files.nc.gov

- Executive Office of the State of North Carolina -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:08:8e:eb:f3:2f:c4:12:06:4d:9e:81:de:e1:f9:8b was issued on by DigiCert Inc.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Executive Office of the State of North Carolina

Organization: Executive Office of the State of North Carolina
State / Province: North Carolina
Locality: Raleigh
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:08:8e:eb:f3:2f:c4:12:06:4d:9e:81:de:e1:f9:8b
Serial Number (int): 10678261137192117810013203912015870347
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 58:8a:da:c4:a8:ef:3a:71:cb:2f:69:d2:8c:a2:17:a6:10:4c:03:3a
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 8a:8e:39:e8:f8:45:fe:c1:37:20:f0:82:e7:bd:e2:41:14:d0:b7:7a
Fingerprint (sha256): 32:ba:e5:ea:ea:2d:07:7d:f3:44:4c:2a:b2:39:0e:4d:4d:5f:a9:6c:05:a5:5d:8e:d7:33:20:8c:67:bf:de:4d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-2.crl

Check the revocation status for certificate files.nc.gov

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for files.nc.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

files.nc.gov
aplus-schools.ncdcr.gov
www.mgmnc.org
museumofthecapefear.ncdcr.gov
www.ncparks.gov
www.museumofthealbemarle.com
www.ncarts.org
digitalcommons.nc.gov
www.ncmuseumofhistory.org
publicstaff.nc.gov
www.nc.gov
governor.nc.gov
www.ncdcr.gov
www.ncdhhs.gov
oshr.nc.gov
www.ncdor.gov
www.osbm.nc.gov
deq.nc.gov
dma.ncdhhs.gov
www.ncdps.gov
ncadmin.nc.gov
www.milvets.nc.gov
hiea.nc.gov
www.ncnhp.org
statelibrary.ncdcr.gov
www.hpo.ncdcr.gov
www.nchistoricsites.org
archaeology.ncdcr.gov
www.qaronline.org
ltgov.nc.gov
ncchildcare.nc.gov
www.osc.nc.gov
earlylearningchallenge.nc.gov
archives.ncdcr.gov
it.nc.gov
www.rebuild.nc.gov
deftech.nc.gov
cwmtf.nc.gov
www.labor.nc.gov
aahc.nc.gov
digitalstyle.nc.gov
www.roanokeisland.com
hometownstrong.nc.gov
www.ncbroadband.gov
www.oah.nc.gov
api.nc.gov
labs.nc.gov
digital.nc.gov
analytics.nc.gov
www.shpnc.org
trails.nc.gov
medicaid.ncdhhs.gov
www.eenorthcarolina.org
census.nc.gov
ncjobready.nc.gov
www.nccommerce.com
ready.nc.gov
historicsites.nc.gov
apnep.nc.gov
www.myncretirement.com
www.nccash.com
help.myncretirement.com
www.dpi.nc.gov
www.ncdoi.gov
www.readync.org
eprocurement.nc.gov
talentdev.nc.gov
www.auditor.nc.gov
www.nctreasurer.com
des.nc.gov
familyfarms.nc.gov
covid19.ncdhhs.gov
www.ncosfm.gov
ethics.nc.gov
www.ncsbe.gov
nclwf.nc.gov
oshrc.nc.gov
www.readync.gov
ncpro.nc.gov
ncable.nc.gov
cjin.nc.gov
ourncmilitary.nc.gov
www.ncptboard.org
ncsbe-elearning.nc.gov
dit-survey.nc.gov
nccob.nc.gov
dctraining.nc.gov
itservices.nc.gov
ng.nc.gov
www.commerce.nc.gov
www.innovation.nc.gov
aihc.nc.gov

