ncagr.gov

Issued by R3

About this certificate

This digital certificate with serial number 03:88:31:7e:a5:ad:fd:6b:f8:14:a3:d6:5c:64:ab:4a:af:fe was issued on by Let's Encrypt.

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ncagr.gov

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:88:31:7e:a5:ad:fd:6b:f8:14:a3:d6:5c:64:ab:4a:af:fe
Serial Number (int): 307681049458108494188512604287705153187838
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1c:8f:ee:eb:0a:6d:fa:c7:0f:63:9b:8a:31:be:ec:bd:23:63:54:3b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bf:3a:d2:74:fe:21:9d:8e:34:cd:ae:46:d5:a4:d7:86:dd:e5:08:b2
Fingerprint (sha256): ed:11:05:3e:f6:43:84:61:36:a8:20:67:fe:1d:76:aa:88:93:4e:06:c7:83:2b:79:b1:ff:6f:62:f8:68:23:6c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ncagr.gov

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ncagr.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agreview.org
charlottefarmersmarket.com
mountainfair.org
nc-seafood.org
ncadfp.org
ncagprices.org
ncagr.gov
ncagwater.org
ncaws.com
ncdaorganic.org
ncfeedandforage.com
ncfoodanddrug.com
nchandlersact.com
nchomeprocessing.com
nclivestock.net
ncprep.org
ncspayneuter.com
ncspayneuter.org
nctomato.com
ncvad.org
ncvdl.com
raleighstatefarmersmarket.com
sbmeac.com
soilandwater.nc.gov
southeasternagcenter.com
southeasternfarmersmarket.com
statefarmersmarket.org
triadfarmersmarket.com
wncfarmersmarket.org
www.agreview.org
www.charlottefarmersmarket.com
www.mountainfair.org
www.nc-seafood.org
www.ncadfp.org
www.ncagprices.org
www.ncagwater.org
www.ncaws.com
www.ncdaorganic.org
www.ncfeedandforage.com
www.ncfoodanddrug.com
www.nchandlersact.com
www.nchomeprocessing.com
www.nclivestock.net
www.ncprep.org
www.ncspayneuter.com
www.ncspayneuter.org
www.nctomato.com
www.ncvad.org
www.ncvdl.com
www.raleighstatefarmersmarket.com
www.sbmeac.com
www.soilandwater.nc.gov
www.southeasternagcenter.com
www.southeasternfarmersmarket.com
www.statefarmersmarket.org
www.triadfarmersmarket.com
www.wncfarmersmarket.org

Other certificates including the domain name ncagr.gov

(limited to 100 certificates)
apps.ncagr.gov
*.blog.ncagr.gov
www.ncagr.gov
ncagr.gov
mfs.ncagr.gov
www.ncagr.gov
*.blog.ncagr.gov
apps.ncagr.gov
www.ncagr.gov
www.ncagr.gov
ncagr.gov
intranet.ncagr.gov
teamsites.ncagr.gov
teamsites.ncagr.gov
apps.ncagr.gov
files.nc.gov
files.nc.gov
www.ncagr.gov
www.ncagr.gov
files.nc.gov
apps.ncagr.gov
apps.ncagr.gov
teamsites.ncagr.gov
mfs.ncagr.gov
teamsites.ncagr.gov
www.ncagr.gov
apps.ncagr.gov
www.ncagr.gov
teamsites.ncagr.gov
www.ncagr.gov
www.ncagr.gov
apps.ncagr.gov
apps.ncagr.gov
www.ncagr.gov
ncagr.gov
intranet.ncagr.gov
intranet.ncagr.gov
files.nc.gov
www.ncagr.gov
www.ncagr.gov
www.ncagr.gov
files.nc.gov
www.ncagr.gov
apps.ncagr.gov
intranet.ncagr.gov
apps.ncagr.gov
apps.ncagr.gov
apps.ncagr.gov
apps.ncagr.gov
intranet.ncagr.gov
www.ncagr.gov
apps.ncagr.gov
www.ncagr.gov
*.blog.ncagr.gov
intranet.ncagr.gov
teamsites.ncagr.gov
apps.ncagr.gov
apps.ncagr.gov
support.ncagr.gov
apps.ncagr.gov
ncagr.gov
apps.ncagr.gov
www.ncagr.gov
mfs.ncagr.gov
files.nc.gov
apps.ncagr.gov
apps.ncagr.gov
apps.ncagr.gov
www.ncagr.gov
*.blog.ncagr.gov
apps.ncagr.gov
apps.ncagr.gov
intranet.ncagr.gov
ncagr.gov
apps.ncagr.gov

