maristinvercargill.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:72:03:7b:72:94:ab:fd:08:a5:df:8a:85:3e:04:a1:e2:a9 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=maristinvercargill.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:72:03:7b:72:94:ab:fd:08:a5:df:8a:85:3e:04:a1:e2:a9
Serial Number (int): 300133676284742370010265539697451080999593
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b7:fa:e6:a0:f6:9c:29:08:9b:9e:da:1d:2e:df:58:69:7e:76:3d:8b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 96:bf:46:95:0f:a0:dc:fb:cd:ce:0e:c3:3b:da:24:3e:32:63:6b:aa
Fingerprint (sha256): 03:69:52:20:f5:63:85:c1:96:8e:ed:f1:ae:d7:f0:af:21:7f:6b:ae:e6:65:9b:7c:79:6a:d1:f5:82:be:e5:80

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate maristinvercargill.co.nz

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for maristinvercargill.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aff.org.nz
aoraki-dragons.co.nz
ardmoremarist.co.nz
arra.org.nz
bayolympic.co.nz
bbafc.org.nz
bopbadminton.co.nz
bowlssouthland.co.nz
brooklyncroquetclub.org
burwoodafc.co.nz
businesshb.nz
canoeslalomnz.org.nz
capitalfootball.org.nz
carltonjuniorsrugby.co.nz
centralfootball.co.nz
centralfootball.org.nz
clevedontennisclub.co.nz
cmydt.co.nz
cornwallcricket.co.nz
druryfootball.co.nz
ecbafc.co.nz
footballsouth.co.nz
foxtongolf.co.nz
gksports.co.nz
glenviewsoccer.co.nz
greenhithefootball.org
hbcc.org.nz
helensvillerugby.co.nz
hockeymanawatu.org.nz
howicknetball.org.nz
karakasportspark.co.nz
katikatifc.co.nz
kbhs.school.nz
mainlandfootball.co.nz
maristinvercargill.co.nz
marlboroughfootball.co.nz
mbnc.co.nz
mrra.co.nz
nelsonbaysfootball.co.nz
newplymouthcroquetclub.co.nz
nff.org.nz
nhrra.co.nz
norths.co.nz
northsrugby.co.nz
nzfootball.co.nz
oratiaunited.co.nz
otahuhusoccer.org.nz
papakuracityfc.org.nz
papakuranetball.org.nz
papamoafootballclub.co.nz
papamoafootballclub.nz
papanuiredwoodafc.co.nz
papatoetoeunited.co.nz
parklandsunited.co.nz
parklandsunitedsportsclub.net.nz
pcbasketballclub.co.nz
phoenixsynchro.co.nz
ravensbourne.co.nz
redbeachsquashclub.co.nz
rivertongolf.co.nz
sasfootball.club
sasfootball.org.nz
schoolground.co.nz
schoolground.nz
scpacers.co.nz
slalomnz.org.nz
southlandfootball.org.nz
speedway.co.nz
sportcanterbury.org.nz
sportnorthland.co.nz
sportnorthland.nz
sporttasman.org.nz
sportwaitakere.co.nz
sportwaitakere.nz
sydenhamrugby.co.nz
takapunaafc.co.nz
taradalefootball.org.nz
tcafc.co.nz
teawamutuafc.co.nz
thesalmonrun.nz
unimountafc.org.nz
waibopfootball.co.nz
waihekeunited.org.nz
waihoraclaytarget.co.nz
waitakerecityfc.org.nz
waitakererugby.co.nz
wakefieldfc.nz
westernafc.com
worldseriescricket.co.nz
wssfa.nz

Other certificates including the domain name maristinvercargill.co.nz

(limited to 100 certificates)
maristinvercargill.co.nz
amdg.org.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
maristinvercargill.co.nz
squashauckland.org.nz
sporty.co.nz
maristinvercargill.co.nz
sporty.co.nz
www.akaranacityrifleclub.co.nz
maristinvercargill.co.nz
sporty.co.nz
www.cyclingsc.co.nz
sporty.co.nz
maristinvercargill.co.nz
maristinvercargill.co.nz
maristinvercargill.co.nz
www.pukekohesoftball.co.nz
sporty.co.nz
www.eden.rugby
amdg.org.nz
maristinvercargill.co.nz
www.mooloocommunityrugby.co.nz
www.christchurchmetrocricket.co.nz
www.crossrecreationcentre.co.nz
www.christchurchmetrocricket.org
www.marlinsnetball.co.nz
www.sportsground.com
sporty.co.nz
sporty.co.nz
www.pauanuilifeguards.org.nz
trfu.co.nz

Certificate

The complete raw certificate details for maristinvercargill.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMhzCCC2+gAwIBAgISA3IDe3KUq/0Ipd+KhT4EoeKpMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MTYxMTM5MDZaFw0x
