sporty.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:41:a2:a1:b5:f2:87:dc:bc:63:6a:9b:ba:db:f8:7d:59:19 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:41:a2:a1:b5:f2:87:dc:bc:63:6a:9b:ba:db:f8:7d:59:19
Serial Number (int): 370783672162344768109322879263490287950105
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8f:d3:89:e2:ae:70:96:32:4c:4f:5a:5f:48:b8:f3:5a:4e:cc:0e:a8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3d:95:19:61:2a:b0:30:99:4a:7d:ef:71:11:0a:aa:62:da:1a:9f:a3
Fingerprint (sha256): 05:56:47:a6:fb:bd:4b:6d:60:48:59:e5:ca:84:e4:ad:6a:8f:93:40:dc:bd:1d:0f:79:79:3a:66:1f:09:70:f8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.co.nz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aff.org.nz
aoraki-dragons.co.nz
ardmoremarist.co.nz
arra.org.nz
aucklandbaseball.co.nz
aucklandfootball.org.nz
bayolympic.co.nz
bopbadminton.co.nz
bowlssouthland.co.nz
bowlswestcoast.org.nz
brooklyncroquetclub.org
burwoodafc.co.nz
businesshb.nz
canoeslalomnz.org.nz
capitalfootball.org.nz
carltonjuniorsrugby.co.nz
centralfootball.co.nz
centralfootball.org.nz
clevedontennisclub.co.nz
cmsport.co.nz
cmydt.co.nz
cornwallcricket.co.nz
druryfootball.co.nz
footballsouth.co.nz
foxtongolf.co.nz
gksports.co.nz
glenviewsoccer.co.nz
greenhithefootball.org
hbcc.org.nz
helensvillerugby.co.nz
hendersonsquash.co.nz
howicknetball.org.nz
karakasportspark.co.nz
katikatifc.co.nz
kbhs.school.nz
keirunga.org.nz
linfield.co.nz
linwoodrugby.co.nz
mainlandfootball.co.nz
makikihi.school.nz
manurewamets.co.nz
marlboroughfootball.co.nz
mountfortwaterpolo.nz
mrra.co.nz
myfootball.co.nz
nelsonbaysfootball.co.nz
newplymouthcroquetclub.co.nz
nff.org.nz
nhbmx.org.nz
nhrra.co.nz
norths.co.nz
nzfootball.co.nz
oratiaunited.co.nz
papakuranetball.org.nz
papamoafootballclub.co.nz
papamoafootballclub.nz
papanuiredwoodafc.co.nz
papatoetoeunited.co.nz
parklandsunited.co.nz
pcbasketballclub.co.nz
ravensbourne.co.nz
rivertongolf.co.nz
royaloakracquets.co.nz
schoolground.co.nz
schoolground.nz
southlandbmxclub.co.nz
southlandfootball.org.nz
speedway.co.nz
sportcanterbury.org.nz
sportsground.co.nz
sporttasman.org.nz
sportwaitakere.co.nz
sportwaitakere.nz
sporty.co.nz
sydenhamrugby.co.nz
takapunaafc.co.nz
taradalefootball.org.nz
teawamutuafc.co.nz
thesalmonrun.nz
ulyssesnelson.org.nz
waibopfootball.co.nz
waihekeunited.org.nz
waihoraclaytarget.co.nz
waikaregolfclub.co.nz
waitakererugby.co.nz
wakefieldfc.nz
westernafc.com
woolstonparkindoorbowls.org.nz
wssfa.nz

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
turbotouch.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
mtrbmx.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporthb.net.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
uat.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz

Certificate

The complete raw certificate details for sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0r5GA7k0gNAwdS7AROl/
v0E47iIDw1wPDx4ySxWMFNpfojXH2ZN6cSxdB1hmeXEIGaeGBd1kUy0qRf5PPJD2
SLI7+2MqIGzKHvxU9OFtLMfGDIWhTETomoUV19JeOSeuN/O4rZzBI+lesRCeAiTO
6DIssmPyfeURjh7s7uik6JQWCdKot+GqseNJCfsa/nFXskPhZE61+f7WQDtJreuS
0WsOVQ8emPM8k/b60X0wjjfEHlOkPRX+Iry4qhdDxff2Tj9w99PpV6zKrqhVGaz3
9y0RSFYdd0wUUM8pFKAr9qJz/7rebOHR86RwaCzzCMRR6WiWzz0X7wEM+YmjR3KF
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370783672162344768109322879263490287950105
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-21 04:42:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-20 04:42:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26603871399912746231859944757196785291427627860850733873236034012220933150349571455847727263877034551590817996468187135336136896917789318822620168729421781454825812387027249711851744504128570227044680378472691664607283972449846576356718782958171807408392365198444219178480354699876222690730338058362830612100729342034944453827228364563311298584138300520205681316180984214644027082787226605589135396656518777198340529840247560995145456413806220386930186427771446363468487429039100624091101500804877145222963898657225898816498933334586732417629762190483601765458101063115279658933214572875445065782414216476894218585377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8fd389e2ae7096324c4f5a5f48b8f35a4ecc0ea8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1834 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aoraki-dragons.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ardmoremarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayolympic.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bopbadminton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlssouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswestcoast.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooklyncroquetclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesshb.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canoeslalomnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carltonjuniorsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedontennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmydt.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornwallcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'druryfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footballsouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxtongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gksports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenviewsoccer.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenhithefootball.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helensvillerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hendersonsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howicknetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakasportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katikatifc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbhs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keirunga.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linfield.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linwoodrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainlandfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makikihi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewamets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountfortwaterpolo.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrra.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonbaysfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newplymouthcroquetclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhbmx.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhrra.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norths.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oratiaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakuranetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papamoafootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papamoafootballclub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papanuiredwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papatoetoeunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parklandsunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ravensbourne.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivertongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaloakracquets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolground.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandbmxclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportcanterbury.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporttasman.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportwaitakere.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportwaitakere.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sydenhamrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takapunaafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taradalefootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teawamutuafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesalmonrun.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulyssesnelson.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waibopfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihekeunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihoraclaytarget.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikaregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitakererugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wakefieldfc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westernafc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woolstonparkindoorbowls.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wssfa.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000178f2f3f1d200000403004730450220222e74767135b9c3296e5bbb007b08d24b96c2cac775d1eb0c4790802abc0bfc022100ce3a26759c286ab0d42957edae9315d17167dd6e1e18d220fe219b00e41a0fd1007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000178f2f3f1bf0000040300483046022100a503b7613060df66f94d5071c28545b958a11a2e07459c397b207ef3d65657e8022100a877c6c8e639235002d8ff8e07ef03478389396da60e1d40f2012975c297acd7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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