www.sportycrm.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:03:af:75:ea:89:cf:fc:47:91:3c:1a:9a:ab:a1:f3:3e:88 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sportycrm.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:03:af:75:ea:89:cf:fc:47:91:3c:1a:9a:ab:a1:f3:3e:88
Serial Number (int): 262590932051040838086104310521749560311432
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1e:a0:43:5c:97:4a:f0:1d:53:5e:d1:a4:0d:5d:1b:4d:9a:e4:03:d0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a5:14:b8:28:8c:fc:ed:0d:a6:ae:f4:7a:83:c9:ab:eb:cb:c7:1a:90
Fingerprint (sha256): 04:1d:12:fc:65:ac:ad:a6:4f:4d:e2:76:84:e5:82:6d:0a:26:29:d4:d5:56:85:e8:20:12:bd:72:db:11:f8:29

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sportycrm.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sportycrm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.arrowtownrugby.co.nz
www.aucklandsoftball.org.nz
www.basketballhawkesbay.co.nz
www.belfastnetball.co.nz
www.bluerovers.co.nz
www.bowlsstadium.nz
www.bowlswaikato.co.nz
www.cashmere.school.nz
www.cfc.co.nz
www.christchurchfootballclub.co.nz
www.countiesmanukaurugbyleague.co.nz
www.cra.kiwi
www.cricketwellington.co.nz
www.ctfc.co.nz
www.cyclingsc.co.nz
www.eden.rugby
www.ellerslieeagles.co.nz
www.feildingfarmersmarket.co.nz
www.feildingfarmersmarket.net.nz
www.feildingfarmersmarket.org.nz
www.fenciblefoundation.co.nz
www.golfnorthland.co.nz
www.greenacrescountry.org.nz
www.harbourgolf.co.nz
www.hastingsboys.school.nz
www.havelocknorth.rugby
www.hawkesbay.basketball
www.hawkesbaynetball.co.nz
www.hbbct.org.nz
www.hbnetball.co.nz
www.hbrugby.co.nz
www.healthyfamilieswaitakere.org.nz
www.hjac.org.nz
www.hockeymarlborough.org.nz
www.hokowhitubridge.org.nz
www.horouta.co.nz
www.huianetball.co.nz
www.ie19.co.nz
www.ie19.nz
www.kirweerugby.co.nz
www.manawatusoftball.co.nz
www.manawatusoftball.org.nz
www.maniapoto.school.nz
www.manukauaucklandvolleyball.co.nz
www.maoribasketball.com
www.maristalbion.co.nz
www.marlboroughnetball.org.nz
www.marlboroughtrampingclub.co.nz
www.membermanager.co.nz
www.metrofootball.org.nz
www.mff.nz
www.mitre10park.co.nz
www.mountsports.co.nz
www.naenaeswimclub.co.nz
www.northgolf.nz
www.nzblackpowder.nz
www.nzteachersgames.co.nz
www.otakisportsclub.co.nz
www.parklandsrugby.co.nz
www.patoka.school.nz
www.pioneerfishingclub.co.nz
www.polo.org.nz
www.ponsonbyrugby.co.nz
www.prebbleton.com
www.referees.co.nz
www.schoolsport.nz
www.schoolsportnz.co.nz
www.schoolsportnz.org.nz
www.sked.co.nz
www.soulutionzsports.nz
www.southcanterbury.basketball
www.sportauckland.nz
www.sportsafe.co.nz
www.sporty.org.nz
www.sportycrm.co.nz
www.sportycrm.com
www.st-marys-wellington.school.nz
www.stmaryswellington.school.nz
www.stmw.school.nz
www.taradaleint.school.nz
www.tepukeunitedfc.co.nz
www.volleysouth.org.nz
www.waimakunited.org.nz
www.wanakafootball.nz
www.wdta.org.nz
www.westshore.school.nz
www.whangareibridgeclub.nz
www.whangareinetball.co.nz

Other certificates including the domain name sportycrm.com

(limited to 100 certificates)
www.sportycrm.com
www.giafc.co.nz
sportycrm.com
www.sportsground.com
fdmc.school.nz
arrowtownrugby.co.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
freyberg.ac.nz
sporty.org.nz
sporty.org.nz
www.ams.school.nz
www.skeggsfoundation.nz

