www.ncagr.gov

Issued by R3

About this certificate

This digital certificate with serial number 03:c0:d3:02:59:64:d2:8f:bf:ae:eb:3c:3e:65:29:4a:4d:c1 was issued on by Let's Encrypt.

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.ncagr.gov

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c0:d3:02:59:64:d2:8f:bf:ae:eb:3c:3e:65:29:4a:4d:c1
Serial Number (int): 326951551548927695853756054520902659493313
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2b:31:0c:53:6e:21:e4:02:1e:10:0b:6b:af:5a:ce:bc:19:5f:85:ad
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 54:e1:fb:b1:61:12:7c:73:a0:4f:11:0b:c2:ac:6d:e4:25:a7:74:1c
Fingerprint (sha256): 80:89:dd:69:c0:3e:94:f9:a5:1c:34:db:6f:d7:6e:a0:3c:ee:51:93:aa:a3:b1:78:48:ba:1e:9b:26:ca:3f:df

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.ncagr.gov

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ncagr.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apps.ncagr.gov
appsdev.ncagr.gov
appsuat.ncagr.gov
boss.ncagr.gov
bossdesk.ncagr.gov
dev.ncmhtd.com
dupontstaterecreationalforest.com
foodsafetytaskforce.nc.gov
gatehouse.ncagr.gov
gottobencfestival.com
intranet.ncagr.gov
iqs.nc.gov
labworks.ncagr.gov
labworkstest.ncagr.gov
lf.ncagr.gov
lfdev.ncagr.gov
mfsdev.ncagr.gov
mountainislandforest.com
ncadfp.org
ncagr.gov
ncesf.org
ncfarmfresh.com
ncfooddist.com
ncfoodsafety.com
ncforestactionplan.com
ncforestassessment.com
ncforestservice.gov
ncfreshlink.com
ncfriendsofagriculture.org
nclongleaf.org
ncstatefair.org
resistwildfirenc.org
teamsites.ncagr.gov
teamsitesdev.ncagr.gov
test.ncmhtd.com
www.dupontstaterecreationalforest.com
www.foodsafetytaskforce.nc.gov
www.gottobencfestival.com
www.iqs.nc.gov
www.mountainislandforest.com
www.ncadfp.org
www.ncagr.gov
www.ncesf.org
www.ncfarmfresh.com
www.ncfooddist.com
www.ncfoodsafety.com
www.ncforestactionplan.com
www.ncforestassessment.com
www.ncforestservice.gov
www.ncfreshlink.com
www.ncfriendsofagriculture.org
www.nclongleaf.org
www.ncmhtd.com
www.ncstatefair.org
www.resistwildfirenc.org
wwwdev.ncagr.gov
wwwdev.ncfooddist.com

Other certificates including the domain name ncagr.gov

(limited to 100 certificates)
apps.ncagr.gov
*.blog.ncagr.gov
www.ncagr.gov
ncagr.gov
mfs.ncagr.gov
www.ncagr.gov
*.blog.ncagr.gov
apps.ncagr.gov
www.ncagr.gov
www.ncagr.gov
ncagr.gov
intranet.ncagr.gov
teamsites.ncagr.gov
teamsites.ncagr.gov
apps.ncagr.gov
files.nc.gov
files.nc.gov
www.ncagr.gov
www.ncagr.gov
files.nc.gov
apps.ncagr.gov
apps.ncagr.gov
teamsites.ncagr.gov
mfs.ncagr.gov
teamsites.ncagr.gov
www.ncagr.gov
apps.ncagr.gov
www.ncagr.gov
teamsites.ncagr.gov
www.ncagr.gov
www.ncagr.gov
apps.ncagr.gov
apps.ncagr.gov
www.ncagr.gov
ncagr.gov
intranet.ncagr.gov
intranet.ncagr.gov
files.nc.gov
www.ncagr.gov
www.ncagr.gov
www.ncagr.gov
files.nc.gov
www.ncagr.gov
apps.ncagr.gov
intranet.ncagr.gov
apps.ncagr.gov
apps.ncagr.gov
apps.ncagr.gov
apps.ncagr.gov
intranet.ncagr.gov
www.ncagr.gov
apps.ncagr.gov
www.ncagr.gov
*.blog.ncagr.gov
intranet.ncagr.gov
teamsites.ncagr.gov
apps.ncagr.gov
apps.ncagr.gov
support.ncagr.gov
apps.ncagr.gov
ncagr.gov
apps.ncagr.gov
www.ncagr.gov
mfs.ncagr.gov
files.nc.gov
apps.ncagr.gov
apps.ncagr.gov
apps.ncagr.gov
www.ncagr.gov
*.blog.ncagr.gov
apps.ncagr.gov
apps.ncagr.gov
intranet.ncagr.gov
ncagr.gov
apps.ncagr.gov

