supersixes.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:32:59:49:1f:23:2a:0f:57:db:50:9f:35:18:c6:1a:87:25 was issued on by Let's Encrypt.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=supersixes.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:32:59:49:1f:23:2a:0f:57:db:50:9f:35:18:c6:1a:87:25
Serial Number (int): 278469657102163893988538106486472645969701
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 19:ee:99:09:3a:29:4e:9a:1a:d7:f1:f7:fc:a2:84:86:ab:53:50:5b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4d:b8:e1:a8:07:6e:75:52:00:3e:96:1b:77:a1:85:44:ec:c3:84:85
Fingerprint (sha256): 0f:5a:eb:8f:72:96:67:58:3f:2f:af:4e:7d:c0:ef:2e:17:9f:52:bc:6e:1c:4b:85:2b:96:2c:25:db:eb:9a:9a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate supersixes.co.nz

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for supersixes.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akaranacityrifleclub.co.nz
aurfc.co.nz
belfastrugby.co.nz
canterburywaterpolo.org.nz
cdcricket.co.nz
centralcitybaseball.org.nz
cliftoncricket.nz
cliftoncricketclub.co.nz
collegesportsportal.co.nz
crossrecreationcentre.co.nz
edenrugby.co.nz
fastpitch.co.nz
flaxmillbaymotel.co.nz
goodmanrural.co.nz
greenislandbadmintonclub.net.nz
greertonmaristnz.org.nz
hampsteadclub.co.nz
harbourcityhockey.org.nz
harboursidenetball.co.nz
harboursidenetball.nz
havelocknorthbridgeclub.co.nz
hawkesbayrugbyreferees.co.nz
hawkfootball.org.nz
hbcricket.co.nz
hbmagpies.co.nz
hbreds.nz
hbrfu.co.nz
hbru.co.nz
healthyfamiliesinvercargill.org.nz
highlightcam.co.nz
hillseekers.co.nz
hillseekers4wd.co.nz
huttaikido.org.nz
invercargillnetball.co.nz
magpies.co.nz
maristrugby.org.nz
merivalepap.co.nz
mesoball.co.nz
mgcarclubcanterbury.nz
mtsquashclub.co.nz
nelsonnetball.co.nz
netballsouthcanterbury.co.nz
northshorerugby.co.nz
nzsssc.co.nz
nzsssc.org.nz
nzteachersgames.co.nz
ojcc.org.nz
papakurarugbyleague.co.nz
papatoetoenorth.school.nz
photocard.co.nz
playsoftball.org.nz
rangatiragolf.co.nz
redcliffsbowls.co.nz
southbridgerugby.com
southlandschoolsport.org.nz
sportslink.org.nz
sportspark.co.nz
sportspay.co.nz
sportsportal.co.nz
sportyapp.co.nz
sportynews.co.nz
supersixes.co.nz
tasmanvolley.org.nz
taurangafarmersmarket.co.nz
totaltouch.org.nz
tuki.co.nz
turbotouch.co.nz
turbotouch.org.nz
waikatogolf.co.nz
waikatogolf.nz
waterpolo.org.nz
wellingtonsoftball.org.nz
westcoastsoftball.co.nz

Other certificates including the domain name supersixes.co.nz

(limited to 100 certificates)
www.hblp.co.nz
supersixes.co.nz
eden.rugby
www.hbcricket.co.nz
sporty.org.nz
www.sportslink.org.nz
hbnetball.co.nz
ctfc.co.nz
www.hbcricket.co.nz
www.bowlsnapier.co.nz
www.lincolnbowlingclub.co.nz
sporty.org.nz
starling.org.nz
www.hbcricket.co.nz
bowlsnapier.co.nz
eden.rugby
sked.co.nz
golfnorthland.co.nz
bowlsnapier.co.nz
cfc.co.nz

Certificate

The complete raw certificate details for supersixes.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve7buKHe9/ttoy+uyQJ+
quMV2fd1ynfDWBZl8ArNfoDYC1gKgzleFh6isPavDNTEsb5jeJ4QVLkLuwwry89K
Pf/wP9Fs2pNnMRwNjOLnpq4NQYJdvFNeldKTOUd0V9oHV3JPhNlHS+m8Nr7eDLjB
oR6DpqoNJY/Mddf50pLK8wAq43b+kThB5uPrjfHDmOXldmsqv6gYcejNojNGc0Ft
6q5J8xwkcxUFbJ+1dcX9fRkSVVTOZhdm+q9+C5eSe/BBVSZNELKrU/Josek+13pp
izS5lqTHSgiXa7++ek26UspuT0NdtHX7BKfgk39ckvr8maMpgbt/gVHcSH+kDj5u
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278469657102163893988538106486472645969701
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-29 05:28:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-27 05:28:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'supersixes.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23976825049341674678439489320421194310186170794155381944560590019701866578062316742284269288366084556388897430025761777827571963376620472260129792635784023343653981145214351890789247836806703825010642863270467368002119775747075171261876558967101332990862588799076041974443518044305676810988358037381211720234744099574909720405698713299979401466546216789548163403338263958875306754714754046848263658564500453592742811185579091246166820817593161735599121654594007126289424944974541468876639376256412825432128444051736944148432269283988995524648596196567223211495570519034603997912444833379338377694206924356361767513617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							19ee99093a294e9a1ad7f1f7fca28486ab53505b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1555 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akaranacityrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belfastrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburywaterpolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralcitybaseball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliftoncricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliftoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegesportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossrecreationcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edenrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastpitch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaxmillbaymotel.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodmanrural.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenislandbadmintonclub.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greertonmaristnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hampsteadclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harbourcityhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harboursidenetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harboursidenetball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelocknorthbridgeclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbayrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbmagpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbreds.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbru.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyfamiliesinvercargill.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlightcam.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillseekers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillseekers4wd.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huttaikido.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invercargillnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristrugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merivalepap.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesoball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgcarclubcanterbury.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballsouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northshorerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsssc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsssc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzteachersgames.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ojcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakurarugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papatoetoenorth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photocard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangatiragolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redcliffsbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southbridgerugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandschoolsport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportslink.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportspay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportyapp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportynews.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supersixes.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasmanvolley.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taurangafarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totaltouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikatogolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikatogolf.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterpolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westcoastsoftball.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001675e27c7f40000040300473045022068e107fad56971a0459284d4c15b6aac0c673506162b6e2bf7fa3f797b1ca9d5022100a2bb8454886e44bc77d8b3e678de449618d2d53a3cba31005a3faeb3d153e391007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001675e27c7f90000040300473045022100ff9038c6cb5fc5a4267cef39e24e996a9d831460bf69c4cdc5396d7c18a097bb0220341e26bf75cb4a49b7c71f9ba558c65cfe3cf8c6151597b91885fa93b64b5696
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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