OTEyMTUxMTM5MDZaMCMxITAfBgNVBAMTGG1hcmlzdGludmVyY2FyZ2lsbC5jby5u
ejCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI2we2Xy8tPrlbHhy8wI
jgwVUqoF0vAEdD/hQcS9bPmFPfFatU41sEFCWOXySo5F4zOvUXOaGH++eyVmSggV
sAfdqnUt87Fo1tGPjtT9Qg1hAxyDrD6Dj3Q1G9BKQn2cLqeV+hLi7FlhTXwSrmjA
ggVGVMtbfP2pO2uJbIhozzPXD7xnukeZAxauI3SxoF67wU4ljAYEmit54Mx2c74L
AU5Ea55to87aYruy+oPVZN6t73Oxbf+gELbxkrXBhULtEypWZygkhKXtB77bBEWk
JvBa9eHhIHTX72iCkF0IoP7qPei4UN0y88z8P+CKQjejJESlTe4UOxFvo+0D4qnx
p6MCAwEAAaOCCYwwggmIMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUt/rmoPacKQib
ntodLt9YaX52PYswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI
KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0
c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0
c2VuY3J5cHQub3JnLzCCB0AGA1UdEQSCBzcwggczggphZmYub3JnLm56ghRhb3Jh
a2ktZHJhZ29ucy5jby5ueoITYXJkbW9yZW1hcmlzdC5jby5ueoILYXJyYS5vcmcu
bnqCEGJheW9seW1waWMuY28ubnqCDGJiYWZjLm9yZy5ueoISYm9wYmFkbWludG9u
LmNvLm56ghRib3dsc3NvdXRobGFuZC5jby5ueoIXYnJvb2tseW5jcm9xdWV0Y2x1
Yi5vcmeCEGJ1cndvb2RhZmMuY28ubnqCDWJ1c2luZXNzaGIubnqCFGNhbm9lc2xh
bG9tbnoub3JnLm56ghZjYXBpdGFsZm9vdGJhbGwub3JnLm56ghljYXJsdG9uanVu
aW9yc3J1Z2J5LmNvLm56ghVjZW50cmFsZm9vdGJhbGwuY28ubnqCFmNlbnRyYWxm
b290YmFsbC5vcmcubnqCGGNsZXZlZG9udGVubmlzY2x1Yi5jby5ueoILY215ZHQu
Y28ubnqCFWNvcm53YWxsY3JpY2tldC5jby5ueoITZHJ1cnlmb290YmFsbC5jby5u
eoIMZWNiYWZjLmNvLm56ghNmb290YmFsbHNvdXRoLmNvLm56ghBmb3h0b25nb2xm
LmNvLm56gg5na3Nwb3J0cy5jby5ueoIUZ2xlbnZpZXdzb2NjZXIuY28ubnqCFmdy
ZWVuaGl0aGVmb290YmFsbC5vcmeCC2hiY2Mub3JnLm56ghZoZWxlbnN2aWxsZXJ1
Z2J5LmNvLm56ghVob2NrZXltYW5hd2F0dS5vcmcubnqCFGhvd2lja25ldGJhbGwu
b3JnLm56ghZrYXJha2FzcG9ydHNwYXJrLmNvLm56ghBrYXRpa2F0aWZjLmNvLm56
gg5rYmhzLnNjaG9vbC5ueoIWbWFpbmxhbmRmb290YmFsbC5jby5ueoIYbWFyaXN0
aW52ZXJjYXJnaWxsLmNvLm56ghltYXJsYm9yb3VnaGZvb3RiYWxsLmNvLm56ggpt
Ym5jLmNvLm56ggptcnJhLmNvLm56ghhuZWxzb25iYXlzZm9vdGJhbGwuY28ubnqC
HG5ld3BseW1vdXRoY3JvcXVldGNsdWIuY28ubnqCCm5mZi5vcmcubnqCC25ocnJh
LmNvLm56ggxub3J0aHMuY28ubnqCEW5vcnRoc3J1Z2J5LmNvLm56ghBuemZvb3Ri
YWxsLmNvLm56ghJvcmF0aWF1bml0ZWQuY28ubnqCFG90YWh1aHVzb2NjZXIub3Jn
Lm56ghVwYXBha3VyYWNpdHlmYy5vcmcubnqCFnBhcGFrdXJhbmV0YmFsbC5vcmcu
bnqCGXBhcGFtb2Fmb290YmFsbGNsdWIuY28ubnqCFnBhcGFtb2Fmb290YmFsbGNs
dWIubnqCF3BhcGFudWlyZWR3b29kYWZjLmNvLm56ghZwYXBhdG9ldG9ldW5pdGVk
LmNvLm56ghVwYXJrbGFuZHN1bml0ZWQuY28ubnqCIHBhcmtsYW5kc3VuaXRlZHNw
b3J0c2NsdWIubmV0Lm56ghZwY2Jhc2tldGJhbGxjbHViLmNvLm56ghRwaG9lbml4
c3luY2hyby5jby5ueoIScmF2ZW5zYm91cm5lLmNvLm56ghhyZWRiZWFjaHNxdWFz
aGNsdWIuY28ubnqCEnJpdmVydG9uZ29sZi5jby5ueoIQc2FzZm9vdGJhbGwuY2x1
YoISc2FzZm9vdGJhbGwub3JnLm56ghJzY2hvb2xncm91bmQuY28ubnqCD3NjaG9v
bGdyb3VuZC5ueoIOc2NwYWNlcnMuY28ubnqCD3NsYWxvbW56Lm9yZy5ueoIYc291
dGhsYW5kZm9vdGJhbGwub3JnLm56gg5zcGVlZHdheS5jby5ueoIWc3BvcnRjYW50
ZXJidXJ5Lm9yZy5ueoIUc3BvcnRub3J0aGxhbmQuY28ubnqCEXNwb3J0bm9ydGhs
YW5kLm56ghJzcG9ydHRhc21hbi5vcmcubnqCFHNwb3J0d2FpdGFrZXJlLmNvLm56
ghFzcG9ydHdhaXRha2VyZS5ueoITc3lkZW5oYW1ydWdieS5jby5ueoIRdGFrYXB1
bmFhZmMuY28ubnqCF3RhcmFkYWxlZm9vdGJhbGwub3JnLm56ggt0Y2FmYy5jby5u
eoISdGVhd2FtdXR1YWZjLmNvLm56gg90aGVzYWxtb25ydW4ubnqCEnVuaW1vdW50
YWZjLm9yZy5ueoIUd2FpYm9wZm9vdGJhbGwuY28ubnqCFHdhaWhla2V1bml0ZWQu
b3JnLm56ghd3YWlob3JhY2xheXRhcmdldC5jby5ueoIWd2FpdGFrZXJlY2l0eWZj
Lm9yZy5ueoIUd2FpdGFrZXJlcnVnYnkuY28ubnqCDndha2VmaWVsZGZjLm56gg53
ZXN0ZXJuYWZjLmNvbYIYd29ybGRzZXJpZXNjcmlja2V0LmNvLm56ggh3c3NmYS5u
ejBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUF
BwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIE
gfUEgfIA8AB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABbToV
cWAAAAQDAEcwRQIgAiUuRBk/6kA/ubGAIb4myOkb+TnSF9cKPgazf47QclUCIQDj
