files.nc.gov

- Executive Office of the State of North Carolina -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 01:ea:ac:ad:60:d0:06:6e:5a:ea:03:d7:a0:65:c4:b4 was issued on by DigiCert Inc.

With 105 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Executive Office of the State of North Carolina

Organization: Executive Office of the State of North Carolina
State / Province: North Carolina
Locality: Raleigh
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:ea:ac:ad:60:d0:06:6e:5a:ea:03:d7:a0:65:c4:b4
Serial Number (int): 2547727771568056476244033436089959604
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 58:8a:da:c4:a8:ef:3a:71:cb:2f:69:d2:8c:a2:17:a6:10:4c:03:3a
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): e3:bb:6e:33:0b:00:cd:10:f6:3a:ef:46:8c:6a:85:cc:72:f8:07:4e
Fingerprint (sha256): b9:ef:5f:21:64:27:96:3f:a5:b5:d4:06:5f:49:f8:50:79:1a:5c:70:c6:77:5b:db:06:90:04:35:46:0c:bd:d5

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate files.nc.gov

105

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for files.nc.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

files.nc.gov
www.mgmnc.org
museumofthecapefear.ncdcr.gov
www.ncparks.gov
www.museumofthealbemarle.com
www.ncarts.org
digitalcommons.nc.gov
www.ncmuseumofhistory.org
publicstaff.nc.gov
www.nc.gov
governor.nc.gov
www.ncdcr.gov
www.ncdhhs.gov
oshr.nc.gov
www.ncdor.gov
www.osbm.nc.gov
deq.nc.gov
dma.ncdhhs.gov
www.ncdps.gov
ncadmin.nc.gov
www.milvets.nc.gov
hiea.nc.gov
www.ncnhp.org
statelibrary.ncdcr.gov
www.hpo.ncdcr.gov
www.nchistoricsites.org
archaeology.ncdcr.gov
www.qaronline.org
ltgov.nc.gov
ncchildcare.nc.gov
www.osc.nc.gov
earlylearningchallenge.nc.gov
archives.ncdcr.gov
it.nc.gov
www.rebuild.nc.gov
deftech.nc.gov
cwmtf.nc.gov
www.labor.nc.gov
aahc.nc.gov
digitalstyle.nc.gov
www.roanokeisland.com
hometownstrong.nc.gov
www.ncbroadband.gov
www.oah.nc.gov
api.nc.gov
labs.nc.gov
digital.nc.gov
analytics.nc.gov
www.shpnc.org
trails.nc.gov
medicaid.ncdhhs.gov
www.eenorthcarolina.org
census.nc.gov
ncjobready.nc.gov
www.nccommerce.com
ready.nc.gov
historicsites.nc.gov
apnep.nc.gov
www.myncretirement.com
www.nccash.com
help.myncretirement.com
www.dpi.nc.gov
www.ncdoi.gov
www.readync.org
eprocurement.nc.gov
talentdev.nc.gov
www.auditor.nc.gov
www.nctreasurer.com
des.nc.gov
covid19.ncdhhs.gov
www.ncosfm.gov
ethics.nc.gov
www.ncsbe.gov
nclwf.nc.gov
oshrc.nc.gov
www.readync.gov
ncpro.nc.gov
ncable.nc.gov
cjin.nc.gov
ourncmilitary.nc.gov
www.ncptboard.org
ncsbe-elearning.nc.gov
dit-survey.nc.gov
nccob.nc.gov
dctraining.nc.gov
itservices.nc.gov
ng.nc.gov
www.commerce.nc.gov
www.innovation.nc.gov
aihc.nc.gov
nclds.nc.gov
www.dac.nc.gov
www.deq.nc.gov
www.bbee.nc.gov
www.flc.nc.gov
www.hpo.nc.gov
www.des.nc.gov
www.america250.nc.gov
www.gbofthecarolinas.nc.gov
www.dncr.nc.gov
www.abc.nc.gov
www.dph.ncdhhs.gov
www.publichealth.nc.gov
www.doa.nc.gov
www.csrf.nc.gov

