeology.ncdcr.gov
archaeology.ncdcr.gov
digital.ncdcr.gov
www.archives.ncdcr.gov
www.ncdcr.gov
Ead.archives.ncdcr.gov
files.nc.gov
files.nc.gov
ncdcr.gov
www.aplus-schools.ncdcr.gov
files.nc.gov

Certificate

The complete raw certificate details for www.archaeology.ncdcr.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqFiGYhtuGaHpW6uZ2QI
0l6rl70ZfLw6kKtpJ1jG7tTg/nkDQo36A/nFnczZk0wenRvI4NoOLdBKAlZPPKoY
gZtk7pZiNdiEck3Pk8YB9YKrGbAZqxC9nepIOzkohuBuh6itcyOeWm9BDMy9vE2r
yfl+YRBdUkXCA2FsgR0E0Zwh2GxQwMxkCVkHjHJDBkKtbkPzCnF0FQQwmbdPf8Jz
CfgoKqbAkqw+0SaTBKmhNiaEEbAMsFMZTu78wHshp5U5l4vFTVrEOWQoRt+dDOC8
hLm2BYVVbctKudKUQ1s8Ks83B/Dh0SBU1pTSgFlsdncyeYwzsRyVeJkSrUqCDXtY
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 423271321527401140915765314487513295767988
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-31 05:06:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-29 05:06:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.archaeology.ncdcr.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23054952526804266120963277563603766053402331280761888846149945216787825074778137487355452752578945952609914756347398834670198762804807138925609412988248486634920002143761510979869588798222295848629558684877999687448424823520904783347371111922596430010634274541280311611403014344566176876364349901885188000162133053588603058002380592900994441804548646644814827646246997480102864547234569760807010009641091710356200325829790017646607175419926780523851647467365626894584164105140525100068031752649504679005046664660812578121333810490912954107453787581003969654990145693218139875797753269122466564698194025258817280497751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25df9efed5c064b448a1416b756f93399ff527e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arch.dcr.state.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arch.dcr.state.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.archaeology.ncdcr.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b8456d011000004030046304402201eb91a0e4680f50d44a8c0f31948bf0b10fcf0ae5e13618f7c617b28dad1ced80220538763fed3187f5248dd38c8f895fde540c88483f92ed80219f3afea44b060f900760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b8456d05c0000040300473045022052ce9efa6235ad0c5782ba6c6c042d8ebddb33409c71186a5f0bad88406eaece022100dae4e032ca08b2a98fc6c5241b0be155924ea98591ed98e9816df832a6b5cd44
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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