www.sportsground.com

Issued by R3

About this certificate

This digital certificate with serial number 04:49:6a:db:92:9e:34:1c:e3:cc:29:34:10:25:01:58:92:e5 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.sportsground.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:49:6a:db:92:9e:34:1c:e3:cc:29:34:10:25:01:58:92:e5
Serial Number (int): 373431794766600694585674998887256434447077
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: df:b6:87:eb:9e:c7:a0:44:d5:4f:9b:28:41:ab:11:dc:9a:55:af:a6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 31:67:8c:2e:52:f7:f1:50:d3:a0:e7:2e:af:d9:ee:d1:40:0d:2e:7c
Fingerprint (sha256): 08:6a:5c:d7:0d:78:d2:b8:ab:f7:ff:d7:2a:d4:bf:03:4d:d0:ee:8e:f1:4b:7e:e9:f0:44:59:d3:dd:b0:69:32

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.sportsground.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sportsground.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ardmoremarist.co.nz
www.aucklandservicerifle.org.nz
www.bowlssouthland.co.nz
www.bowlswestcoast.org.nz
www.brooklyncroquetclub.org
www.capitalfootball.org.nz
www.centralfootball.co.nz
www.centralfootball.org.nz
www.cmsport.co.nz
www.footballsouth.co.nz
www.greenhithefootball.org
www.hbcc.org.nz
www.hendersonsquash.co.nz
www.howicksailingclub.co.nz
www.hrc.org.nz
www.karakasportspark.co.nz
www.linfield.co.nz
www.maoribasketball.co.nz
www.marlborough-touch.co.nz
www.marlboroughfootball.co.nz
www.mountfortwaterpolo.nz
www.myfootball.co.nz
www.nelsonbaysfootball.co.nz
www.nelsonnetball.co.nz
www.newplymouthcroquetclub.co.nz
www.nhbmx.org.nz
www.nzsra.org.nz
www.oratiaunited.co.nz
www.osssa.org.nz
www.ravensbourne.co.nz
www.rosegardenscroquetclub.org.nz
www.royaloakracquets.co.nz
www.schoolground.co.nz
www.schoolground.nz
www.southlandbmxclub.co.nz
www.sportsground.co.nz
www.sportsground.com
www.sportsportal.co.nz
www.sportwaitakere.co.nz
www.sportwaitakere.nz
www.turbotouch.org.nz
www.ulyssesnelson.org.nz
www.upperhuttrifleclub.co.nz
www.waibopfootball.co.nz
www.waihekeunited.org.nz
www.waihibeachtennisclub.co.nz
www.waihoraclaytarget.co.nz
www.waitakererugby.co.nz
www.westernafc.com
www.whangaroasportfishingclub.co.nz
www.woolstonparkindoorbowls.org.nz

Other certificates including the domain name sportsground.com

(limited to 100 certificates)
www.nelsoncarclub.co.nz
www.blenheimgolfclub.co.nz
www.sportsground.com
sporty.co.nz
www.sportsground.com
support.sportsground.com
www.tabletennis.org.nz
sporty.co.nz
www.sportsground.com
support.sportsground.com
www.sportsground.com
support.sportsground.com
northcanterburyrugby.co.nz
support.sportsground.com
www.nztua.com
www.sportsground.com
www.schoolground.com
support.sportsground.com
support.sportsground.com
hastings-central.school.nz
ultrarunner.org.nz
www.sportsground.com
www.oacnz.org
www.sportsground.com
sporty.co.nz
aafl.co.nz
support.sportsground.com
sporty.co.nz
support.sportsground.com
sporty.co.nz
northharbourtag.co.nz
trenthamrifleclub.co.nz
www.sportsground.com
support.sportsground.com
support.sportsground.com
sporty.co.nz
aucklandmarist.co.nz
support.sportsground.com
www.wmsc.org.nz
support.sportsground.com
www.sportsground.com
support.sportsground.com
support.sportsground.com
lucknow.school.nz
www.badmintonhb.co.nz
pioneerbasketballclub.co.nz
www.melrosetargetshooting.co.nz
www.sportsground.com
www.sportsground.com
sporty.co.nz
basketballtaranaki.co.nz
sporty.co.nz
www.schoolground.com

Certificate

The complete raw certificate details for www.sportsground.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVJCkb2RxhoHaTAnVuCQ
Eo1mgJGgCVtNyKM/k3p+S/GzVajH7jfTTtKBwNK/IVbQLyfcrEXDR6AMkYnFOBdM
huKWVjpLYtv1FQGp5nICjYeKI+QijGoAKPmG+N1h3Y9/F65ilMqVXqrK6ZxkmiXz
1HFO2Xgnj0Z3OvfxwDNFfwW9OwNvhwCFxpSsu9I608lqgd5mvilfKPQsh66Cfykp
+l9AMRLv8Gsguay8abQdwe2iF2kZjxtGx4iqGugYZ83VHHPAknYKG+y5krg1D2f9
PzPDMBl4Dx4V1F3aoSjd4AHhEpFsRvB93fVvAeNz9X78RlLvUnbd4VYjQIIVdfi+
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373431794766600694585674998887256434447077
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 00:31:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-15 00:31:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sportsground.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24404556794199086693229336820123962940541433165210962650809601503534343432253439910585734573498415797955952557339552024909032966778244405284510959726854922529229518423958347082504429489252706778767931825977752752258342728680335626310085869229677007601450583762882925836855043752395607230837280758335455329495565459864704146424133494105741013335216704668680238227163899678854649430087092395450633622180678952638325507789943702873859615681614828423790647717702984441647066622210719725887797853719769375589029619358233932767280418509335954961951120440415753252029210692792223920771234685411768290609830345280766099373681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dfb687eb9ec7a044d54f9b2841ab11dc9a55afa6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1329 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ardmoremarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandservicerifle.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlssouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswestcoast.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooklyncroquetclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitalfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.footballsouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenhithefootball.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hendersonsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicksailingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hrc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakasportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linfield.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maoribasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlborough-touch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountfortwaterpolo.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonbaysfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newplymouthcroquetclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhbmx.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzsra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oratiaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osssa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ravensbourne.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosegardenscroquetclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaloakracquets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolground.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandbmxclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportwaitakere.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportwaitakere.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turbotouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ulyssesnelson.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upperhuttrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waibopfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihekeunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihibeachtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihoraclaytarget.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitakererugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westernafc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangaroasportfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woolstonparkindoorbowls.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f842d67880000040300483046022100fa80904daa653506b7f33069b4dd56ae68fb4dd0743f6ea50276ec5a13dad9b30221009eedc08af0b142a65940761e91a8a9dfe99ff9e7aba831df1752774850452a140077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f842d6786000004030048304602210098e4f05f80c2721524f8f780ec8154fc3cbcdd483b53ad72c727ce1252b03af8022100ce6557c61974c9f4765611aea1d086865f0aa3c30a5cf99f5fbbb4bb6fe8667f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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