Certificate

The complete raw certificate details for www.ncagr.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJhzCCCG+gAwIBAgISA8DTAllk0o+/rus8PmUpSk3BMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMTUxMzAxNThaFw0yNDAyMTMxMzAxNTdaMBgxFjAUBgNVBAMT
DXd3dy5uY2Fnci5nb3YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH
axlETQcAlZSZJNwtzSIaeBSNbFQB1/UvrIF6899CWwcUG0CfFqIQ19XttDn/Hk3n
ZIk/jSTMw8fhEgTT7xUADB4rYUJnK2MR2Q5PqQiW/WK4dNCEp0grVddmBndMJqMc
+xwE/dXOWUSMC2lUF8VsFf9BDesA28jzbgIK1uJt5HRlJpBSjllABSCg0V5+z5sn
qVg7AhtDde9zJWlfdeMY5ujVR3C7kB6zjxaFEqBcya6uV8cmhQ2676CjwD73l304
fLf8fuoKFilMeaYkwQtI6f/sX/v6Bh89EzpZuySJREWXE9V6JZhJRTkpzVsxG5mA
YxERu4Y/gj/JJth5Us97AgMBAAGjggavMIIGqzAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFCsxDFNuIeQCHhALa69azrwZX4WtMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJ
QOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3Iz
Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcv
MIIEtAYDVR0RBIIEqzCCBKeCDmFwcHMubmNhZ3IuZ292ghFhcHBzZGV2Lm5jYWdy
LmdvdoIRYXBwc3VhdC5uY2Fnci5nb3aCDmJvc3MubmNhZ3IuZ292ghJib3NzZGVz
ay5uY2Fnci5nb3aCDmRldi5uY21odGQuY29tgiFkdXBvbnRzdGF0ZXJlY3JlYXRp
b25hbGZvcmVzdC5jb22CGmZvb2RzYWZldHl0YXNrZm9yY2UubmMuZ292ghNnYXRl
aG91c2UubmNhZ3IuZ292ghVnb3R0b2JlbmNmZXN0aXZhbC5jb22CEmludHJhbmV0
Lm5jYWdyLmdvdoIKaXFzLm5jLmdvdoISbGFid29ya3MubmNhZ3IuZ292ghZsYWJ3
b3Jrc3Rlc3QubmNhZ3IuZ292ggxsZi5uY2Fnci5nb3aCD2xmZGV2Lm5jYWdyLmdv
doIQbWZzZGV2Lm5jYWdyLmdvdoIYbW91bnRhaW5pc2xhbmRmb3Jlc3QuY29tggpu
Y2FkZnAub3JnggluY2Fnci5nb3aCCW5jZXNmLm9yZ4IPbmNmYXJtZnJlc2guY29t
gg5uY2Zvb2RkaXN0LmNvbYIQbmNmb29kc2FmZXR5LmNvbYIWbmNmb3Jlc3RhY3Rp
b25wbGFuLmNvbYIWbmNmb3Jlc3Rhc3Nlc3NtZW50LmNvbYITbmNmb3Jlc3RzZXJ2
aWNlLmdvdoIPbmNmcmVzaGxpbmsuY29tghpuY2ZyaWVuZHNvZmFncmljdWx0dXJl
Lm9yZ4IObmNsb25nbGVhZi5vcmeCD25jc3RhdGVmYWlyLm9yZ4IUcmVzaXN0d2ls
ZGZpcmVuYy5vcmeCE3RlYW1zaXRlcy5uY2Fnci5nb3aCFnRlYW1zaXRlc2Rldi5u
Y2Fnci5nb3aCD3Rlc3QubmNtaHRkLmNvbYIld3d3LmR1cG9udHN0YXRlcmVjcmVh
dGlvbmFsZm9yZXN0LmNvbYIed3d3LmZvb2RzYWZldHl0YXNrZm9yY2UubmMuZ292
ghl3d3cuZ290dG9iZW5jZmVzdGl2YWwuY29tgg53d3cuaXFzLm5jLmdvdoIcd3d3
Lm1vdW50YWluaXNsYW5kZm9yZXN0LmNvbYIOd3d3Lm5jYWRmcC5vcmeCDXd3dy5u
Y2Fnci5nb3aCDXd3dy5uY2VzZi5vcmeCE3d3dy5uY2Zhcm1mcmVzaC5jb22CEnd3
dy5uY2Zvb2RkaXN0LmNvbYIUd3d3Lm5jZm9vZHNhZmV0eS5jb22CGnd3dy5uY2Zv
cmVzdGFjdGlvbnBsYW4uY29tghp3d3cubmNmb3Jlc3Rhc3Nlc3NtZW50LmNvbYIX
d3d3Lm5jZm9yZXN0c2VydmljZS5nb3aCE3d3dy5uY2ZyZXNobGluay5jb22CHnd3
dy5uY2ZyaWVuZHNvZmFncmljdWx0dXJlLm9yZ4ISd3d3Lm5jbG9uZ2xlYWYub3Jn
gg53d3cubmNtaHRkLmNvbYITd3d3Lm5jc3RhdGVmYWlyLm9yZ4IYd3d3LnJlc2lz
dHdpbGRmaXJlbmMub3JnghB3d3dkZXYubmNhZ3IuZ292ghV3d3dkZXYubmNmb29k
ZGlzdC5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEGBgorBgEEAdZ5AgQCBIH3
BIH0APIAdwA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAYvTSep6
AAAEAwBIMEYCIQCufVtp159AztCI7R38LFYLiAM/vH7S37HJZ4atLCB4pgIhANrS
48CJMHacTQdpd7a7K+xygVXs+PEJ+2K8eYJWzAyqAHcA7s3QZNXbGs7FXLedtM0T
ojKHRny87N7DUUhZRnEftZsAAAGL00nqeAAABAMASDBGAiEAyg5kpqbJ6d185dwK
X4dkSJDBE+9o2egTclTJqJBqSfkCIQCRlv45b7PQF5DNIwiySonlMcmWmYoTK9er
VofJGfumzjANBgkqhkiG9w0BAQsFAAOCAQEAPHmOivCNvzy47PUZ1qUhKUkl8joi
YY7BdCAT9HU/0rVJB8oSGZ72cy9MwYERVPYP78H8eeTkRNk/k7aMsziI/aUqePAH
I6QvSgRamQ+KmWB5GxIrCuU0CUU1NoCV6oXDy+QxgraGWK3Aa0AeUumlVUBktZr0
KZ/NKIEpw7sR0l+ITuXRx8qcHmphOywnshmFs98Mxsad86cK/O7mSlwjKtcM4+oh
qGtMpaPULMv5PXMcMK9x/jgMDQ+M3O3qAQAqxof395y+MtDrIwN/d6AX5Z7uQoPR
rMA1FJrnNkv8HjC/IapXMkEdDMkPDx+wQYmw1Hd3BMkip69YPrnoPoC8Mw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2sZRE0HAJWUmSTcLc0i
GngUjWxUAdf1L6yBevPfQlsHFBtAnxaiENfV7bQ5/x5N52SJP40kzMPH4RIE0+8V
AAweK2FCZytjEdkOT6kIlv1iuHTQhKdIK1XXZgZ3TCajHPscBP3VzllEjAtpVBfF
bBX/QQ3rANvI824CCtbibeR0ZSaQUo5ZQAUgoNFefs+bJ6lYOwIbQ3XvcyVpX3Xj
GObo1Udwu5Aes48WhRKgXMmurlfHJoUNuu+go8A+95d9OHy3/H7qChYpTHmmJMEL
SOn/7F/7+gYfPRM6WbskiURFlxPVeiWYSUU5Kc1bMRuZgGMREbuGP4I/ySbYeVLP
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326951551548927695853756054520902659493313
