www.sportsground.com

Issued by R3

About this certificate

This digital certificate with serial number 03:93:f0:be:34:68:d9:ce:f9:08:78:0e:13:c9:83:b9:9c:45 was issued on by Let's Encrypt.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.sportsground.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:93:f0:be:34:68:d9:ce:f9:08:78:0e:13:c9:83:b9:9c:45
Serial Number (int): 311678368051042632248980004998168431926341
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1d:34:93:6f:c9:36:82:af:82:12:bc:16:03:07:40:6d:b5:3e:3f:f4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 69:9c:46:cd:9a:0f:36:d5:94:cd:29:4b:e3:1b:e1:57:5d:71:62:87
Fingerprint (sha256): 06:5c:82:2a:e0:86:22:af:0f:cd:81:35:85:16:0a:42:05:99:70:df:13:32:2a:ff:9d:ab:79:15:90:61:9c:bf

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.sportsground.com

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sportsground.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.athleticswanganui.co.nz
www.aucklandservicerifle.org.nz
www.baseballnewzealand.co.nz
www.baseballnewzealand.com
www.baseballnz.com
www.bowlsdunedin.co.nz
www.bowlstaurangasouth.co.nz
www.collegerifles.co.nz
www.countiesbadminton.co.nz
www.diamondsport.co.nz
www.diamondsportnz.co.nz
www.diamondsports.co.nz
www.diamondsportsnz.co.nz
www.diamondsportsnz.com
www.distanceridingnewzealand.co.nz
www.hcwaterpolo.co.nz
www.howicksailingclub.co.nz
www.hpbaseball.co.nz
www.hphawks.co.nz
www.hrc.org.nz
www.lnissn.org.nz
www.lynnavon.org.nz
www.mahedrysdale.co.nz
www.mahedrysdale.com
www.maoribasketball.co.nz
www.marlborough-touch.co.nz
www.mmcc.co.nz
www.motuekatouch.co.nz
www.netballmanurewa.org.nz
www.newzealandbaseball.co.nz
www.nscbaseball.co.nz
www.nzsra.org.nz
www.orokohangamusictrust.co.nz
www.rosegardenscroquetclub.org.nz
www.rugbysouthland.co.nz
www.rugbysouthlandreferees.co.nz
www.saintjosmatata.school.nz
www.softballauckland.org.nz
www.southcanterburybasketball.co.nz
www.southernrugby.co.nz
www.southlandfestivalofrunning.co.nz
www.sportsground.com
www.teeball.co.nz
www.touchsouthland.co.nz
www.ulyssesnelson.org.nz
www.upperhuttrifleclub.co.nz
www.waihibeachtennisclub.co.nz
www.whangareirowingclub.org.nz
www.whangaroasportfishingclub.co.nz

Other certificates including the domain name sportsground.com

(limited to 100 certificates)
www.nelsoncarclub.co.nz
www.blenheimgolfclub.co.nz
www.sportsground.com
sporty.co.nz
support.sportsground.com
www.tabletennis.org.nz
sporty.co.nz
www.sportsground.com
support.sportsground.com
www.sportsground.com
support.sportsground.com
northcanterburyrugby.co.nz
support.sportsground.com
www.nztua.com
www.sportsground.com
www.schoolground.com
support.sportsground.com
support.sportsground.com
hastings-central.school.nz
ultrarunner.org.nz
www.sportsground.com
www.oacnz.org
www.sportsground.com
sporty.co.nz
aafl.co.nz
support.sportsground.com
sporty.co.nz
support.sportsground.com
sporty.co.nz
northharbourtag.co.nz
trenthamrifleclub.co.nz
www.sportsground.com
support.sportsground.com
support.sportsground.com
sporty.co.nz
aucklandmarist.co.nz
support.sportsground.com
www.wmsc.org.nz
support.sportsground.com
www.sportsground.com
support.sportsground.com
support.sportsground.com
lucknow.school.nz
www.badmintonhb.co.nz
pioneerbasketballclub.co.nz
www.melrosetargetshooting.co.nz
www.sportsground.com
sporty.co.nz
basketballtaranaki.co.nz
sporty.co.nz
www.schoolground.com