Other certificates including the domain name nc.gov

(limited to 100 certificates)
ncidp.nc.gov
dev.phonepurchase.nc.gov
tts-eu.inrix.com
edm.nc.gov
ssl1.revizesites.com
www.vitalrecords.nc.gov
www.auditor.nc.gov
www.it.nc.gov
ncgs.nc.gov
govadmin.nc.gov
qa.ibis.nc.gov
ncchildcareadmin.nc.gov
slot-gopay.digitalcommons.nc.gov
tax.des.nc.gov
firstnet.nc.gov
files.nc.gov
mybeacon.nc.gov
opendurham.nc.gov
imap.mail.nc.gov
test.epass.nc.gov
des.cara.nc.gov
ncfastcwsinquiry.nc.gov
flu.nc.gov
www.ltgov.nc.gov
svn.ic.nc.gov
labor.nc.gov
dor-ssl-2.dor.nc.gov
IRISK.NC.GOV
dor-2119-int-fw.nc.gov
dirweb.nc.gov
apps.ncagr.gov
wastetrader.deq.nc.gov
other-redirects-002.dc.nc.gov
ncfastvirusscan.nc.gov
dcdee.works.nc.gov
ccms-train.ic.nc.gov
ccms-test.ic.nc.gov
ncfast.nc.gov
WB03.QA.NC.GOV
oah.nc.gov
idppre.nc.gov
VC-EXP-E1.ncdps.gov
ibis.nc.gov
ssl1.revizesites.com
cmepprovidermap.dhhs.nc.gov
ssl1.revizesites.com
redirect.nc.gov
alb-priv-dhhs-ncfast-esb-p.cloud.nc.gov
immunize.nc.gov
publichealth.nc.gov
des.qa.edm.nc.gov
uet002.ncfast.nc.gov
www.it.nc.gov
rlnciddl.nc.gov
admin.nccat.nc.gov
ivms.userpref.sip.nc.gov
qpi.ebs.nc.gov
ncfasttraining.nc.gov
providerportal.nc.gov
ncfastdmscnpp.nc.gov
files.nc.gov
ncidws.nc.gov
bi.nc.gov
www.b3council.nc.gov
Qa.phoneRepair.nc.gov
files.nc.gov
www.dcdee.moodle.nc.gov
swucintf.doa.nc.gov
ncgs.nc.gov
osc-fbr-goamft-p-alb-low.cloud.nc.gov
www.djjdp.org
ncchildcare.nc.gov
www.vitalrecords.nc.gov
qa.cjleads.nc.gov
fw2vpn.dor.nc.gov
ncidp.nc.gov
ncfastebcc.nc.gov
ncguardview.nc.gov
www.sos.nc.gov
cas35.mail.nc.gov
economicbenefits.nc.gov
www.it.nc.gov
mybeacon.nc.gov
legacy.ibis.nc.gov
touchdown.nc.gov
hiea.nc.gov
redirect.nc.gov
sni.cloudflaressl.com
ncidws.nc.gov
fris.nc.gov
ncidsspr.nc.gov
ncc870.its.state.nc.us
files.nc.gov
www.vras.nc.gov
ccms-test.ic.nc.gov
ncfastapp08.nc.gov
mybeacon.nc.gov
qa.ibis.nc.gov
svn.ic.nc.gov
devt.vts.nc.gov

Certificate

The complete raw certificate details for files.nc.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7oPn/N/yjOA94DlPQvxh
i/ubuHpYQwNCe3jujWOW+eJT7wEUdtnX0QEiPjWfXhZUsK9JaOEANGONrMFou/b2
ZkPE0YuRgPBVqonvSvwqlvpL9nLFp23HF7otUmTERIwn8+at3cBEmEhFJEhoRwfN
WpbEvL6unAr6wiuQnXsUZbheiwaQPYYKiV8Nl6ceAJPg39snL/SBu2btxpNQIc6k
8RyYRPNNMDsPiBDfvvCEi0aXI55p6nGvMVVQ+HxeoPXUSIYt7QZTIk8uJZ5NCpC9
GLPm2ZW5pLmdAlrMAXwRJQx53QKhkbZHUN5xwXk6GZ5hLxrxwXvyslLWrcOltvQ/
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2547727771568056476244033436089959604
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Raleigh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Executive Office of the State of North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'files.nc.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30109761954556805204814979625495047088550986205034390928748962270880603033216084585661616619826682266039456336155469032071295980521208519807951729799388281716861049252207719529416704087713124852905288321191050754042623565248318502472727726257185056797096139301674126576340146011997138085203358704524936111538897599947212135027344865296893174661935034057179983452082714604895044997183260202254257008227171737214735232529915693257491938056392782959285333207300149996698597314390889676648627361754902980419353329967553589142008103692841675490647321691943062299843208706715998899497556358140373228336853678725900795133943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							588adac4a8ef3a71cb2f69d28ca217a6104c033a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1891 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mgmnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'museumofthecapefear.ncdcr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncparks.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.museumofthealbemarle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalcommons.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncmuseumofhistory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicstaff.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'governor.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncdcr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncdhhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oshr.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncdor.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osbm.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deq.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma.ncdhhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncdps.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncadmin.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.milvets.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiea.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncnhp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statelibrary.ncdcr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpo.ncdcr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nchistoricsites.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archaeology.ncdcr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qaronline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ltgov.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncchildcare.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osc.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earlylearningchallenge.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archives.ncdcr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rebuild.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deftech.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwmtf.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.labor.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aahc.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalstyle.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roanokeisland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hometownstrong.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncbroadband.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oah.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labs.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shpnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trails.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicaid.ncdhhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eenorthcarolina.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'census.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncjobready.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nccommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ready.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicsites.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apnep.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myncretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nccash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.myncretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dpi.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncdoi.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readync.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eprocurement.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talentdev.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auditor.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nctreasurer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'des.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid19.ncdhhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncosfm.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethics.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncsbe.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nclwf.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oshrc.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readync.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncpro.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncable.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjin.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourncmilitary.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncptboard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncsbe-elearning.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dit-survey.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nccob.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dctraining.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itservices.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ng.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commerce.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innovation.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aihc.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nclds.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dac.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deq.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbee.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flc.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpo.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.des.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.america250.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gbofthecarolinas.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dncr.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abc.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dph.ncdhhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.publichealth.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doa.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csrf.nc.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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