apps.ncagr.gov

Issued by R3

About this certificate

This digital certificate with serial number 04:ea:79:69:fc:a6:bf:d6:d8:92:b2:85:ff:b6:d5:e4:63:a9 was issued on by Let's Encrypt.

With 54 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=apps.ncagr.gov

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ea:79:69:fc:a6:bf:d6:d8:92:b2:85:ff:b6:d5:e4:63:a9
Serial Number (int): 428236604489579174481774962723254691980201
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 27:57:76:20:62:cf:c7:0a:2a:56:d7:33:98:df:48:fe:c0:77:7d:fe
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 34:73:ae:09:1e:2e:4a:b2:ae:ed:c2:4b:72:33:56:5e:05:04:65:84
Fingerprint (sha256): a0:42:d0:c9:54:8f:bc:a9:83:1b:65:fd:a7:88:e9:49:96:b4:32:4a:ea:5b:76:5f:56:12:ab:29:6c:ec:c0:84

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate apps.ncagr.gov

54

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apps.ncagr.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apps.ncagr.gov
appsdev.ncagr.gov
appsuat.ncagr.gov
boss.ncagr.gov
bossdesk.ncagr.gov
dev.ncmhtd.com
dupontstaterecreationalforest.com
foodsafetytaskforce.nc.gov
gatehouse.ncagr.gov
gottobencfestival.com
intranet.ncagr.gov
intranetdev.ncagr.gov
iqs.nc.gov
lf.ncagr.gov
lfdev.ncagr.gov
mfsdev.ncagr.gov
mountainislandforest.com
mysites.ncagr.gov
mysitesdev.ncagr.gov
ncadfp.org
ncesf.org
ncfarmfresh.com
ncfooddist.com
ncfoodsafety.com
ncforestactionplan.com
ncforestassessment.com
ncforestservice.gov
ncfreshlink.com
ncfriendsofagriculture.org
nclongleaf.org
resistwildfirenc.org
teamsites.ncagr.gov
teamsitesdev.ncagr.gov
test.ncmhtd.com
www.dupontstaterecreationalforest.com
www.foodsafetytaskforce.nc.gov
www.gottobencfestival.com
www.iqs.nc.gov
www.mountainislandforest.com
www.ncadfp.org
www.ncesf.org
www.ncfarmfresh.com
www.ncfooddist.com
www.ncfoodsafety.com
www.ncforestactionplan.com
www.ncforestassessment.com
www.ncforestservice.gov
www.ncfreshlink.com
www.ncfriendsofagriculture.org
www.nclongleaf.org
www.ncmhtd.com
www.resistwildfirenc.org
wwwdev.ncagr.gov
wwwdev.ncfooddist.com

Other certificates including the domain name ncagr.gov

(limited to 100 certificates)
apps.ncagr.gov
*.blog.ncagr.gov
www.ncagr.gov
ncagr.gov
mfs.ncagr.gov
www.ncagr.gov
*.blog.ncagr.gov
apps.ncagr.gov
www.ncagr.gov
www.ncagr.gov
ncagr.gov
intranet.ncagr.gov
teamsites.ncagr.gov
teamsites.ncagr.gov
apps.ncagr.gov
files.nc.gov
files.nc.gov
www.ncagr.gov
www.ncagr.gov
files.nc.gov
apps.ncagr.gov
apps.ncagr.gov
teamsites.ncagr.gov
mfs.ncagr.gov
teamsites.ncagr.gov
www.ncagr.gov
apps.ncagr.gov
www.ncagr.gov
teamsites.ncagr.gov
www.ncagr.gov
www.ncagr.gov
apps.ncagr.gov
apps.ncagr.gov
www.ncagr.gov
ncagr.gov
intranet.ncagr.gov
intranet.ncagr.gov
files.nc.gov
www.ncagr.gov
www.ncagr.gov
www.ncagr.gov
files.nc.gov
www.ncagr.gov
apps.ncagr.gov
intranet.ncagr.gov
apps.ncagr.gov
apps.ncagr.gov
apps.ncagr.gov
apps.ncagr.gov
intranet.ncagr.gov
www.ncagr.gov
apps.ncagr.gov
www.ncagr.gov
*.blog.ncagr.gov
intranet.ncagr.gov
teamsites.ncagr.gov
apps.ncagr.gov
apps.ncagr.gov
support.ncagr.gov
apps.ncagr.gov
ncagr.gov
apps.ncagr.gov
www.ncagr.gov
mfs.ncagr.gov
files.nc.gov
apps.ncagr.gov
apps.ncagr.gov
apps.ncagr.gov
www.ncagr.gov
*.blog.ncagr.gov
apps.ncagr.gov
apps.ncagr.gov
intranet.ncagr.gov
ncagr.gov
apps.ncagr.gov

