ssl.circlesoft.net

Issued by R3

About this certificate

This digital certificate with serial number 03:f7:74:e1:41:80:e6:57:75:a1:79:a6:a7:23:91:e4:4c:4c was issued on by Let's Encrypt.

With 52 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ssl.circlesoft.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f7:74:e1:41:80:e6:57:75:a1:79:a6:a7:23:91:e4:4c:4c
Serial Number (int): 345541962467625877316283686300112851848268
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: eb:8d:20:82:ce:ca:4c:6d:d3:25:a6:18:22:fd:bf:dc:71:df:2f:51
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 58:04:1a:ee:34:e4:7d:a6:02:7d:61:15:1e:85:a2:4d:65:03:63:92
Fingerprint (sha256): 02:07:4b:dc:67:41:4d:be:8c:b2:12:f4:df:c6:a1:e0:ff:e9:92:b3:4f:1a:59:b3:4e:23:ef:05:29:f7:c0:de

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ssl.circlesoft.net

52

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl.circlesoft.net

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aesopsattic.com
aesopsattic.com.au
anotherchapter.co.nz
antipodesbookshop.com
bayhillbooks.co.nz
beachsidebookshop.com
beachsidebookshop.com.au
bestlittlebookshopintown.com
boobookonowen.com.au
boobooks.net.au
bookends.co.nz
bookgrove.com.au
booksnz.com
booktique.com.au
brunswickstreetbookstore.com.au
chickenandfrog.co.nz
constantreader.com.au
cookandyoung.com.au
havelocknorth.poppiesbooks.co.nz
marsdenbooks.co.nz
nzeb.co.nz
planetbooks.com.au
poppiesbooks.co.nz
shop.blarneybooks.com.au
ssl.circlesoft.net
store.ulyssesbookstore.com.au
thebooklover.co.nz
theclocksbookshop.co.nz
volumebooks.online
www.aesopsattic.com
www.almobooks.co.nz
www.anotherchapter.co.nz
www.antipodesbookshop.com
www.bayhillbooks.co.nz
www.beachsidebookshop.com
www.beachsidebookshop.com.au
www.bestlittlebookshopintown.com
www.boobookonowen.com.au
www.boobooks.net.au
www.bookends.co.nz
www.bookgrove.com.au
www.booksnz.com
www.brunswickstreetbookstore.com.au
www.chickenandfrog.co.nz
www.constantreader.com.au
www.cookandyoung.com.au
www.havelocknorth.poppiesbooks.co.nz
www.marsdenbooks.co.nz
www.nzeb.co.nz
www.planetbooks.com.au
www.poppiesbooks.co.nz
www.theclocksbookshop.co.nz

Other certificates including the domain name circlesoft.net

(limited to 100 certificates)
timeout.circlesoft.net
moransbooks.circlesoft.net
johnreedau.alpha.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
neighbourhoodbooks.circlesoft.net
abacus.beta.circlesoft.net
ssl.circlesoft.net
neighbourhoodbooks.circlesoft.net
booksatstones.circlesoft.net
aesopsattic.com
bookpassion.beta.circlesoft.net
www.teahousebooks.circlesoft.net
torquaybooks.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
childrensbookshop.beta.circlesoft.net
thebookroomatlennox.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
booksatstones.circlesoft.net
teahousebooks.beta.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
*.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
booksatstones.circlesoft.net
*.circlesoft.net
torquaybooks.circlesoft.net
moransbooks.circlesoft.net
pageblackmore.beta.circlesoft.net
ballaratonydiard.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
*.circlesoft.net
metropolis.beta.circlesoft.net
bookpassion.beta.circlesoft.net
boobookonowen.beta.circlesoft.net
*.beta.circlesoft.net
bookpassion.beta.circlesoft.net
timeout.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
wholesale.circlesoft.net
neighbourhoodbooks.circlesoft.net
*.alpha.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
childrensbookshop.beta.circlesoft.net
abacus.circlesoft.net
abacus.beta.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
ballaratbridge.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
circlesoft.net
ssl.circlesoft.net
vivabooks.beta.circlesoft.net
abacus.beta.circlesoft.net
moransbooks.circlesoft.net
childrensbookshop.beta.circlesoft.net
ironbirdbookshop.circlesoft.net
matildabookshop.beta.circlesoft.net
johnreedau.beta.circlesoft.net
abacus.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
paradoxbooks.beta.circlesoft.net
cookthebooks.beta.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
pottspoint.beta.circlesoft.net
cowlickbooks.beta.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
area52.circlesoft.net
abacus.circlesoft.net
jasonbooks.circlesoft.net
abacus.beta.circlesoft.net
retail.dev.circlesoft.net
booksatstones.circlesoft.net
moransbooks.circlesoft.net
pageblackmore.beta.circlesoft.net
abacus.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
abacus.circlesoft.net
ssl.circlesoft.net
*.circlesoft.net
ssl.circlesoft.net

