ncdhhs.gov
Issued by R3
About this certificate
This digital certificate with serial number 04:8e:a4:95:cf:37:fa:ef:c7:91:2a:68:23:ff:25:82:9d:01 was issued on by Let's Encrypt.
With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=ncdhhs.gov
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:8e:a4:95:cf:37:fa:ef:c7:91:2a:68:23:ff:25:82:9d:01Serial Number (int): 396988011076248894313102971869233854717185
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 91:a1:da:32:41:7b:94:f9:d3:86:16:0b:03:b4:ef:65:7a:08:9c:8b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): bb:e7:fd:19:d4:e6:e7:8c:4a:5e:56:b3:63:b6:fe:d5:3e:ee:55:db
Fingerprint (sha256): 1e:0c:af:63:1c:41:95:df:97:9f:3f:71:e1:6f:cd:d3:eb:54:b3:2b:f5:73:d0:79:d4:a1:42:25:4c:2a:1f:4e
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate ncdhhs.gov
39
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ncdhhs.gov
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cap.state.nc.us
crh.ncdhhs.gov
dds.its.state.nc.us
dhhs.nc.gov
dhhs.state.nc.us
dirm.dhhs.state.nc.us
dirm.state.nc.us
dsdhh.dhhs.state.nc.us
dvr.dhhs.state.nc.us
ecatr.ncdhhs.gov
espanol.ncdhhs.gov
facility-services.state.nc.us
gripe.nc.gov
info.dhhs.state.nc.us
kids.dhhs.state.nc.us
mfp.ncdhhs.gov
murdochcenter.org
ncdhhs.gov
oems.ncdhhs.gov
oralhealth.ncdhhs.gov
publichealth.nc.gov
sifilis.nc.gov
syphilis.nc.gov
wch.dhhs.state.nc.us
wellcontractors.nc.gov
www.crh.ncdhhs.gov
www.dirm.dhhs.state.nc.us
www.dsdhh.dhhs.state.nc.us
www.espanol.ncdhhs.gov
www.facility-services.state.nc.us
www.gripe.nc.gov
www.mfp.ncdhhs.gov
www.murdochcenter.org
www.oems.ncdhhs.gov
www.oralhealth.ncdhhs.gov
www.publichealth.nc.gov
www.sifilis.nc.gov
www.syphilis.nc.gov
www.wch.dhhs.state.nc.us
crh.ncdhhs.gov
dds.its.state.nc.us
dhhs.nc.gov
dhhs.state.nc.us
dirm.dhhs.state.nc.us
dirm.state.nc.us
dsdhh.dhhs.state.nc.us
dvr.dhhs.state.nc.us
ecatr.ncdhhs.gov
espanol.ncdhhs.gov
facility-services.state.nc.us
gripe.nc.gov
info.dhhs.state.nc.us
kids.dhhs.state.nc.us
mfp.ncdhhs.gov
murdochcenter.org
ncdhhs.gov
oems.ncdhhs.gov
oralhealth.ncdhhs.gov
publichealth.nc.gov
sifilis.nc.gov
syphilis.nc.gov
wch.dhhs.state.nc.us
wellcontractors.nc.gov
www.crh.ncdhhs.gov
www.dirm.dhhs.state.nc.us
www.dsdhh.dhhs.state.nc.us
www.espanol.ncdhhs.gov
www.facility-services.state.nc.us
www.gripe.nc.gov
www.mfp.ncdhhs.gov
www.murdochcenter.org
www.oems.ncdhhs.gov
www.oralhealth.ncdhhs.gov
www.publichealth.nc.gov
www.sifilis.nc.gov
www.syphilis.nc.gov
www.wch.dhhs.state.nc.us
Other certificates including the domain name ncdhhs.gov
(limited to 100 certificates)
files.nc.gov
www.ncdhhs.gov
injuryfreenc.ncdhhs.gov
files.nc.gov
vendor-wic.ncdhhs.gov
testsecurity.ncdhhs.gov
files.nc.gov
www.credentials.ncdhhs.gov
*.ncdhhs.gov
mit.api.sip.mes.ncdhhs.gov
tobaccopreventionandcontrol.ncdhhs.gov
files.nc.gov
files.nc.gov
ncdhhs.gov
policies-dev.ncdhhs.gov
www.eureka.ncdhhs.gov
injuryfreenc.ncdhhs.gov
files.nc.gov
*.ncdhhs.gov
*.ncdhhs.gov
*.ncdhhs.gov
files.nc.gov
files.nc.gov
test.mft-console.sip.mes.ncdhhs.gov
ncdhhs.gov
files.nc.gov
myncwic-uat.ncdhhs.gov
icam.mes.ncdhhs.gov
www.credentials.ncdhhs.gov
ncdhhs.gov
injuryfreenc.ncdhhs.gov
sni.cloudflaressl.com
*.ncdhhs.gov
*.ncdhhs.gov
files.nc.gov
wrtk.ncdhhs.gov
uat.sip.mes.ncdhhs.gov
www.bcccp.ncdhhs.gov
www2.ncdhhs.gov
ncdhhs.gov
*.dph.ncdhhs.gov
*.ncdhhs.gov
sni.cloudflaressl.com
*.ncdhhs.gov
www.ccr.ncdhhs.gov
*.ncdhhs.gov