g9qDAieddzIzB8sppkleQdtqe0rRZjVyiE7nOtXl4QB2ACk8UZZUyDlluqpQ/FgH
1Ldvv1h6KXLcpMMM9OVFR/R4AAABbToVcEQAAAQDAEcwRQIgT6HWZOL2l2Z0uDhM
JeIO0JmdM08TVsjJvnOhq7nr8b0CIQDbgkDwfTQyO6tT7j8bSM9YGmQe5FvsC6MY
xMYb8FD02TANBgkqhkiG9w0BAQsFAAOCAQEAmH8JXlLkYjCxswyq2lcdOeRESFkT
PWOrQUOFFH3BWKP5PFY05wjs+IahFv/IBB54s6Vx9qkPzx3Al7v2+heIWg1yKyft
+k7kQLT6YCkN78ZE+bPPmswwLXsCUIgkocbC0TrnYbqJfqW4xCm8Ugy/+NCyw5Mz
cN6zqSE+66P0pJLIRJBpmv1PUlSSfglj67P77llMptSmHZUmtu63v2gTXmI1yMC5
24Ib6TVX0puKoMV7T36RbdeBzKEBMOKwUxCu0hoE1DN2HaKWloH0yW4VmDVmRcJ4
bYqXB93dGsZ+wTWNH5zQum14TXIhtyRR9uWWiRswJPWDcEymUnzUt3VJRg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbB7ZfLy0+uVseHLzAiO
DBVSqgXS8AR0P+FBxL1s+YU98Vq1TjWwQUJY5fJKjkXjM69Rc5oYf757JWZKCBWw
B92qdS3zsWjW0Y+O1P1CDWEDHIOsPoOPdDUb0EpCfZwup5X6EuLsWWFNfBKuaMCC
BUZUy1t8/ak7a4lsiGjPM9cPvGe6R5kDFq4jdLGgXrvBTiWMBgSaK3ngzHZzvgsB
TkRrnm2jztpiu7L6g9Vk3q3vc7Ft/6AQtvGStcGFQu0TKlZnKCSEpe0HvtsERaQm
8Fr14eEgdNfvaIKQXQig/uo96LhQ3TLzzPw/4IpCN6MkRKVN7hQ7EW+j7QPiqfGn
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300133676284742370010265539697451080999593
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-16 11:39:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-15 11:39:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'maristinvercargill.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17886627529953583322210369107578141039295209662351620235366945011642320364746974974015015245362202238194926803667733536234264781100411976500653303934763788196382252430764452462244363097615807667030468257520226499972505150822279077558132598543974238921575686958612621748023691032766515101680516901200973310531048213962536304043904887772307531438001637806726663591341490359895446661021037761231471180494539608416559193437899884613097517437598659273685474163654023793704800703095576950773000020573598782120562692288477682897539834972709062949994352863575750771705588378596939568891845255066217228701178800532662682494883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b7fae6a0f69c29089b9eda1d2edf58697e763d8b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1847 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aoraki-dragons.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ardmoremarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayolympic.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bopbadminton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlssouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooklyncroquetclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesshb.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canoeslalomnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carltonjuniorsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedontennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmydt.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornwallcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'druryfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecbafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footballsouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxtongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gksports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenviewsoccer.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenhithefootball.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helensvillerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeymanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howicknetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakasportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katikatifc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbhs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainlandfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristinvercargill.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbnc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrra.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonbaysfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newplymouthcroquetclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhrra.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norths.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oratiaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otahuhusoccer.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakuracityfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakuranetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papamoafootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papamoafootballclub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papanuiredwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papatoetoeunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parklandsunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parklandsunitedsportsclub.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoenixsynchro.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ravensbourne.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redbeachsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivertongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasfootball.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolground.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scpacers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slalomnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportcanterbury.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportnorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportnorthland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporttasman.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportwaitakere.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportwaitakere.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sydenhamrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takapunaafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taradalefootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teawamutuafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesalmonrun.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unimountafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waibopfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihekeunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihoraclaytarget.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitakerecityfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitakererugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wakefieldfc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westernafc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldseriescricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wssfa.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d3a1571600000040300473045022002252e44193fea403fb9b18021be26c8e91bf939d217d70a3e06b37f8ed07255022100e383da8302279d77323307cb29a6495e41db6a7b4ad1663572884ee73ad5e5e1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d3a157044000004030047304502204fa1d664e2f6976674b8384c25e20ed0999d334f1356c8c9be73a1abb9ebf1bd022100db8240f07d34323bab53ee3f1b48cf581a641ee45bec0ba318c4c61bf050f4d9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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