www.hblp.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:05:1b:02:2f:bd:e5:4c:f3:4a:ff:1e:0e:26:c6:24:3f:bf was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.hblp.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:05:1b:02:2f:bd:e5:4c:f3:4a:ff:1e:0e:26:c6:24:3f:bf
Serial Number (int): 263074170138683681236766577404699887288255
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ac:91:5a:74:6f:11:ab:32:f0:7d:7b:d3:35:8d:79:58:91:1e:8f:9d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9a:34:9d:78:e1:50:4d:00:d9:85:40:f8:4a:7d:d1:76:45:c3:e1:a4
Fingerprint (sha256): 01:e6:b8:71:98:6f:b7:69:ec:5b:d3:c7:d6:5e:ad:e0:c1:1c:58:ef:28:36:0e:67:ce:84:12:d9:0c:2a:aa:b6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.hblp.co.nz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hblp.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arts.diocesan.school.nz
bowlsnapier.co.nz
burnsiderugby.co.nz
canterburycountrycricket.co.nz
cdcricket.co.nz
chchfootballsquash.co.nz
courtinthebay.co.nz
drysdale.kiwi
greenislandbadmintonclub.net.nz
hawkesbaynetball.co.nz
hawkfootball.org.nz
hbcricket.co.nz
hockeywairarapa.org.nz
howicksoftball.co.nz
huttaikido.org.nz
kapitigymsports.co.nz
kerikerimtbclub.co.nz
kirweenetball.co.nz
lincolnbowlingclub.co.nz
mahe.kiwi
mahedrysdale.kiwi
mpcricket.org.nz
mtbtauranga.co.nz
mtsquashclub.co.nz
ngaiwi.school.nz
olympicwrestlingnz.com
patumahoerugby.co.nz
pointrugby.co.nz
pukekoherugby.co.nz
redcliffsbowls.co.nz
silverdalerugby.co.nz
sportauckland.co.nz
sportauckland.org.nz
squashauckland.org.nz
starling.org.nz
supersixes.co.nz
tearohafootball.com
tepukesports.co.nz
warkworthnetballclub.com
waterpolo.org.nz
www.bayofislandsdressagegroup.co.nz
www.bopgolf.co.nz
www.bowlsnapier.co.nz
www.burnsiderugby.co.nz
www.canterburycountrycricket.co.nz
www.cdcricket.co.nz
www.chchfootballsquash.co.nz
www.courtinthebay.co.nz
www.drysdale.kiwi
www.greenislandbadmintonclub.net.nz
www.havelockski.org.nz
www.hawkesbaynetball.co.nz
www.hawkfootball.org.nz
www.hbcricket.co.nz
www.hblp.co.nz
www.hockeywairarapa.org.nz
www.howicksoftball.co.nz
www.huttaikido.org.nz
www.kapitigymsports.co.nz
www.kerikerimtbclub.co.nz
www.kirweenetball.co.nz
www.lincolnbowlingclub.co.nz
www.mahe.kiwi
www.mahedrysdale.kiwi
www.mpcricket.org.nz
www.mtbtauranga.co.nz
www.mtsquashclub.co.nz
www.ngaiwi.school.nz
www.nzpca.org
www.olympicwrestlingnz.com
www.patumahoerugby.co.nz
www.pointrugby.co.nz
www.pukekoherugby.co.nz
www.redcliffsbowls.co.nz
www.silverdalerugby.co.nz
www.sissnetball.co.nz
www.sportauckland.co.nz
www.sportauckland.org.nz
www.squashauckland.org.nz
www.starling.org.nz
www.supersixes.co.nz
www.tabletennissouth.org.nz
www.tearohafootball.com
www.tepukesports.co.nz
www.tgahockey.co.nz
www.warkworthnetballclub.com
www.waterpolo.org.nz
www.zephyr.org.nz
zephyr.org.nz