Certificate

The complete raw certificate details for ssl.circlesoft.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIII2jCCB8KgAwIBAgISA/d04UGA5ld1oXmmpyOR5ExMMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEwMjQxMzE4NTBaFw0yNDAxMjIxMzE4NDlaMB0xGzAZBgNVBAMT
EnNzbC5jaXJjbGVzb2Z0Lm5ldDBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABB0O
VlMM8ruqG0GF4Kfaa2AdZxcFqhUh+UgVfZ7Q0g2u6bwo7w/w8GNhZXoPPoxP7KyF
PYdFpNrbZ8/GC+MmR92jggbIMIIGxDAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFOuN
IILOykxt0yWmGCL9v9xx3y9RMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52L
FMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVu
Y3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIEzwYD
VR0RBIIExjCCBMKCD2Flc29wc2F0dGljLmNvbYISYWVzb3BzYXR0aWMuY29tLmF1
ghRhbm90aGVyY2hhcHRlci5jby5ueoIVYW50aXBvZGVzYm9va3Nob3AuY29tghJi
YXloaWxsYm9va3MuY28ubnqCFWJlYWNoc2lkZWJvb2tzaG9wLmNvbYIYYmVhY2hz
aWRlYm9va3Nob3AuY29tLmF1ghxiZXN0bGl0dGxlYm9va3Nob3BpbnRvd24uY29t
ghRib29ib29rb25vd2VuLmNvbS5hdYIPYm9vYm9va3MubmV0LmF1gg5ib29rZW5k
cy5jby5ueoIQYm9va2dyb3ZlLmNvbS5hdYILYm9va3Nuei5jb22CEGJvb2t0aXF1
ZS5jb20uYXWCH2JydW5zd2lja3N0cmVldGJvb2tzdG9yZS5jb20uYXWCFGNoaWNr
ZW5hbmRmcm9nLmNvLm56ghVjb25zdGFudHJlYWRlci5jb20uYXWCE2Nvb2thbmR5
b3VuZy5jb20uYXWCIGhhdmVsb2Nrbm9ydGgucG9wcGllc2Jvb2tzLmNvLm56ghJt
YXJzZGVuYm9va3MuY28ubnqCCm56ZWIuY28ubnqCEnBsYW5ldGJvb2tzLmNvbS5h
dYIScG9wcGllc2Jvb2tzLmNvLm56ghhzaG9wLmJsYXJuZXlib29rcy5jb20uYXWC
EnNzbC5jaXJjbGVzb2Z0Lm5ldIIdc3RvcmUudWx5c3Nlc2Jvb2tzdG9yZS5jb20u
YXWCEnRoZWJvb2tsb3Zlci5jby5ueoIXdGhlY2xvY2tzYm9va3Nob3AuY28ubnqC
EnZvbHVtZWJvb2tzLm9ubGluZYITd3d3LmFlc29wc2F0dGljLmNvbYITd3d3LmFs
bW9ib29rcy5jby5ueoIYd3d3LmFub3RoZXJjaGFwdGVyLmNvLm56ghl3d3cuYW50
aXBvZGVzYm9va3Nob3AuY29tghZ3d3cuYmF5aGlsbGJvb2tzLmNvLm56ghl3d3cu
YmVhY2hzaWRlYm9va3Nob3AuY29tghx3d3cuYmVhY2hzaWRlYm9va3Nob3AuY29t
LmF1giB3d3cuYmVzdGxpdHRsZWJvb2tzaG9waW50b3duLmNvbYIYd3d3LmJvb2Jv
b2tvbm93ZW4uY29tLmF1ghN3d3cuYm9vYm9va3MubmV0LmF1ghJ3d3cuYm9va2Vu
ZHMuY28ubnqCFHd3dy5ib29rZ3JvdmUuY29tLmF1gg93d3cuYm9va3Nuei5jb22C
I3d3dy5icnVuc3dpY2tzdHJlZXRib29rc3RvcmUuY29tLmF1ghh3d3cuY2hpY2tl
bmFuZGZyb2cuY28ubnqCGXd3dy5jb25zdGFudHJlYWRlci5jb20uYXWCF3d3dy5j
b29rYW5keW91bmcuY29tLmF1giR3d3cuaGF2ZWxvY2tub3J0aC5wb3BwaWVzYm9v
a3MuY28ubnqCFnd3dy5tYXJzZGVuYm9va3MuY28ubnqCDnd3dy5uemViLmNvLm56
ghZ3d3cucGxhbmV0Ym9va3MuY29tLmF1ghZ3d3cucG9wcGllc2Jvb2tzLmNvLm56
ght3d3cudGhlY2xvY2tzYm9va3Nob3AuY28ubnowEwYDVR0gBAwwCjAIBgZngQwB
AgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgDatr9rP7W2Ip+bwrtca+hwkXFs
u1GEhTS9pD0wSNf7qwAAAYtiDXJCAAAEAwBHMEUCIQC8FOhoTRKgSpIyWJILBlFO
/07G5zIki/ssMd1rS/lRuAIgEfd21NX3uZizb0+N3g6kenlxviEkXjmzXXZ+JI+C
1qYAdgB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYtiDXMFAAAE
AwBHMEUCIHEkz98m9rrwcEQRe0YnEqhGAlBuVwX7y9S5t854OUVZAiEAtNKEnXSs
UdM5PDfNQzl2T72IzZ8rrvHVT+wsFK7yp3kwDQYJKoZIhvcNAQELBQADggEBACCh
aAOG7M3tFXnBeD4ktKYX2ENVsU6MOsE1oElx4JMH17G04kqvfcgr1/0lSgEL64q1
d7psqcwleMMM3xq48PpXORZ4pSvSbSvRDwMtbtzJ6eyr67Xf9enBn3WKoZ8p4DWw
SVJRDhyKa2ctUJx2CN/R5HjYczYKyqINW8wtoXPH2pM8r+7y0Urrv93zrH457Lhs
pE8WXp+AMDirN3OFEhSVcTNoTCRy2L8AQ4d+k7IQSrMMBIVGpdr1lHfxnOSltj1m
1A7IYQNBqEbWX/Xsu7vpjqqJ9E8OJnrCJ6zjrC8VxmnXifpvP9UnR+wM/e8zn7cT
y4f8VuDu83zrpIR3ZWc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEHQ5WUwzyu6obQYXgp9prYB1nFwWq
FSH5SBV9ntDSDa7pvCjvD/DwY2Fleg8+jE/srIU9h0Wk2ttnz8YL4yZH3Q==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345541962467625877316283686300112851848268
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-24 13:18:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-22 13:18:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl.circlesoft.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00041d0e56530cf2bbaa1b4185e0a7da6b601d671705aa1521f948157d9ed0d20daee9bc28ef0ff0f06361657a0f3e8c4fecac853d8745a4dadb67cfc60be32647dd