Certificate

The complete raw certificate details for apps.ncagr.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQ5BpaN0Y3TFvtr8QO27
fvaT8/6lvOaiA0dkZTCZpfCc9aVFVNDmfiF0AKOrQMz5uaDfECqSTYpQbqUZO+6C
iRX5zAyXCC7CHVlNXhlafdUC8afu6eUvd982SGzVdoYkydjeaLylUwWNNopA3tQQ
a7nVHiCKpu1m1weaOYcWsIWeqPBUCZEeDRj7Qe7a5kvo9SD7f3ZACdLNbk6E7VkI
6ELjOxbNEgSq1H0y6DcH2XtsTaRi+gqxbkd4/A6Tv81a1tXAKtommwJfwOcufk86
1XNWOqiGi1aRmZIfZ/iGCBjcvRiePiQ9GACRFzUv9txKyECEqVaCVaXglwqcZYB6
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428236604489579174481774962723254691980201
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-25 22:57:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-24 22:57:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apps.ncagr.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16796724669955509830753309979488596406257862862886826929117396934208494260266621042726872726086361738495743152669408666556244495981798474046186993325521171934313403104366287354433652992659258145140506822306628299130035537490451606027896597815980237422332109559809785003323679843761338210062613836575631631127229636988953053011706948294516803961845289068074135180488603335382446081465098700437878577859403963610637682009824579250444684373177561099756314805389435140727430715776545876137983263918039802759157769958820014369213714827759638049427379792583363978216712112578931466782792562133456090738545947997319794293357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2757762062cfc70a2a56d73398df48fec0777dfe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appsdev.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appsuat.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boss.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bossdesk.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ncmhtd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dupontstaterecreationalforest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodsafetytaskforce.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatehouse.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gottobencfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranetdev.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iqs.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lf.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lfdev.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfsdev.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountainislandforest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysites.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysitesdev.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncadfp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncesf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncfarmfresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncfooddist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncfoodsafety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncforestactionplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncforestassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncforestservice.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncfreshlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncfriendsofagriculture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nclongleaf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resistwildfirenc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamsites.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamsitesdev.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ncmhtd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dupontstaterecreationalforest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foodsafetytaskforce.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gottobencfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iqs.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountainislandforest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncadfp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncesf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncfarmfresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncfooddist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncfoodsafety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncforestactionplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncforestassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncforestservice.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncfreshlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncfriendsofagriculture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nclongleaf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncmhtd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resistwildfirenc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwdev.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwdev.ncfooddist.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001837715562a000004030046304402200b08b72ae9080a75648b9f9f1eeec66103b21775b85ac7cbd8cd71cfff04143e0220151a41f160772d1ed44d5084fd548f35d70bc39dbb7be284cbfbb7e8395e5e2f0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000183771556850000040300463044022076e3d22cdb27d6357b6117c87364d982c7fbc78ff78fbf6b106c36bdc16efb3402203ac2607801dd5deda3588c8e5e1279e40160dfd59caed7f21c891a2a16ec900e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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