belmontparkbowlingclub.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:08:a8:da:e1:c3:29:03:96:51:85:c6:7c:4d:41:4a:c4:c3 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=belmontparkbowlingclub.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:08:a8:da:e1:c3:29:03:96:51:85:c6:7c:4d:41:4a:c4:c3
Serial Number (int): 264283563533659619840595878041097788376259
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 54:0c:f1:dd:1e:0b:88:b0:19:1a:97:be:6f:d6:6c:b8:fb:93:03:9d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 18:eb:63:89:bb:f4:11:3e:4e:01:8d:ed:49:01:3e:ac:66:d6:76:e0
Fingerprint (sha256): 11:18:f7:5c:09:b8:d1:e9:32:8d:f1:2c:d9:24:74:0a:87:a1:e5:5a:f6:a6:fd:cb:41:46:88:68:16:61:89:7b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate belmontparkbowlingclub.co.nz

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for belmontparkbowlingclub.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aucklandleague.co.nz
avalonrugby.co.nz
badminton.org.nz
bayofislandsdressagegroup.co.nz
belfastnetball.co.nz
belmontparkbowlingclub.co.nz
blokarthb.co.nz
bluerovers.co.nz
bophockey.co.nz
bowlsbop.co.nz
bowlsstadium.nz
brownsbaybowls.org.nz
burnsiderugby.co.nz
canterburycountrycricket.co.nz
canterburyunited.co.nz
capitalbaseball.co.nz
cathcollege.school.nz
chchfootballsquash.co.nz
christchurchmetrocricket.co.nz
christchurchmetrocricket.com
christchurchmetrocricket.org.nz
clubsnzdarts.co.nz
darfieldcricket.co.nz
darfieldrugby.co.nz
dunedinnetball.co.nz
eastcoastexpo.co.nz
frasertechcricket.nz
havelockski.org.nz
hawkesbayfarmersmarket.co.nz
hawkesbaysquash.co.nz
hbbct.org.nz
hbbusinesshub.co.nz
hbbusinesshub.nz
hnhs.school.nz
hni.school.nz
hnwafc.org.nz
hockeywairarapa.org.nz
hsobburnside.co.nz
kapitigymsports.co.nz
kapitisoftball.co.nz
kaumatuatc.org.nz
kerikerimtbclub.co.nz
lincolnbowlingclub.co.nz
maristalbion.co.nz
marlinsnetball.co.nz
mcobsquash.co.nz
mooloo.co.nz
mooloocommunityrugby.co.nz
moonshinetrail.co.nz
mpcricket.org.nz
netballwaitakere.co.nz
northgolf.nz
northharbourwaterpolo.co.nz
otta.org.nz
otumoetaifootball.co.nz
papakuranetball.nz
pauanuilifeguards.org.nz
playsoftball.co.nz
prebbletonfootball.co.nz
primarysportscanterbury.org.nz
pukekohesoftball.co.nz
purc.co.nz
rowandale.school.nz
royaloakbowls.co.nz
rugby-foundation.org.nz
rugbyfoundation.co.nz
rugbyfoundation.com
rugbyfoundation.nz
sailhbc.org.nz
sharkssports.co.nz
silverdalerugby.co.nz
sporthb.co.nz
sporthb.net.nz
sporthbchb.co.nz
sporthbwairoa.co.nz
squashauckland.org.nz
storans.school.nz
sumnerbowls.co.nz
takapunarugby.co.nz
taupohockey.co.nz
ths.school.nz
touchnz.co.nz
touchnz.nz
trfu.co.nz
wahinetoamcc.nz
westshore.school.nz
whangareinetball.co.nz
worldpowerlifting.nz
wsra.nz
zephyr.org.nz

Other certificates including the domain name belmontparkbowlingclub.co.nz

(limited to 100 certificates)
belmontparkbowlingclub.co.nz
sporty.co.nz
belmontparkbowlingclub.co.nz
www.taranakihockey.org.nz
www.canterburybaseball.co.nz
www.opotikicol.school.nz
sporty.co.nz
www.ophc.co.nz
sporty.co.nz
www.rollestonrugby.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
belmontparkbowlingclub.co.nz
sporty.co.nz
www.badmintonhb.co.nz
www.westcoastsoftball.co.nz
www.mttauharagymnastics.co.nz
yes.stockx.co.nz
sporty.co.nz
www.schoolground.com