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb8d2082ceca4c6dd325a61822fdbfdc71df2f51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1222 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aesopsattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aesopsattic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anotherchapter.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antipodesbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayhillbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachsidebookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachsidebookshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestlittlebookshopintown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boobookonowen.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boobooks.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookends.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookgrove.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booksnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booktique.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brunswickstreetbookstore.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chickenandfrog.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constantreader.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookandyoung.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelocknorth.poppiesbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsdenbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzeb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planetbooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poppiesbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.blarneybooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.circlesoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.ulyssesbookstore.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebooklover.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theclocksbookshop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volumebooks.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aesopsattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.almobooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anotherchapter.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antipodesbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayhillbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beachsidebookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beachsidebookshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestlittlebookshopintown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boobookonowen.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boobooks.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookends.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookgrove.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brunswickstreetbookstore.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chickenandfrog.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.constantreader.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cookandyoung.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havelocknorth.poppiesbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marsdenbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzeb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planetbooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poppiesbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theclocksbookshop.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b620d72420000040300473045022100bc14e8684d12a04a923258920b06514eff4ec6e732248bfb2c31dd6b4bf951b8022011f776d4d5f7b998b36f4f8dde0ea47a7971be21245e39b35d767e248f82d6a600760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b620d7305000004030047304502207124cfdf26f6baf07044117b462712a84602506e5705fbcbd4b9b7ce78394559022100b4d2849d74ac51d3393c37cd4339764fbd88cd9f2baef1d54fec2c14aef2a779
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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