Certificate

The complete raw certificate details for www.sportsground.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKBDCCCOygAwIBAgISA5PwvjRo2c75CHgOE8mDuZxFMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMDgyMjU3NTlaFw0yNDAyMDYyMjU3NThaMB8xHTAbBgNVBAMT
FHd3dy5zcG9ydHNncm91bmQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvCACYsaDCW3WVdxPoWjwpP3xiCGOmCjeGqguaPMXyCBwgHcYwzF2MMRI
pC6IIP7vxD7BNn9dCwGnt8esyj7AC6yAAB3fLPUw5p0bhkVFCMC2ulYsebATZYZg
InuXfCBcD5MgbA9Q2R1GmXfmRZ4T7j9HJW024UnfbmDcgSD12E/MvuTJ5thFANy3
Z4PjZ4IbWsBLb8btLG2b6d53i45AVgvdie6qIAq0lo7u0ZU0xavTC09hoq6Q27cy
PqEwLg3g0yMq++xv/+LrFu7MhqQrqzj/0SBCA70ts4KJdKDLBSEi/V3HQKGrde8K
nfP4jp3rwCSMOsQeeDJG/jzPu/hI5QIDAQABo4IHJTCCByEwDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA
MB0GA1UdDgQWBBQdNJNvyTaCr4ISvBYDB0BttT4/9DAfBgNVHSMEGDAWgBQULrMX
t1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0
dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVu
Y3Iub3JnLzCCBSwGA1UdEQSCBSMwggUfght3d3cuYXRobGV0aWNzd2FuZ2FudWku
Y28ubnqCH3d3dy5hdWNrbGFuZHNlcnZpY2VyaWZsZS5vcmcubnqCHHd3dy5iYXNl
YmFsbG5ld3plYWxhbmQuY28ubnqCGnd3dy5iYXNlYmFsbG5ld3plYWxhbmQuY29t
ghJ3d3cuYmFzZWJhbGxuei5jb22CFnd3dy5ib3dsc2R1bmVkaW4uY28ubnqCHHd3
dy5ib3dsc3RhdXJhbmdhc291dGguY28ubnqCF3d3dy5jb2xsZWdlcmlmbGVzLmNv
Lm56ght3d3cuY291bnRpZXNiYWRtaW50b24uY28ubnqCFnd3dy5kaWFtb25kc3Bv
cnQuY28ubnqCGHd3dy5kaWFtb25kc3BvcnRuei5jby5ueoIXd3d3LmRpYW1vbmRz
cG9ydHMuY28ubnqCGXd3dy5kaWFtb25kc3BvcnRzbnouY28ubnqCF3d3dy5kaWFt
b25kc3BvcnRzbnouY29tgiJ3d3cuZGlzdGFuY2VyaWRpbmduZXd6ZWFsYW5kLmNv
Lm56ghV3d3cuaGN3YXRlcnBvbG8uY28ubnqCG3d3dy5ob3dpY2tzYWlsaW5nY2x1
Yi5jby5ueoIUd3d3LmhwYmFzZWJhbGwuY28ubnqCEXd3dy5ocGhhd2tzLmNvLm56
gg53d3cuaHJjLm9yZy5ueoIRd3d3LmxuaXNzbi5vcmcubnqCE3d3dy5seW5uYXZv
bi5vcmcubnqCFnd3dy5tYWhlZHJ5c2RhbGUuY28ubnqCFHd3dy5tYWhlZHJ5c2Rh
bGUuY29tghl3d3cubWFvcmliYXNrZXRiYWxsLmNvLm56ght3d3cubWFybGJvcm91
Z2gtdG91Y2guY28ubnqCDnd3dy5tbWNjLmNvLm56ghZ3d3cubW90dWVrYXRvdWNo
LmNvLm56ghp3d3cubmV0YmFsbG1hbnVyZXdhLm9yZy5ueoIcd3d3Lm5ld3plYWxh
bmRiYXNlYmFsbC5jby5ueoIVd3d3Lm5zY2Jhc2ViYWxsLmNvLm56ghB3d3cubnpz
cmEub3JnLm56gh53d3cub3Jva29oYW5nYW11c2ljdHJ1c3QuY28ubnqCIXd3dy5y
b3NlZ2FyZGVuc2Nyb3F1ZXRjbHViLm9yZy5ueoIYd3d3LnJ1Z2J5c291dGhsYW5k
LmNvLm56giB3d3cucnVnYnlzb3V0aGxhbmRyZWZlcmVlcy5jby5ueoIcd3d3LnNh
aW50am9zbWF0YXRhLnNjaG9vbC5ueoIbd3d3LnNvZnRiYWxsYXVja2xhbmQub3Jn
Lm56giN3d3cuc291dGhjYW50ZXJidXJ5YmFza2V0YmFsbC5jby5ueoIXd3d3LnNv
dXRoZXJucnVnYnkuY28ubnqCJHd3dy5zb3V0aGxhbmRmZXN0aXZhbG9mcnVubmlu
Zy5jby5ueoIUd3d3LnNwb3J0c2dyb3VuZC5jb22CEXd3dy50ZWViYWxsLmNvLm56
ghh3d3cudG91Y2hzb3V0aGxhbmQuY28ubnqCGHd3dy51bHlzc2VzbmVsc29uLm9y
Zy5ueoIcd3d3LnVwcGVyaHV0dHJpZmxlY2x1Yi5jby5ueoIed3d3LndhaWhpYmVh
Y2h0ZW5uaXNjbHViLmNvLm56gh53d3cud2hhbmdhcmVpcm93aW5nY2x1Yi5vcmcu
bnqCI3d3dy53aGFuZ2Fyb2FzcG9ydGZpc2hpbmdjbHViLmNvLm56MBMGA1UdIAQM
MAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYASLDja9qmRzQP
5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGLsV8SgwAABAMARzBFAiEAubm/QBHl
+6Y5YNPcqwZbiVXeV1OR543PwXGXheB81dQCIBIIuM+05K4Lm6KLbF/zuhkXMdmh
FUYXsWJCKNVr3ozNAHYAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcA
AAGLsV8SjgAABAMARzBFAiEAtpHfLk48xfNnl4rjEi1DbB8SXHZhImDnr607GFbE
5IUCIFbnZi1Zbo8GUkEWDz+FkuTZEh5B+Phpd6mVL1r1JinuMA0GCSqGSIb3DQEB
CwUAA4IBAQA9bDFTqiaK1EPOH36dEJlFiZ0wI7S3M6jyxlp21exIwx66AMmCLv+E
Zx1l14FzDRrA/D1NN2yxhgVK9pZ6M3jCorcJSPf7nmg7dtJnrg+MpW5mQLlD7K4r
rXV7tvqMff7QZoGiohVN+tLk2cKW89JL2WCzq0+F5lSpoPhc+xO9k5rBDDH39UrP
hurH6Kqwzu0C7TsnJOfo8Xf7cXFXJBXbwxG4GzjVdzzReMvTigHQ2CTeCfvgiXL+
1X8XHvE2nJ9+/k6CP2nRxQiQ5p8yqzqAtbTwLwhw8945iIn0D2h7gJeAfb+CoT85
cTUOjdSY4ZCfUgMEm6IpVZF2trkud0rY
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCACYsaDCW3WVdxPoWjw
pP3xiCGOmCjeGqguaPMXyCBwgHcYwzF2MMRIpC6IIP7vxD7BNn9dCwGnt8esyj7A
C6yAAB3fLPUw5p0bhkVFCMC2ulYsebATZYZgInuXfCBcD5MgbA9Q2R1GmXfmRZ4T
7j9HJW024UnfbmDcgSD12E/MvuTJ5thFANy3Z4PjZ4IbWsBLb8btLG2b6d53i45A
Vgvdie6qIAq0lo7u0ZU0xavTC09hoq6Q27cyPqEwLg3g0yMq++xv/+LrFu7MhqQr
qzj/0SBCA70ts4KJdKDLBSEi/V3HQKGrde8KnfP4jp3rwCSMOsQeeDJG/jzPu/hI
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311678368051042632248980004998168431926341