Other certificates including the domain name hblp.co.nz

(limited to 100 certificates)
sporty.co.nz
www.hblp.co.nz
generatenetwork.org
www.sporty.co.nz
turbotouch.co.nz
www.sportslink.org.nz
mtrbmx.co.nz
www.rugby-foundation.org.nz
aafl.co.nz
www.hockeysouthcanterbury.co.nz
netballwairarapa.co.nz
www.bowlsnapier.co.nz
www.rugby-foundation.org.nz
www.hbcricket.co.nz
lucknow.school.nz
prdf.co.nz
sporty.co.nz
www.rugby-foundation.org.nz
www.sporty.co.nz
sporty.co.nz

Certificate

The complete raw certificate details for www.hblp.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopp1HwjPpNS/12TOf6c+
pNVwrVFdUhkzNTZtPKaOh/3Zb2CH1uAMkSoZIafLyqPDulYvpsXOSdfpOLhmUrys
BTAmcNqwr+INPHVeDsCDMTC5Rv7MtcPy9a50gW9wE+sg4CNjbWj7E+z1mMYISqMx
w4QyPTfKZTg4eAyjfTOepr/vtvuPipQPiROoLWpe6MWjCoYC8GKJJ4EHuJm6tX8x
cXkm0I9JaLX3/wgwVGwFMCrtkFg/xFz13/kvQS2bwBv6MtlMVDmREf94qYX4rxkw
kYivYOI7jv4WTXf/NQiR6N11Pa1/bV4/sy3yTl1ZjbFQ7OPCGEHnLirmTGsVi1QD
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263074170138683681236766577404699887288255
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-10 05:03:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-08 05:03:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hblp.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20526771238856736807360891563324475302674430966263440068585154356096088457396744811934950559161648126827314541657277544513400399867134458369018307128640151071350405994540824890833892629908288785876519736033750257608711296150401440742468004033847896561257400814413013849714556376659329651488789298995694873761702182993038507851100438503086320691730248771970765720173894863970556501331423004795196985741747726477420630316849995903345271415275572537149451504051106968954883269819340669703568557321519041827752311427361155366223922060534488524815917105444445945748909309805657568491642399301638536052530479711413792408331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac915a746f11ab32f07d7bd3358d7958911e8f9d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2053 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arts.diocesan.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlsnapier.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burnsiderugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburycountrycricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chchfootballsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courtinthebay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drysdale.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenislandbadmintonclub.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbaynetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeywairarapa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howicksoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huttaikido.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapitigymsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kerikerimtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirweenetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolnbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahe.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahedrysdale.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpcricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtbtauranga.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngaiwi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olympicwrestlingnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patumahoerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pointrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pukekoherugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redcliffsbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverdalerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squashauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supersixes.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tearohafootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tepukesports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warkworthnetballclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterpolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayofislandsdressagegroup.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bopgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsnapier.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burnsiderugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburycountrycricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chchfootballsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courtinthebay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drysdale.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenislandbadmintonclub.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havelockski.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbaynetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hblp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeywairarapa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicksoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huttaikido.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kapitigymsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kerikerimtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirweenetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lincolnbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahe.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahedrysdale.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mpcricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtbtauranga.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ngaiwi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzpca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olympicwrestlingnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patumahoerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pointrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pukekoherugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redcliffsbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.silverdalerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sissnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportauckland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.squashauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supersixes.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tabletennissouth.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tearohafootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tepukesports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tgahockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warkworthnetballclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waterpolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zephyr.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zephyr.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001665c92941d000004030046304402205db43885d54d3846f939dc23912178f38ef7c4c34f7b45542d6e916f3cea4d8902205815d33f5a4254ba1ed9f0e1b12fa72d2f219b4aa7772b4d34db7b7eed32e5b1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001665c929408000004030047304502204375d3fff2a1338822c04d8641e200fa221bc26d3070d36a00618c0350d288fb0221009ae552eb5248d30b5686ed656dccdad0eee43904c4bb62eaa339b696d89f44ce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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