Other certificates including the domain name nc.gov

(limited to 100 certificates)
ncidp.nc.gov
dev.phonepurchase.nc.gov
tts-eu.inrix.com
edm.nc.gov
ssl1.revizesites.com
www.vitalrecords.nc.gov
www.auditor.nc.gov
ncgs.nc.gov
govadmin.nc.gov
qa.ibis.nc.gov
ncchildcareadmin.nc.gov
slot-gopay.digitalcommons.nc.gov
tax.des.nc.gov
firstnet.nc.gov
files.nc.gov
mybeacon.nc.gov
opendurham.nc.gov
imap.mail.nc.gov
test.epass.nc.gov
des.cara.nc.gov
ncfastcwsinquiry.nc.gov
flu.nc.gov
www.ltgov.nc.gov
svn.ic.nc.gov
labor.nc.gov
dor-ssl-2.dor.nc.gov
IRISK.NC.GOV
dor-2119-int-fw.nc.gov
dirweb.nc.gov
apps.ncagr.gov
wastetrader.deq.nc.gov
other-redirects-002.dc.nc.gov
ncfastvirusscan.nc.gov
dcdee.works.nc.gov
ccms-train.ic.nc.gov
ccms-test.ic.nc.gov
ncfast.nc.gov
WB03.QA.NC.GOV
oah.nc.gov
idppre.nc.gov
VC-EXP-E1.ncdps.gov
ibis.nc.gov
ssl1.revizesites.com
cmepprovidermap.dhhs.nc.gov
ssl1.revizesites.com
redirect.nc.gov
alb-priv-dhhs-ncfast-esb-p.cloud.nc.gov
immunize.nc.gov
publichealth.nc.gov
des.qa.edm.nc.gov
uet002.ncfast.nc.gov
www.it.nc.gov
rlnciddl.nc.gov
admin.nccat.nc.gov
ivms.userpref.sip.nc.gov
qpi.ebs.nc.gov
ncfasttraining.nc.gov
providerportal.nc.gov
ncfastdmscnpp.nc.gov
files.nc.gov
ncidws.nc.gov
bi.nc.gov
www.b3council.nc.gov
Qa.phoneRepair.nc.gov
files.nc.gov
www.dcdee.moodle.nc.gov
swucintf.doa.nc.gov
ncgs.nc.gov
www.djjdp.org
ncchildcare.nc.gov
www.vitalrecords.nc.gov
qa.cjleads.nc.gov
fw2vpn.dor.nc.gov
ncidp.nc.gov
ncfastebcc.nc.gov
ncguardview.nc.gov
www.sos.nc.gov
cas35.mail.nc.gov
economicbenefits.nc.gov
www.it.nc.gov
mybeacon.nc.gov
legacy.ibis.nc.gov
touchdown.nc.gov
hiea.nc.gov
redirect.nc.gov
sni.cloudflaressl.com
ncidws.nc.gov
fris.nc.gov
ncidsspr.nc.gov
ncc870.its.state.nc.us
files.nc.gov
www.vras.nc.gov
ccms-test.ic.nc.gov
ncfastapp08.nc.gov
mybeacon.nc.gov
qa.ibis.nc.gov
svn.ic.nc.gov
devt.vts.nc.gov
Qa.phonepurchase.nc.gov
ncdcr.gov

Certificate

The complete raw certificate details for files.nc.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7oPn/N/yjOA94DlPQvxh
i/ubuHpYQwNCe3jujWOW+eJT7wEUdtnX0QEiPjWfXhZUsK9JaOEANGONrMFou/b2
ZkPE0YuRgPBVqonvSvwqlvpL9nLFp23HF7otUmTERIwn8+at3cBEmEhFJEhoRwfN
WpbEvL6unAr6wiuQnXsUZbheiwaQPYYKiV8Nl6ceAJPg39snL/SBu2btxpNQIc6k
8RyYRPNNMDsPiBDfvvCEi0aXI55p6nGvMVVQ+HxeoPXUSIYt7QZTIk8uJZ5NCpC9
GLPm2ZW5pLmdAlrMAXwRJQx53QKhkbZHUN5xwXk6GZ5hLxrxwXvyslLWrcOltvQ/
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10678261137192117810013203912015870347
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Raleigh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Executive Office of the State of North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'files.nc.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30109761954556805204814979625495047088550986205034390928748962270880603033216084585661616619826682266039456336155469032071295980521208519807951729799388281716861049252207719529416704087713124852905288321191050754042623565248318502472727726257185056797096139301674126576340146011997138085203358704524936111538897599947212135027344865296893174661935034057179983452082714604895044997183260202254257008227171737214735232529915693257491938056392782959285333207300149996698597314390889676648627361754902980419353329967553589142008103692841675490647321691943062299843208706715998899497556358140373228336853678725900795133943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							588adac4a8ef3a71cb2f69d28ca217a6104c033a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1662 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aplus-schools.ncdcr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mgmnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'museumofthecapefear.ncdcr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncparks.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.museumofthealbemarle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalcommons.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncmuseumofhistory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicstaff.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'governor.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncdcr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncdhhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oshr.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncdor.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osbm.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deq.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma.ncdhhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncdps.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncadmin.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.milvets.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiea.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncnhp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statelibrary.ncdcr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpo.ncdcr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nchistoricsites.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archaeology.ncdcr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qaronline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ltgov.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncchildcare.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osc.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earlylearningchallenge.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archives.ncdcr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rebuild.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deftech.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwmtf.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.labor.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aahc.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalstyle.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roanokeisland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hometownstrong.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncbroadband.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oah.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labs.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shpnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trails.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicaid.ncdhhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eenorthcarolina.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'census.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncjobready.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nccommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ready.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicsites.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apnep.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myncretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nccash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.myncretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dpi.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncdoi.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readync.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eprocurement.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talentdev.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auditor.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nctreasurer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'des.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familyfarms.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid19.ncdhhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncosfm.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethics.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncsbe.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nclwf.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oshrc.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readync.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncpro.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncable.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjin.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourncmilitary.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncptboard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncsbe-elearning.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dit-survey.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nccob.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dctraining.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itservices.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ng.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commerce.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innovation.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aihc.nc.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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