sni.cloudflaressl.com
files.nc.gov
*.ncdhhs.gov
news.ncdhhs.gov
*.ncdhhs.gov
bcccp.ncdhhs.gov
ncdhhs.gov
view.sms.email.ncdhhs.gov
www.dma.ncdhhs.gov
files.nc.gov
*.ncdhhs.gov
ncdhhs.gov
socializesafer-uat.ncdhhs.gov
*.ncdhhs.gov
go.ncdhhs.gov
*.ncdhhs.gov
*.ncdhhs.gov
files.nc.gov
*.ncdhhs.gov
*.dph.ncdhhs.gov
files.nc.gov
files.nc.gov
mes.ncdhhs.gov
files.nc.gov
*.ncdhhs.gov
phpmyadmin-uat.ncdhhs.gov
ehids.eh.ncdhhs.gov
vendor-wic.ncdhhs.gov
jtcommunicationbulletins.ncdhhs.gov
outreach.ncdhhs.gov
www.credentials.ncdhhs.gov
*.dph.ncdhhs.gov
loginpp.eh.ncdhhs.gov
testhcbs.ncdhhs.gov
*.ncdhhs.gov
ehids.eh.ncdhhs.gov
files.nc.gov
ehidstest.eh.ncdhhs.gov
ncir-dev8.ncdhhs.gov
*.ncdhhs.gov
files.nc.gov
*.ncdhhs.gov
files.nc.gov
*.ncdhhs.gov
jtcommunicationbulletins.ncdhhs.gov
*.ncdhhs.gov
*.ncdhhs.gov
sni.cloudflaressl.com
ncfastappinvp.ncdhhs.gov
news.ncdhhs.gov
bcccp.ncdhhs.gov
*.ncdhhs.gov
*.dph.ncdhhs.gov
files.nc.gov
www.ncdhhs.gov
injuryfreenc.ncdhhs.gov
files.nc.gov
vendor-wic.ncdhhs.gov
testsecurity.ncdhhs.gov
files.nc.gov
www.credentials.ncdhhs.gov
*.ncdhhs.gov
mit.api.sip.mes.ncdhhs.gov
tobaccopreventionandcontrol.ncdhhs.gov
files.nc.gov
files.nc.gov
ncdhhs.gov
policies-dev.ncdhhs.gov
www.eureka.ncdhhs.gov
injuryfreenc.ncdhhs.gov
files.nc.gov
*.ncdhhs.gov
*.ncdhhs.gov
*.ncdhhs.gov
files.nc.gov
files.nc.gov
test.mft-console.sip.mes.ncdhhs.gov
ncdhhs.gov
files.nc.gov
myncwic-uat.ncdhhs.gov
icam.mes.ncdhhs.gov
www.credentials.ncdhhs.gov
ncdhhs.gov
injuryfreenc.ncdhhs.gov
sni.cloudflaressl.com
*.ncdhhs.gov
*.ncdhhs.gov
files.nc.gov
wrtk.ncdhhs.gov
uat.sip.mes.ncdhhs.gov
www.bcccp.ncdhhs.gov
www2.ncdhhs.gov
ncdhhs.gov
*.dph.ncdhhs.gov
*.ncdhhs.gov
sni.cloudflaressl.com
*.ncdhhs.gov
www.ccr.ncdhhs.gov
*.ncdhhs.gov
sni.cloudflaressl.com
files.nc.gov
*.ncdhhs.gov
news.ncdhhs.gov
*.ncdhhs.gov
bcccp.ncdhhs.gov
ncdhhs.gov
view.sms.email.ncdhhs.gov
www.dma.ncdhhs.gov
files.nc.gov
*.ncdhhs.gov
ncdhhs.gov
socializesafer-uat.ncdhhs.gov
*.ncdhhs.gov
go.ncdhhs.gov
*.ncdhhs.gov
*.ncdhhs.gov
files.nc.gov
*.ncdhhs.gov
*.dph.ncdhhs.gov
files.nc.gov
files.nc.gov
mes.ncdhhs.gov
files.nc.gov
*.ncdhhs.gov
phpmyadmin-uat.ncdhhs.gov
ehids.eh.ncdhhs.gov
vendor-wic.ncdhhs.gov
jtcommunicationbulletins.ncdhhs.gov
outreach.ncdhhs.gov
www.credentials.ncdhhs.gov
*.dph.ncdhhs.gov
loginpp.eh.ncdhhs.gov
testhcbs.ncdhhs.gov
*.ncdhhs.gov
ehids.eh.ncdhhs.gov
files.nc.gov
ehidstest.eh.ncdhhs.gov
ncir-dev8.ncdhhs.gov
*.ncdhhs.gov
files.nc.gov
*.ncdhhs.gov
files.nc.gov
*.ncdhhs.gov
jtcommunicationbulletins.ncdhhs.gov
*.ncdhhs.gov
*.ncdhhs.gov
sni.cloudflaressl.com
ncfastappinvp.ncdhhs.gov
news.ncdhhs.gov
bcccp.ncdhhs.gov
*.ncdhhs.gov
*.dph.ncdhhs.gov
files.nc.gov
Certificate
The complete raw certificate details for ncdhhs.gov in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIFDCCBvygAwIBAgISBI6klc83+u/HkSpoI/8lgp0BMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MjgyMzU2NTJaFw0yNDA3MjcyMzU2NTFaMBUxEzARBgNVBAMT Cm5jZGhocy5nb3YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK9NWx uSZOaodwGWFxBkKP4Gwas7n0Wgdo+7oWH/c++0yrEKf+exhdUz3+n33EtQPt1x3j EsDYlOK0QThFkVAOVl1I9dITLB43GzG4kcMIv8dJvaSStP6MOseoFVtbseW3Oais bnB30dZGGr+LwZr/wTQBshAZ09o6BOVrUZQ3HpPEjnIY8oQnsjHHCsIO4zWYeAsh 8B2tDbgAoo+Qr1ldRK6tN93ZxRcjwCZw+ksvziHeYr1VzTY7dVFzTAuvPdB89RJZ mX8ZWZtk7wuQMeklOhoUwfCzcMkEdmrw57NY3q/umMrR75IevsdM+toOFI+bHhMg 60AIw7mplZiGkfWtAgMBAAGjggU/MIIFOzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FJGh2jJBe5T504YWCwO072V6CJyLMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYf r52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8u bGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIID RAYDVR0RBIIDOzCCAzeCD2NhcC5zdGF0ZS5uYy51c4IOY3JoLm5jZGhocy5nb3aC E2Rkcy5pdHMuc3RhdGUubmMudXOCC2RoaHMubmMuZ292ghBkaGhzLnN0YXRlLm5j LnVzghVkaXJtLmRoaHMuc3RhdGUubmMudXOCEGRpcm0uc3RhdGUubmMudXOCFmRz ZGhoLmRoaHMuc3RhdGUubmMudXOCFGR2ci5kaGhzLnN0YXRlLm5jLnVzghBlY2F0 ci5uY2RoaHMuZ292ghJlc3Bhbm9sLm5jZGhocy5nb3aCHWZhY2lsaXR5LXNlcnZp Y2VzLnN0YXRlLm5jLnVzggxncmlwZS5uYy5nb3aCFWluZm8uZGhocy5zdGF0ZS5u Yy51c4IVa2lkcy5kaGhzLnN0YXRlLm5jLnVzgg5tZnAubmNkaGhzLmdvdoIRbXVy ZG9jaGNlbnRlci5vcmeCCm5jZGhocy5nb3aCD29lbXMubmNkaGhzLmdvdoIVb3Jh bGhlYWx0aC5uY2RoaHMuZ292ghNwdWJsaWNoZWFsdGgubmMuZ292gg5zaWZpbGlz Lm5jLmdvdoIPc3lwaGlsaXMubmMuZ292ghR3Y2guZGhocy5zdGF0ZS5uYy51c4IW d2VsbGNvbnRyYWN0b3JzLm5jLmdvdoISd3d3LmNyaC5uY2RoaHMuZ292ghl3d3cu ZGlybS5kaGhzLnN0YXRlLm5jLnVzghp3d3cuZHNkaGguZGhocy5zdGF0ZS5uYy51 c4IWd3d3LmVzcGFub2wubmNkaGhzLmdvdoIhd3d3LmZhY2lsaXR5LXNlcnZpY2Vz LnN0YXRlLm5jLnVzghB3d3cuZ3JpcGUubmMuZ292ghJ3d3cubWZwLm5jZGhocy5n b3aCFXd3dy5tdXJkb2NoY2VudGVyLm9yZ4ITd3d3Lm9lbXMubmNkaGhzLmdvdoIZ d3d3Lm9yYWxoZWFsdGgubmNkaGhzLmdvdoIXd3d3LnB1YmxpY2hlYWx0aC5uYy5n b3aCEnd3dy5zaWZpbGlzLm5jLmdvdoITd3d3LnN5cGhpbGlzLm5jLmdvdoIYd3d3 LndjaC5kaGhzLnN0YXRlLm5jLnVzMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBgYK KwYBBAHWeQIEAgSB9wSB9ADyAHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/ qznYhHMAAAGPJ1rKYQAABAMASDBGAiEAp6WKcbwACPS44tXSb/OxCJpfQrX8W28L 777HfyexoGICIQDl3cccnk7krOLr7+B80l8NseAdfrC7DgTiqoqVNyI5/gB3ABmY EHEJ8NZSLjCA0p4/ZLuDbijM+Q9Sju7fzko/FrTKAAABjydaynAAAAQDAEgwRgIh APZK5hfWomQnwDlNrszMGy+AyjuZHszPnvFNU+J9TOiEAiEAhHzdofPbEKq8aChc PCCNSuUFuQH32V2VE3WRcFWyuyMwDQYJKoZIhvcNAQELBQADggEBABSgKZU4K8ZT yMopL9J2MVxMtQId23FD6PqeKaSQhhIVOVxWznyZsPRY6GvkPFnMX+OMYER4ZTwk Bj21AVeWosyga1m1qKjNf5oS7Mldumli1KboirRINtjuMq8J1TLG6EuElkqgdFTk CM2Xo5j8k2qi+bhclgD41M7lexlsdCOp/B8hnCaZcZFBmi6WP6jPYCFJTRJtCapL qpDZiyfYqA/z8SXnPfRp94Rh9BcE7B9FFBvAEV7VI9xT3nSdcdKbulsDW6ZuWsEq sSx/J4yS7zMN8NXZAS+PL/XanTTOs80chthY3YAXXQcqVRDgEDuV4V25lHcwaSVC 0nLKpf3GsLU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvTVsbkmTmqHcBlhcQZC j+BsGrO59FoHaPu6Fh/3PvtMqxCn/nsYXVM9/p99xLUD7dcd4xLA2JTitEE4RZFQ DlZdSPXSEyweNxsxuJHDCL/HSb2kkrT+jDrHqBVbW7HltzmorG5wd9HWRhq/i8Ga /8E0AbIQGdPaOgTla1GUNx6TxI5yGPKEJ7IxxwrCDuM1mHgLIfAdrQ24AKKPkK9Z XUSurTfd2cUXI8AmcPpLL84h3mK9Vc02O3VRc0wLrz3QfPUSWZl/GVmbZO8LkDHp JToaFMHws3DJBHZq8OezWN6v7pjK0e+SHr7HTPraDhSPmx4TIOtACMO5qZWYhpH1 rQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 396988011076248894313102971869233854717185 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-28 23:56:52 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-27 23:56:51 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ncdhhs.gov' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25620870114724560833202284954217638389676324003547699350052282907777640623811362377545284093254476067723614996635510720496428086700598247438799697493084545747241030652294160399900939323463412256437542701254379064593672963371632829057074872303728058743664588748880946124854499917090668612708517622760051747201620867791278630325782374837302638744400727834240577551753280204955175841740161145100304079106390548873693306853098612459210588259694753927668306262559665119222005493532676095033930863519876383559311003397403294910092013846007348447354097699574448227241768142145852012185028963642331679681626110621398823204269 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 91a1da32417b94f9d386160b03b4ef657a089c8b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (827 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cap.state.nc.