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-15 13:01:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-13 13:01:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ncagr.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17094983506960846686299767466629374490449669464361580121399658220318733636534546690838041506729076331798101208324828438844748969634650243323088297449724858328333314552916910511716094351254184940258220146094172447433021765489439569915383894737171925557169398739632019907941557532695973604536260206616397367355957137124777719253040754651201780110733908924880337340747047443997890430899626269812620758462272163138842602211494148480760967311283063092641762550044124897021046562365455056521633174775239742578710223620445073998479649943573558694954726447848066545093656970364838394853348487663389716632304903173930260549499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2b310c536e21e4021e100b6baf5acebc195f85ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1195 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appsdev.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appsuat.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boss.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bossdesk.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ncmhtd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dupontstaterecreationalforest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodsafetytaskforce.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatehouse.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gottobencfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iqs.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labworks.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labworkstest.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lf.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lfdev.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfsdev.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountainislandforest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncadfp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncesf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncfarmfresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncfooddist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncfoodsafety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncforestactionplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncforestassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncforestservice.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncfreshlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncfriendsofagriculture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nclongleaf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncstatefair.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resistwildfirenc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamsites.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamsitesdev.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ncmhtd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dupontstaterecreationalforest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foodsafetytaskforce.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gottobencfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iqs.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountainislandforest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncadfp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncesf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncfarmfresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncfooddist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncfoodsafety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncforestactionplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncforestassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncforestservice.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncfreshlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncfriendsofagriculture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nclongleaf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncmhtd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncstatefair.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resistwildfirenc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwdev.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwdev.ncfooddist.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bd349ea7a0000040300483046022100ae7d5b69d79f40ced088ed1dfc2c560b88033fbc7ed2dfb1c96786ad2c2078a6022100dad2e3c08930769c4d076977b6bb2bec728155ecf8f109fb62bc798256cc0caa007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bd349ea780000040300483046022100ca0e64a6a6c9e9dd7ce5dc0a5f87644890c113ef68d9e8137254c9a8906a49f90221009196fe396fb3d01790cd2308b24a89e531c996998a132bd7ab5687c919fba6ce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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