www.stuff.co.nz

- STUFF LIMITED -

Issued by DigiCert ECC Secure Server CA

About this certificate

This digital certificate with serial number 02:18:87:f2:20:96:8a:bd:cd:7f:c8:40:58:d0:50:0f was issued on by DigiCert Inc.

With 78 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

STUFF LIMITED

Organization: STUFF LIMITED
Organization unit: Product Technology
State / Province: Wellington
Locality: Wellington
Country: NZ

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:18:87:f2:20:96:8a:bd:cd:7f:c8:40:58:d0:50:0f
Serial Number (int): 2785828424772003411411553345076219919
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 83:b4:76:64:de:25:5a:3f:21:95:09:67:2b:2d:70:bd:cd:5c:d6:c0
AuthorityKeyId: a3:9d:e6:1f:f9:da:39:4f:c0:6e:e8:91:cb:95:a5:da:31:e2:0a:9f

Fingerprint (sha1): b1:d4:fa:fe:df:a3:99:ce:ea:45:32:a0:50:0e:e5:f2:ff:4a:e2:d5
Fingerprint (sha256): 08:5b:a2:49:d5:36:d7:32:f7:7d:02:4f:43:2d:73:14:e8:eb:67:d9:fb:0c:01:14:c2:06:04:7c:d3:35:69:e2

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertECCSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-ecc-g1.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-ecc-g1.crl

Check the revocation status for certificate www.stuff.co.nz

78

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.stuff.co.nz

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA256

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.stuff.co.nz
stuff.co.nz
disable-preprod-alpha.stuff.co.nz
production-ugc.fairfaxmedia.co.nz
static2.stuff.co.nz
nzcms.fairfaxmedia.co.nz
disable-alpha.stuff.co.nz
static3.stuff.co.nz
canary-alpha.stuff.co.nz
www-preprod-beta.stuff.co.nz
ugc.stuff.co.nz
www-beta.stuff.co.nz
static.fairfaxmedia.co.nz
nznp.fairfaxmedia.co.nz
i-alpha.stuff.co.nz
cdn-my.stuff.co.nz
advertise.stuff.co.nz
advertise.fairfaxmedia.co.nz
www-alpha.stuff.co.nz
widgets.stuff.co.nz
i-preprod.stuff.co.nz
www2.indexed.co.nz
popshop.stuff.co.nz
production-ugc-api.fairfaxmedia.co.nz
my-devint.stuff.co.nz
popshop2.stuff.co.nz
popshop-api.stuff.co.nz
www.indexed.co.nz
audiencefinder.stuff.co.nz
file2.stuff.co.nz
www.preprod.stuff.co.nz
www.bestonthebox.co.nz
canary-preprod.stuff.co.nz
making.stuff.co.nz
staging-popshop-api.stuff.co.nz
resources-preprod.stuff.co.nz
my.stuff.co.nz
staging.indexed.co.nz
www-preprod.stuff.co.nz
i.stuff.co.nz
energyclubnz.com
beta.stuff.co.nz
media.stuff.co.nz
i.preprod.stuff.co.nz
assets.stuff.co.nz
api-preprod.stuff.co.nz
cdn-my-devint.stuff.co.nz
staging-popshop.stuff.co.nz
i-preprod-beta.stuff.co.nz
cdn-my-preprod.stuff.co.nz
canary.stuff.co.nz
www.trubid.nz
staging-ugc-api.fairfaxmedia.co.nz
resources.stuff.co.nz
ugc-api.stuff.co.nz
staging-api.indexed.co.nz
99.fairfaxmedia.co.nz
i-preprod-alpha.stuff.co.nz
api.indexed.co.nz
uat-ugc.fairfaxmedia.co.nz
technology.fairfaxmedia.co.nz
i-beta.stuff.co.nz
alpha.stuff.co.nz
www-staging.energyclubnz.com
interactives.stuff.co.nz
api.stuff.co.nz
www.fairfaxmagazines.co.nz
staging-ugc.fairfaxmedia.co.nz
www-preprod-alpha.stuff.co.nz
np.fairfaxmedia.co.nz
www.energyclubnz.com
about.stuff.co.nz
static.stuff.co.nz
staging-nzcms.fairfaxmedia.co.nz
canary-beta.stuff.co.nz
staging-www.trubid.nz
uat-ugc-api.fairfaxmedia.co.nz
my-preprod.stuff.co.nz