Certificate

The complete raw certificate details for ncagr.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Iteno86X5gOKPFTA3dA
gUhnnw1qZFreHFn/CEG2DGFBvy2nKrgRrJh5FJ2VZ36ROS9luuMDZIiZGvFF0Osr
32c4jJ5Jmb82E0o8BwtTSq6j626cU5Jx1hTkj5tNhKc4+0mTct4waT5v1L9o4rvr
RmNCZBDRxLOcxSonM2GSrCBoWdbYE9HSvsHxlsLNFavhK3/KTwNgz1/0XR6FNHaN
eZWIOQjXB/3wReHyKMw1rN1yTzqzobPIa4aMkz4JnR36SVCgzWFW0m96SHCRziP1
OyzkRFvG6p3gUxO4ZsDIrVrqt5Ua/sU5fY7ci1uQr1UKfJNSrxrXWJsrSB6NVEN1
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307681049458108494188512604287705153187838
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 22:36:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-06 22:36:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ncagr.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26831246367421965678019882065010863072077625269038984269096679117491365176146400725601196527384432467930147636532753232151030067546193986074744806507100788216255999066118132277624739313615927199516450615994372847748789405496831010385750105900172638212632570573566534611590360094618423628776803400177962412459734278463188650905105994377433145101110238835926253687379025241345968981952971239068402862771820642063829961346191866007196633482977095960818166272497319092215382010482434931067697043594884058250966136104339154012383879498426892648371214847664769108846835696318391753384309109788679722438108259176732292248911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c8feeeb0a6dfac70f639b8a31beecbd2363543b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agreview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlottefarmersmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountainfair.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nc-seafood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncadfp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncagprices.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncagwater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncdaorganic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncfeedandforage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncfoodanddrug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nchandlersact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nchomeprocessing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nclivestock.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncspayneuter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncspayneuter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nctomato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncvad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncvdl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raleighstatefarmersmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbmeac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soilandwater.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southeasternagcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southeasternfarmersmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statefarmersmarket.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triadfarmersmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wncfarmersmarket.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agreview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charlottefarmersmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountainfair.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nc-seafood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncadfp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncagprices.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncagwater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncdaorganic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncfeedandforage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncfoodanddrug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nchandlersact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nchomeprocessing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nclivestock.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncspayneuter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncspayneuter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nctomato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncvad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncvdl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raleighstatefarmersmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbmeac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soilandwater.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southeasternagcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southeasternfarmersmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statefarmersmarket.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.triadfarmersmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wncfarmersmarket.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c46a36ba2000004030046304402205230aeac74cc5204e7f2238bbebbe9815a825da64f1b825cf711ffa906d4ad4202200729d4e7309a2cc1e6e54b9225e87241a91f42f6ec9c7c6679d35846457d895b0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c46a36ba900000403004730450220482d23f8d1e272b4824a5e310647da445f94b05b0e888c56f12ebd1d5f5388a1022100a06de73aed31587a91b59196470e404846febbac9d2543203ba07e0bd4a8092d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00709603f61c9e4aa8e58305c1427bbc03f5979f04fa726c2b3bd831c924a9bcea6a55a7940d876f031c6e50f608a8fec846d46f26294d2f23c69a251d47c06928227f027c924f7ee9c37dc0fddddfb704d2df88fddf0191688b83287c152b3752900f19ebbb19e9e3a5f7b3eba33d09aba78f3adbe1a8ccacc44a15c9f6235756c3d7f250bc5b4b935bb3a7ea68aaad6a9029f933f25dab4e63f89c90c5270e8036e533789126249ae2dbe7d0cb092dd6bf744a19afd9b91f1e6d919b51445253b33f50c4988d798ffe495b358cd64e1bb608ca57969fec25c8184ab97ed32e4524dc1c2666b9d809fb45153abc8385a5aa3c9e996495c044e311522fd1583635