Certificate

The complete raw certificate details for www.sportycrm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18JjCB6kZoUmYAfZbJPA
LceHZoibjnoR4y0bly9grtzHFUb4a4qh4fOSAp+fkMuNsFCOHke18K3OEzSRFj3L
il/uPm3RwUbZ+C/mGFYVn0vkhkzCzE15xJ2xe8vWBpY7irFZkwR8P3Q9m235fgel
OhWXCHWbC5vWQ9gS2Fg3TiJF74wE6YDt1SyHEiqpcwlWGxpuS3MTUCf112UFeLGd
hskGUMmuYnXHfN2uIbflCJ0v7xQFHmevse7/kIBThINkzwsUVAtV9VrHlKFERbzm
tXUrIu+5+SeYfTCB2+SM3JpXKrZDcHjRPUi0Y2TyIV35jghG2Uh5qsbauq0HTVVs
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262590932051040838086104310521749560311432
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-18 04:21:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 04:21:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sportycrm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27237091292403490759103511104726832799255197117466655845762781923462053013283202577922288768464088113758367347137314981646719450293153709145321353475905777459312944934583333365057845047552800072557383058746829800340169879406164362199082172818619061832475408379635565971285459163746684279796567837616745998000556038651093067187199025093066109517355109432440866983610576552061132504430081236886934229729118443699328893945779897502501743947985481864829783581067022021469882312130807352377842386441371066775025103449017797747128334253618858850538412597631823010803879385981529845930377312621972857069109824537470306708677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1ea0435c974af01d535ed1a40d5d1b4d9ae403d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2179 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arrowtownrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basketballhawkesbay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belfastnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluerovers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsstadium.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswaikato.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cashmere.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchfootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countiesmanukaurugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cra.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cricketwellington.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cyclingsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eden.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ellerslieeagles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feildingfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feildingfarmersmarket.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feildingfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fenciblefoundation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.golfnorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenacrescountry.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harbourgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastingsboys.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havelocknorth.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbay.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbaynetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbbct.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthyfamilieswaitakere.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hjac.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeymarlborough.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hokowhitubridge.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.horouta.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huianetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ie19.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ie19.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirweerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manawatusoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manawatusoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maniapoto.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manukauaucklandvolleyball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maoribasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristalbion.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughtrampingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.membermanager.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metrofootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mff.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mitre10park.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naenaeswimclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northgolf.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzblackpowder.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzteachersgames.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otakisportsclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parklandsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patoka.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pioneerfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ponsonbyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prebbleton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.referees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsport.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsportnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sked.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soulutionzsports.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcanterbury.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportauckland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsafe.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporty.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportycrm.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportycrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-marys-wellington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryswellington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmw.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taradaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tepukeunitedfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volleysouth.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waimakunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wanakafootball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wdta.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westshore.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareibridgeclub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareinetball.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e7cf545a0000004030047304502205e68fb88d00dda0d5972fe19871f1e1b8890b31dd886224529a726a3c1ed79a6022100c9769f69629d31fd25e9a27e6706282e98dd2f4cfd609ea47dc3056e6666c91f00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e7cf545fd0000040300473045022100c9136682530e5af93dce46065aea98949cedaa3a24659763ea93095268b764d502203e477c64f4a58c6fa0e77b838e77fd3bb7f91a75bdfdb5bbda8e67e456593335
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0032a88ba25ac90816a31f1b81339b3145ae898906c7b35f0f0370c47c27dbfd2a8cdb4b8ba83671fb968f0fb9bf5c98ba6f71bf757ecf5e74fc68a43b6fb12bf8b65bbef49a1476f84df23504c9cf50f34d80db47168828dfc308c8ba2de8d57d255ca53de325d4c542a452f1ccfd10f629c5a4c6a800f0da0d4525f3e41cace9155c14576648c7d3e01ab4ce190f14993caf047b0f77a016b5b62a7b8b9f9d2e6c329d9c04ac85c6c058db80938720e8aba8017af8401a3a6218b2abf7b9754e211e72cab7ff87f039a884faa5d824af4d8b1109c48014e1dad1cc59fb1aa924bb9a26ef06d9a7f02408b102b3f55ab9b78b718ab3cda3765243af7196df49c1