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crh.ncdhhs.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dds.its.state.nc.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhhs.nc.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhhs.state.nc.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dirm.dhhs.state.nc.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dirm.state.nc.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsdhh.dhhs.state.nc.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvr.dhhs.state.nc.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecatr.ncdhhs.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espanol.ncdhhs.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facility-services.state.nc.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gripe.nc.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.dhhs.state.nc.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kids.dhhs.state.nc.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfp.ncdhhs.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'murdochcenter.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncdhhs.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oems.ncdhhs.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oralhealth.ncdhhs.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publichealth.nc.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sifilis.nc.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syphilis.nc.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wch.dhhs.state.nc.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellcontractors.nc.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crh.ncdhhs.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dirm.dhhs.state.nc.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsdhh.dhhs.state.nc.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espanol.ncdhhs.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.facility-services.state.nc.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gripe.nc.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mfp.ncdhhs.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.murdochcenter.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oems.ncdhhs.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oralhealth.ncdhhs.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.publichealth.nc.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sifilis.nc.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.syphilis.nc.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wch.dhhs.state.nc.us' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f275aca610000040300483046022100a7a58a71bc0008f4b8e2d5d26ff3b1089a5f42b5fc5b6f0befbec77f27b1a062022100e5ddc71c9e4ee4ace2ebefe07cd25f0db1e01d7eb0bb0e04e2aa8a95372239fe0077001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f275aca700000040300483046022100f64ae617d6a26427c0394daecccc1b2f80ca3b991ecccf9ef14d53e27d4ce884022100847cdda1f3db10aabc68285c3c208d4ae505b901f7d95d951375917055b2bb23 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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