Certificate

The complete raw certificate details for belmontparkbowlingclub.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVcZMMz70Cb35FKBM0vn
W7EjWoUAfwqXDM2RtOU2B3HgndBAlnPoZ320435DSuUYGC2FXLaq2qwEqzoyRUYo
EQYsq6BkOCmNzcXdnZmdDAXs9M4WE63psmgCD3+5RMGYwJf5eK8cqd/LSMxgJOIf
v9VJWng8zYv6psL0/rzjty1jo4dDYdSpq1NjLhbJ7cO72GeW0syEZ7pl9FxqihCg
MkmTC/2XnvOPcXEEFgfrSYFAtNUhCtKwQ7e/Yuru0glWbNoPRnf+wMpn4Dod8vgs
C5oa2YG961DvSy/rJLrUDQ1A0y0TBt6lzplbodJkE1zF9q5j2L88K5bR3tdDpkez
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264283563533659619840595878041097788376259
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-28 18:13:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-27 18:13:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'belmontparkbowlingclub.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22892083021097193487072173945950425139755694747036909000327272569962026615425005467609650948032841663906095689524018954720738798110808882397567483016108462790113007330310779301878484546415843310735634266988703654088809093084998939874589336498536754323745103048887898725086512220833965649733931870073052747498670258966944912128870018785846344038386355912295012140429117256596377368921136397254306233650059580594264246829384385766719843349848241508794365593765927967351902025962976429000618973289693797634536878660185210043597739021603680876138816530647519129187311444922049181019781634183625150176236235802525508809723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							540cf1dd1e0b88b0191a97be6fd66cb8fb93039d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1888 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avalonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badminton.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayofislandsdressagegroup.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belfastnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belmontparkbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blokarthb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluerovers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bophockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlsbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlsstadium.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brownsbaybowls.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burnsiderugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburycountrycricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburyunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathcollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chchfootballsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchmetrocricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchmetrocricket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchmetrocricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubsnzdarts.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darfieldcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darfieldrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunedinnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastcoastexpo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frasertechcricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelockski.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbayfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbaysquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbbct.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbbusinesshub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbbusinesshub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hnhs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hni.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hnwafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeywairarapa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsobburnside.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapitigymsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapitisoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaumatuatc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kerikerimtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolnbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristalbion.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlinsnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcobsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mooloo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mooloocommunityrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moonshinetrail.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpcricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballwaitakere.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northgolf.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northharbourwaterpolo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otta.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otumoetaifootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakuranetball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pauanuilifeguards.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playsoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primarysportscanterbury.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pukekohesoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rowandale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaloakbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugby-foundation.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbyfoundation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbyfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbyfoundation.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sailhbc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharkssports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverdalerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporthb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporthb.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporthbchb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporthbwairoa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squashauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storans.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumnerbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takapunarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taupohockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ths.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchnz.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wahinetoamcc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westshore.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareinetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldpowerlifting.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsra.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zephyr.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fed92842800000403004730450220658f06f0502b2cf78bf5a00e89b15fa96e5834934cfb72bb1336599db0c7759f0221009b51b9a30cef5bb018c8558aac3e7b061dfdb19cc1c049b5042ebfe5a07b4c51007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fed92841d00000403004830460221008f128845b1f2e407b760aa705bc99b436e193bddf9fa3cf409612bc94fafc1b80221009ee555a144145045d0da7e9d3442449fcac5413d746ad4292f442be7738e310f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007baa8e287ad7433812ffda0f8fcb63517fe52e26f352c1a35d593bb3c104cd54b8cac5a193f858db11e2faa269c5476f89e7c738d74641c0f88a4610e8cf28047f4457a203f594dccd1ee38c09ac2adfa83873d55de83d258339e4fceca680cca5a9522cdaafea1806f29dc6c404b5d243295c0911333b1f3550a0179d66542907145ec5786dca686167a2a54de52645081a9971f26921935cf9e828f1cda8d6ef289974e8b7cc4d3e0b2e33e857842dd0f860068aabcdc9acd1c191d03e5f8963ef1cb78bb65a80e3d4bb6adf980e91ad2369f831f6426b39f80522a23a351a186a95c0f302077075554556a57536f918a01076516bcf7051234d85dcbdc43c