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 22:57:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 22:57:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sportsground.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23748585717451955898488261702889174614755259999252175997552796386476187292673289439991844923257252177468664330591833212495900856513232316197077601164033893430961960419689244276184943150372054822609082102276841262385276821266551690349024290439561921503322909754008982010095980967050883525688468487795092794805361553087441261498401933757653825050063006628957351461962095499949360323127390300178442929355941812992191611594059333919415564812295364102168703782777634855857342449554865688800260769177806525508279691782817960154186168351258991282729975343892871112792474580849719577442566829721975432015732785386711372286181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1d34936fc93682af8212bc160307406db53e3ff4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1315 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athleticswanganui.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandservicerifle.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnewzealand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsdunedin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlstaurangasouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegerifles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countiesbadminton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportsnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportsnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.distanceridingnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcwaterpolo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicksailingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hphawks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hrc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lnissn.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lynnavon.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahedrysdale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahedrysdale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maoribasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlborough-touch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motuekatouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballmanurewa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newzealandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nscbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzsra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orokohangamusictrust.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosegardenscroquetclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbysouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbysouthlandreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintjosmatata.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softballauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcanterburybasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southernrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandfestivalofrunning.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teeball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ulyssesnelson.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upperhuttrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihibeachtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareirowingclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangaroasportfishingclub.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bb15f12830000040300473045022100b9b9bf4011e5fba63960d3dcab065b8955de575391e78dcfc1719785e07cd5d402201208b8cfb4e4ae0b9ba28b6c5ff3ba191731d9a1154617b1624228d56bde8ccd0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bb15f128e0000040300473045022100b691df2e4e3cc5f367978ae3122d436c1f125c76612260e7afad3b1856c4e485022056e7662d596e8f065241160f3f8592e4d9121e41f8f86977a9952f5af52629ee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003d6c3153aa268ad443ce1f7e9d109945899d3023b4b733a8f2c65a76d5ec48c31eba00c9822eff84671d65d781730d1ac0fc3d4d376cb186054af6967a3378c2a2b70948f7fb9e683b76d267ae0f8ca56e6640b943ecae2bad757bb6fa8c7dfed06681a2a2154dfad2e4d9c296f3d24bd960b3ab4f85e654a9a0f85cfb13bd939ac10c31f7f54acf86eac7e8aab0ceed02ed3b2724e7e8f177fb7171572415dbc311b81b38d5773cd178cbd38a01d0d824de09fbe08972fed57f171ef1369c9f7efe4e823f69d1c50890e69f32ab3a80b5b4f02f0870f3de398889f40f687b8097807dbf82a13f3971350e8dd498e1909f5203049ba229559176b6b92e774ad8