willowpark.school.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:50:07:59:38:43:21:dd:aa:d6:dd:8c:32:0d:95:58:2d:5b was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=willowpark.school.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:50:07:59:38:43:21:dd:aa:d6:dd:8c:32:0d:95:58:2d:5b
Serial Number (int): 288569215000480426705356296055290324331867
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 80:41:c7:89:c4:1f:b6:1e:46:08:5c:03:89:73:c2:4a:65:b8:c0:d5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 03:d4:33:8d:91:65:c1:79:ac:30:8a:90:1b:53:1d:44:58:7c:48:4d
Fingerprint (sha256): 04:4b:2d:71:4a:d3:6a:e3:6b:0a:c2:e0:7b:99:6a:c0:84:5d:6b:06:35:d9:cf:c2:b3:38:af:c6:d5:c3:0a:27

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate willowpark.school.nz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for willowpark.school.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

actc.org.nz
acwpa.co.nz
ashleyrugby.co.nz
aucklandmarist.co.nz
badmintonhb.co.nz
blenheimgolfclub.co.nz
bluffhillbowls.co.nz
bowlswanganui.org.nz
boxingnz.org.nz
bushmultisport.org.nz
cambridgenetball.org.nz
canamju.org
canterburycommunityrugby.co.nz
canterburyrugby.co.nz
clevedoncricketclub.co.nz
clevedonrifleclub.co.nz
cmih.co.nz
crfu.co.nz
ellesmererugby.org.nz
gisborneharriers.co.nz
glenburniceskatingclub.co.nz
grammarcarlton.co.nz
grammartec.co.nz
halswellcricket.co.nz
hastings-central.school.nz
hastingsintermediate.school.nz
heet.net.nz
manukaumasters.co.nz
manurewarugby.co.nz
mariancollege.school.nz
maristfc.co.nz
maristnh.co.nz
marlboroughtennis.co.nz
mchockey.co.nz
melrosetargetshooting.co.nz
midcanterburyrugby.co.nz
mttauharagymnastics.co.nz
mtwellingtonrugby.co.nz
mtwswim.co.nz
ncnc.org.nz
nelsoncarclub.co.nz
netballkapiti.org.nz
netballmanawatu.org.nz
netballtaranaki.org.nz
northcanterburyrugby.co.nz
nzpca.org
oacnz.org
ophc.co.nz
orfu.co.nz
papakurarugby.co.nz
paparoa.school.nz
parkvale.school.nz
pickleball.org.nz
pioneerbasketballclub.co.nz
ponekerugby.com
prebbletonnetball.org.nz
primarysportwellington.org.nz
puhoisports.org.nz
rangi.school.nz
rollestonrugby.co.nz
scrfu.co.nz
smognetball.org.nz
southlandmtbclub.co.nz
southlandolympicweightlifting.co.nz
sportsouthland.co.nz
stanthony.ac.nz
stheliersbowlingclub.co.nz
stjos.school.nz
suburbsrugby.co.nz
taierirugby.co.nz
taniwha.co.nz
taranakihockey.org.nz
technicalharriers.co.nz
timarusquashclub.co.nz
touchcanterbury.co.nz
trenthamrifleclub.co.nz
tuakauponyclub.co.nz
ultrarunner.org.nz
uniss.co.nz
valleyhockey.org.nz
volleyballbop.co.nz
waikatohockey.org.nz
waikatotouch.co.nz
wellingtontouch.org.nz
wellsfordsquashclub.co.nz
whtc.co.nz
willowpark.school.nz
wmsc.org.nz
wops.co.nz

Other certificates including the domain name willowpark.school.nz

(limited to 100 certificates)
willowpark.school.nz
www.diamondsportsnz.co.nz
bowlsdunedin.co.nz
meeanee.school.nz
www.canterburybaseball.co.nz
www.bowlswestcoast.org.nz
www.ophc.co.nz
www.opotikicol.school.nz
www.ophc.co.nz
distanceridingnewzealand.co.nz
whangareirowingclub.org.nz
www.baseballnewzealand.org
canterburybaseball.co.nz
www.waihibeachtennisclub.co.nz
rosmini.school.nz
www.diamondsportnz.co.nz
canterburybaseball.co.nz
willowpark.school.nz
www.westcoastsoftball.co.nz
meeanee.school.nz
mtwswim.co.nz

Certificate

The complete raw certificate details for willowpark.school.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMn6swOGZ6T0BWkpBKXA
+JLscmAu9LguKcX1Qk7kKQMWP2k234Ww1Rn7TbWhCvMVXliOXH5esL/421Tuao2f
4RlenirSnyffubb/z/z87V+tiBZxf/oiW3Hh7wy+p4rOEUwXuOHIblalnnTmW3yk
HlWR7jPwR3WfhlsNpsp+nt1MzZ45Cd+bVx8LR18fyssdwkutsw6i2t0gW4yfhsZL
Y3Yy8AtfAfHCo/3Y3hjisIEygqF9G5AKUcwx41Dcas/2+lKJD6L9PamnlANzx0W0
LSDkue3/nz7AF372OD+wu7TKJ1qIyPMrmKDEt/OAIrr9eeuIKIgcHGsxOpkeJAPq
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288569215000480426705356296055290324331867
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-29 03:26:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-28 03:26:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'willowpark.school.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20802681716453189142197744326513958360522216859580491584044472548440298014839947339011672852041889556886736448683232932122763374993645530493042894506072429035611266331616106865242123043013951926615218006571016103950805747460218871197190296037549899674497913942538204828675331370586373772297574870216031778557548539313275753939858713493226300866355456555994893274461285084727070637688212773672533147778974528728495484788383302109412907284284866387581473583891616791764532572460993754397433389074171145179524221443355884446879801490615037486556809874899699053211608907099718526351557976070748478326118067755409018710609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8041c789c41fb61e46085c038973c24a65b8c0d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1863 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acwpa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashleyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandmarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badmintonhb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blenheimgolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluffhillbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxingnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bushmultisport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgenetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canamju.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburycommunityrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedonrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmih.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellesmererugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisborneharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenburniceskatingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grammarcarlton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grammartec.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halswellcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastings-central.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastingsintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heet.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manukaumasters.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariancollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristnh.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughtennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mchockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melrosetargetshooting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mttauharagymnastics.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtwellingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtwswim.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsoncarclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballkapiti.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballmanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballtaranaki.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzpca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oacnz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ophc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakurarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paparoa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkvale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pickleball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneerbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponekerugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primarysportwellington.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puhoisports.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rollestonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smognetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandmtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandolympicweightlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanthony.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stheliersbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjos.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suburbsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taierirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taniwha.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taranakihockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technicalharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timarusquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trenthamrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuakauponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultrarunner.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniss.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valleyhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volleyballbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikatohockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikatotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtontouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellsfordsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whtc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willowpark.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmsc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wops.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fef8c8c8d000004030047304502200f63ed0cc63e37238ee5b5c761b7a089086208f12957db23068ba74612cf6910022100fa548fbec9c7f17020840027d612c55242c51646cf93c6f40f87fdbf9cb208a00077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016fef8c8d820000040300483046022100900fcceee6d2878f945ce26effce6da92af26316b5561655fa9eaafd04b0a65d022100f0742b215e8350a511cc0c5e7c7605cca9d101911e9cabad8dccdfe3542a160e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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