Other certificates including the domain name stuff.co.nz

(limited to 100 certificates)
*.stuff.co.nz
deaths.stuff.co.nz
composer.contentstaging.shift21.ffx.nz
popshop.stuff.co.nz
t.comms.stuff.co.nz
coupons.stuff.co.nz
*.stuff.co.nz
*.stuff.co.nz
www.communications.stuff.co.nz
www.stuff.co.nz
coupons.stuff.co.nz
www.stuff.co.nz
social.stuff.co.nz
shop.stuff.co.nz
*.stuff.co.nz
*.stuff.co.nz
events.stuff.co.nz
www.stuff.co.nz
coupons.stuff.co.nz
stuff.co.nz
*.preprod.stuff.co.nz
stuff.co.nz
www.stuff.co.nz
www.stuff.co.nz
*.stuff.co.nz
playwidget.stuff.co.nz
somniture.stuff.co.nz
somniture.stuff.co.nz
devices.play.stuff.co.nz
my.preprod.stuff.co.nz
prospective2.shared.global.fastly.net
*.stuff.co.nz
www.stuff.co.nz
subscribers.theage.com.au
*.stuff.co.nz
prospective2.shared.global.fastly.net
*.fairfaxmedia.com.au
prospective2.shared.global.fastly.net
*.stuff.co.nz
stuff.co.nz
*.preprod.stuff.co.nz
prospective2.shared.global.fastly.net
test.communications.stuff.co.nz
ssl470690.cloudflaressl.com
pressphotocomp.stuff.co.nz
www.stuff.co.nz
*.stuff.co.nz
www.stuff.co.nz
prospective2.shared.global.fastly.net
www.stuff.co.nz
*.stuff.co.nz
prospective2.shared.global.fastly.net
prospective2.shared.global.fastly.net
analytics.stuff.co.nz
prospective2.shared.global.fastly.net
somniture.stuff.co.nz
*.preprod.stuff.co.nz
shop.stuff.co.nz
*.preprod.stuff.co.nz
prospective2.shared.global.fastly.net
deaths.stuff.co.nz
www.communications.stuff.co.nz
www.stuff.co.nz
*.stuff.co.nz
prospective2.shared.global.fastly.net
*.idm.stuff.co.nz
stuff.co.nz
www.stuff.co.nz
www.stuff.co.nz
pressfanzone.stuff.co.nz
www.stuff.co.nz
*.preprod.stuff.co.nz
shop.stuff.co.nz
*.stuff.co.nz
events.stuff.co.nz
*.stuff.co.nz
stuff.co.nz
shop.stuff.co.nz
www.stuff.co.nz
www.stuff.co.nz
ssl470689.cloudflaressl.com
www.communications.stuff.co.nz
somniture.stuff.co.nz
stuff.co.nz
*.stuff.co.nz
deaths.stuff.co.nz
stuff.co.nz
knowthecrew.stuff.co.nz
prospective2.shared.global.fastly.net
play.stuff.co.nz
popshop.stuff.co.nz
www.stuff.co.nz
shop.stuff.co.nz
*.preprod.stuff.co.nz
stuff.co.nz
www.stuff.co.nz
www.stuff.co.nz
playwidget.stuff.co.nz
prospective2.shared.global.fastly.net
*.stuff.co.nz

Certificate

The complete raw certificate details for www.stuff.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE25JTS0tFjwE2BtcLXBCPGAoEKyjU
UovJw5Dso2L9+ydQ8tZydYS2XbFr57aLK0WdSZDT31OAWDEQYUGl+HCwLg==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2785828424772003411411553345076219919
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.2 (ecdsaWithSHA256)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert ECC Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wellington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wellington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'STUFF LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Product Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.stuff.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004db92534b4b458f013606d70b5c108f180a042b28d4528bc9c390eca362fdfb2750f2d6727584b65db16be7b68b2b459d4990d3df53805831106141a5f870b02e
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a39de61ff9da394fc06ee891cb95a5da31e20a9f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83b47664de255a3f219509672b2d70bdcd5cd6c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1895 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disable-preprod-alpha.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production-ugc.fairfaxmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzcms.fairfaxmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disable-alpha.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canary-alpha.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-preprod-beta.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugc.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-beta.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.fairfaxmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nznp.fairfaxmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-alpha.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-my.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advertise.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advertise.fairfaxmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-alpha.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-preprod.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.indexed.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popshop.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production-ugc-api.fairfaxmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-devint.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popshop2.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popshop-api.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indexed.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audiencefinder.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'file2.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestonthebox.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canary-preprod.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'making.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-popshop-api.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources-preprod.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.indexed.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-preprod.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energyclubnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.preprod.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-preprod.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-my-devint.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-popshop.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-preprod-beta.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-my-preprod.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canary.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trubid.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-ugc-api.fairfaxmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugc-api.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-api.indexed.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '99.fairfaxmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-preprod-alpha.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.indexed.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-ugc.fairfaxmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technology.fairfaxmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-beta.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-staging.energyclubnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactives.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fairfaxmagazines.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-ugc.fairfaxmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-preprod-alpha.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np.fairfaxmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energyclubnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-nzcms.fairfaxmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canary-beta.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-www.trubid.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-ugc-api.fairfaxmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-preprod.stuff.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-ecc-g1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-ecc-g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertECCSecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.2 (ecdsaWithSHA256)
 . . . . [c:0|t:3|false] BIT STRING (824 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18730346046548071951367095499339650340731132696711977418359620259853642528492655705342939073429166485501008549352695
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 33863189227691914338287211553523941747611460553507540759646048227326961646631520821811295512990866417885556371121476