www.montressors.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1a:34:da:7f:0a:bd:67:01:ac:cd:19:76:14:b3:15:b0:f6 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.montressors.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1a:34:da:7f:0a:bd:67:01:ac:cd:19:76:14:b3:15:b0:f6
Serial Number (int): 270254453688438034690763883095219796029686
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 59:91:7b:bc:ea:b5:c9:29:6e:06:fb:3b:97:85:eb:3b:6f:d4:9e:71
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3c:b9:0e:f5:a8:16:15:f7:db:30:21:b4:bb:bb:dd:8c:c0:f2:fd:48
Fingerprint (sha256): 0c:2e:eb:ea:ed:23:e9:49:00:4f:25:63:dc:85:55:b5:71:e5:f6:0a:5f:82:28:55:1b:de:2e:3e:0a:59:d4:bb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.montressors.co.nz

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.montressors.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aklbadminton.com
aurfc.co.nz
avalonrugby.co.nz
baysathletics.co.nz
brownsbaybowls.org.nz
cartertongolfclub.co.nz
centralcitybaseball.org.nz
eastcoastexpo.co.nz
flaxmillbaymotel.co.nz
gonville.school.nz
hastingsrugbyandsports.co.nz
hawkesbayfarmersmarket.co.nz
hawkesbayrugbyreferees.co.nz
hbbct.org.nz
hni.school.nz
maraetaitennis.co.nz
marsdensport.school.nz
masseyrfc.co.nz
montressors.co.nz
nzsssc.co.nz
nzsssc.org.nz
ojcc.org.nz
omusc.org.nz
pngolf.co.nz
purc.co.nz
southlandschoolsport.org.nz
sport.southlandschoolsport.org.nz
sporthb.co.nz
sporthbchb.co.nz
sporthbwairoa.co.nz
sportspark.co.nz
storans.school.nz
tairuaslsc.org.nz
waikatogolf.co.nz
waikatogolf.nz
wellingtonsoftball.org.nz
www.aklbadminton.com
www.aurfc.co.nz
www.avalonrugby.co.nz
www.baysathletics.co.nz
www.bophockey.co.nz
www.brownsbaybowls.org.nz
www.burwoodparktennisclub.kiwi
www.canterburywaterpolo.org.nz
www.cartertongolfclub.co.nz
www.centralcitybaseball.org.nz
www.eastcoastexpo.co.nz
www.flaxmillbaymotel.co.nz
www.gonville.school.nz
www.hastingsrugbyandsports.co.nz
www.hawkesbayfarmersmarket.co.nz
www.hawkesbayrugbyreferees.co.nz
www.hbbct.org.nz
www.hbmagpies.co.nz
www.hbrfu.co.nz
www.hbru.co.nz
www.hni.school.nz
www.magpies.co.nz
www.maraetaitennis.co.nz
www.marsdensport.school.nz
www.masseyrfc.co.nz
www.montressors.co.nz
www.northcanterburyrugby.co.nz
www.nzsssc.co.nz
www.nzsssc.org.nz
www.ojcc.org.nz
www.omusc.org.nz
www.pngolf.co.nz
www.purc.co.nz
www.rowandale.school.nz
www.scrfu.co.nz
www.southlandschoolsport.org.nz
www.sporthb.co.nz
www.sporthb.net.nz
www.sporthbchb.co.nz
www.sporthbwairoa.co.nz
www.sportspark.co.nz
www.sportspay.co.nz
www.storans.school.nz
www.tairuaslsc.org.nz
www.touchnz.co.nz
www.touchnz.nz
www.turbotouch.co.nz
www.waikatogolf.co.nz
www.waikatogolf.nz
www.waikatotouch.co.nz
www.wellingtonsoftball.org.nz

Other certificates including the domain name montressors.co.nz

(limited to 100 certificates)
www.montressors.co.nz
www.bophockey.co.nz
www.sporty.co.nz
masseyrfc.co.nz
kjcc.org.nz
www.sporty.co.nz
www.mysporty.co.nz
www.darfieldrugby.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.sporty.co.nz
www.sporty.co.nz
www.mysporty.co.nz
gonville.school.nz

Certificate

The complete raw certificate details for www.montressors.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi59N7KJMWFY2tHEeu29b
NRQJwMa7UsV7BXJZV55esgq5Dhqa933HjhsG0JUDGW5MM8x6fw2AowtMV5jtO82I
cTTHLZjPPeMsjqN+jmVBizIwDKdsI7bskmTmwwSFNximz93fTgHx3uVM/0GJ906i
kWbBBFb5puvRPKUjM//VmZqMYU2hpJJmXdEKbDlz1q+V+Sfhq7NkKMWE5ZVTc+uO
/S3Q3Gzu2ZD2qTtlCBRNYpHJBwB0h8dLLD1b1rdd2I7Sq5bY8aaCNKmOuC8PalSH
2zFkI2uOYkfOnKZNxCbihnrfjU9VuojppZpC9XrZYU8jBvSHBHA2J91xDuIQQmqV
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270254453688438034690763883095219796029686
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-10 20:48:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-08 20:48:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.montressors.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17625680313795700609013737193409861488310222562737511560853014627224541317429741524267771857693600701927749863570156733016824229728048473096522038585674585573311746441791881214699725936045494790391548212682116424561838979703282401981520246352726292152663711173520129552819856600442522765295330736146845658779042373164965858674141660724801645356991368155318337774628297214682553499939492295464808291927048539911243348514993492009021052454891406084489030042731083481892197291008319506407817421088852176556785450294882411840318008540570028568381316658252583655970168318510660843306309637052208460999423432038586235131271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59917bbceab5c9296e06fb3b9785eb3b6fd49e71
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1925 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aklbadminton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avalonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baysathletics.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brownsbaybowls.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartertongolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralcitybaseball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastcoastexpo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaxmillbaymotel.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gonville.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastingsrugbyandsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbayfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbayrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbbct.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hni.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maraetaitennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsdensport.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masseyrfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montressors.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsssc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsssc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ojcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omusc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pngolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandschoolsport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport.southlandschoolsport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporthb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporthbchb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporthbwairoa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storans.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tairuaslsc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikatogolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikatogolf.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aklbadminton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aurfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avalonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baysathletics.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bophockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brownsbaybowls.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burwoodparktennisclub.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburywaterpolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cartertongolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralcitybaseball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastcoastexpo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flaxmillbaymotel.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gonville.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastingsrugbyandsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbayfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbayrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbbct.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbmagpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbru.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hni.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maraetaitennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marsdensport.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masseyrfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montressors.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzsssc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzsssc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ojcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omusc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pngolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rowandale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandschoolsport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporthb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporthb.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporthbchb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporthbwairoa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportspay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.storans.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tairuaslsc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchnz.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turbotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikatogolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikatogolf.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikatotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonsoftball.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001665ff3cb2a000004030048304602210096adfa9845588d38563c7a38dd502c7e442d170d821af91795a0210ef5cf53ff022100f93bb6740a6dca8c9bb9e5337ad6d0360407ac649bf3cf2a824bd89cfcf053e3007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001665ff3cb3c00000403004630440220104b8ae429cca1c87e33adc2ef3ed529abcc7b52291637abcc57df28a34a421402207729db1de80d445ad8631d782dc72044eafd908af267dacca4daf76c81bff8af
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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