sporty.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:1f:c0:b5:23:5d:18:ea:22:ce:87:29:06:79:e3:e8:db:11 was issued on by Let's Encrypt.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:1f:c0:b5:23:5d:18:ea:22:ce:87:29:06:79:e3:e8:db:11
Serial Number (int): 272141763468012196893517385672163729136401
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d7:73:36:74:e8:2b:b1:ea:17:ca:34:ab:8d:86:0c:54:f3:51:26:3e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2a:3a:55:82:00:37:4e:08:2d:cd:83:0b:48:e1:7d:b1:19:6d:2d:0e
Fingerprint (sha256): 12:09:e7:4c:1c:39:c9:93:50:8f:c5:f2:17:79:00:64:ba:c9:04:5c:9e:ae:4e:f3:2b:ae:dc:96:29:a6:1e:b4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.co.nz

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

badmintonhb.co.nz
bowlswanganui.org.nz
boxingnz.org.nz
bushmultisport.org.nz
canamju.org
canterburybaseball.co.nz
clevedoncricketclub.co.nz
clevedonrifleclub.co.nz
ellesmererugby.org.nz
gisborneharriers.co.nz
glenburniceskatingclub.co.nz
grammartec.co.nz
hastingsintermediate.school.nz
lnissn.org.nz
manukaumasters.co.nz
manurewarugby.co.nz
marewa.school.nz
mariancollege.school.nz
maristfc.co.nz
maristnh.co.nz
mchockey.co.nz
midcanterburyrugby.co.nz
mtwswim.co.nz
ncnc.org.nz
nelsoncarclub.co.nz
netballkapiti.org.nz
netballtaranaki.org.nz
orfu.co.nz
papakurarugby.co.nz
primarysportwellington.org.nz
rollestonrugby.co.nz
smognetball.org.nz
southlandmtbclub.co.nz
southlandtriclub.co.nz
sporty.co.nz
stanthony.ac.nz
stjos.school.nz
suburbsrugby.co.nz
taierirugby.co.nz
taranakihockey.org.nz
technicalharriers.co.nz
timarusquashclub.co.nz
touchcanterbury.co.nz
trenthamrifleclub.co.nz
uniss.co.nz
valleyhockey.org.nz
volleyballbop.co.nz
wellingtontouch.org.nz
wmsc.org.nz

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
turbotouch.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
mtrbmx.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporthb.net.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
uat.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
www.sporty.co.nz

Certificate

The complete raw certificate details for sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUQYZOsOJ/0ZrcWRRL+a
zAQKETknHzIsBmXU7Fksfj9quv17J8aLH+a+5S4+J0PB9d/Bw14bzhrdx7mH2Fkx
tUPgYva5NHslkxhdMvvfNAV0V+z10H6JcszGGEem4xkJq+V5fzHG95phbzN1VlaI
G9FRV3bkCCTH+Z1gWEiGMEgd8bvrsDjCP+UfJIKegzNBKDQ6MyP6TqciW3cb3nCf
U+WZFJcSnRdIsspD/iHP3PCYmhEvHNc2wO80ZgD2JWw/8E7CFWlcMruv8Uiezlvc
BsU5FoaA/6Czs9Qvrx0xcVlSAXss1I84AplDKx8cqsMGHRNlhtzytSotrCfFGSL9
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272141763468012196893517385672163729136401
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-21 00:01:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-19 00:01:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19852992918623535084056197418868924905177751249173183405000977419314097046958804452461665527571924227577924894656794926730481332217225255811695956926456726211943135402860160856877651977148695802279117216827708752787608904052927216543445303099856834118692835779989498741289493868826718555069603397328097631227957821287515018185186055096692291246148557400272155201082020026972126589084903847450232654537560399662252866573783810208278311121214282479851880051851238527472247597268825918133440069913847829029108342963820775805160009090145359891623240252109483669890612596263712328875539437696365261989983693156612990762313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d7733674e82bb1ea17ca34ab8d860c54f351263e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1026 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badmintonhb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxingnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bushmultisport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canamju.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburybaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedonrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellesmererugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisborneharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenburniceskatingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grammartec.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastingsintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lnissn.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manukaumasters.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marewa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariancollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristnh.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mchockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtwswim.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsoncarclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballkapiti.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballtaranaki.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakurarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primarysportwellington.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rollestonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smognetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandmtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandtriclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanthony.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjos.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suburbsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taierirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taranakihockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technicalharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timarusquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trenthamrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniss.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valleyhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volleyballbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtontouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmsc.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f98ab4a1f000004030046304402202fa4292a2e5a50745d22eab1f4c0e785bf094af3875362539d85ca457ae8ace40220377ca7f804686beeb42a44c6b54d50ed31aa4106f4aa440a066e85740eeb3598007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f98ab4ae80000040300473045022100aad6269e917b9d5a069066d82e7771025616059c7af615cde9c4c031b043ce0a0220669887ceda62529b07f94b24789ca0471c69b2d1600c427d974ad88a7dea9584
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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