www.diamondsportsnz.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:46:d7:e7:55:51:be:52:55:26:bc:2e:ff:d8:9a:d1:5e:8e was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.diamondsportsnz.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:46:d7:e7:55:51:be:52:55:26:bc:2e:ff:d8:9a:d1:5e:8e
Serial Number (int): 285443608649895710000110778809232179420814
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0e:94:1a:cb:b0:e0:d6:42:0d:36:c6:9a:3f:23:78:04:cd:85:49:68
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 88:c2:9a:8d:8d:40:4b:58:3b:d4:c4:59:ca:ff:45:6f:e8:39:1f:f8
Fingerprint (sha256): 12:e3:a8:a4:99:4c:35:74:da:3b:46:b7:a4:27:99:81:3e:8f:d3:5c:e0:b6:84:63:ff:b3:19:a7:7d:91:d0:9b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.diamondsportsnz.co.nz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.diamondsportsnz.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ashleyrugby.co.nz
www.athleticswanganui.co.nz
www.avondaleint.school.nz
www.baseballnewzealand.co.nz
www.baseballnewzealand.com
www.baseballnewzealand.org
www.baseballnz.com
www.bowlsdunedin.co.nz
www.bowlstaurangasouth.co.nz
www.boxingnz.org.nz
www.cambridgenetball.org.nz
www.canterburybaseball.co.nz
www.canterburycommunityrugby.co.nz
www.canterburyrugby.co.nz
www.countiesbadminton.co.nz
www.crfu.co.nz
www.dairyflattennis.co.nz
www.diamondblacks.co.nz
www.diamondblacks.com
www.diamondblacks.org.nz
www.diamondsport.co.nz
www.diamondsportnz.co.nz
www.diamondsportnz.com
www.diamondsports.co.nz
www.diamondsportsnz.co.nz
www.diamondsportsnz.com
www.distanceridingnewzealand.co.nz
www.ellesmererugby.org.nz
www.ghryc.co.nz
www.hastingsintermediate.school.nz
www.hcwaterpolo.co.nz
www.hpbaseball.co.nz
www.hphawks.co.nz
www.hphawks.com
www.karakarugbyclub.co.nz
www.kereru.school.nz
www.lnissn.org.nz
www.lynnavon.org.nz
www.mahedrysdale.co.nz
www.mahedrysdale.com
www.manukaumasters.co.nz
www.manurewarugby.co.nz
www.maorirugby.co.nz
www.marewa.school.nz
www.maristnh.co.nz
www.meeanee.school.nz
www.midcanterburyrugby.co.nz
www.mttauharagymnastics.co.nz
www.myhockey.co.nz
www.mysoftball.co.nz
www.netballkapiti.org.nz
www.netballmanurewa.org.nz
www.netballtaranaki.org.nz
www.nscbaseball.co.nz
www.ophc.co.nz
www.opotikicol.school.nz
www.orfu.co.nz
www.orokohangamusictrust.co.nz
www.papakurarugby.co.nz
www.photosnap.co.nz
www.pickleball.org.nz
www.poolburn.school.nz
www.ppnc.co.nz
www.rangi.school.nz
www.rollestonrugby.co.nz
www.rosmini.school.nz
www.runwalkseries.co.nz
www.saintjosmatata.school.nz
www.smognetball.org.nz
www.softballauckland.org.nz
www.southbridgerugby.com
www.southernrugby.co.nz
www.southlandfestivalofrunning.co.nz
www.southlandmtbclub.co.nz
www.southlandtriclub.co.nz
www.stanthony.ac.nz
www.taniwha.co.nz
www.taranakihockey.org.nz
www.tennismanawatu.org.nz
www.touchcanterbury.co.nz
www.touchsouthland.co.nz
www.uniss.co.nz
www.wellingtonbaseball.co.nz
www.wellingtonbaseballassociation.co.nz
www.westaucklandafc.co.nz
www.westcoastsoftball.co.nz
www.whangamatasurf.co.nz
www.whangareirowingclub.org.nz
www.willowpark.school.nz

Other certificates including the domain name diamondsportsnz.co.nz

(limited to 100 certificates)
www.sportsground.com
www.diamondsportsnz.co.nz
bowlsdunedin.co.nz
www.bowlswestcoast.org.nz
sporty.co.nz
www.turbotouch.org.nz
keirunga.org.nz
karakasportspark.co.nz
www.manurewamets.co.nz
www.waitakerecityfc.org.nz
whangareirowingclub.org.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sportsground.co.nz
sportsground.co.nz
sporty.co.nz
manurewamets.co.nz
sporty.co.nz
www.schoolground.nz
www.waihibeachtennisclub.co.nz
whangareirowingclub.org.nz
sporty.co.nz
sporty.co.nz
www.diamondsportnz.co.nz
sporty.co.nz
keirunga.org.nz
www.greenhithefootball.org
sportsground.co.nz
www.bowlswestcoast.org.nz

Certificate

The complete raw certificate details for www.diamondsportsnz.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjQ++PWb+Cxl51H7RoSU
91acWCV3Crn471BxxHGHrhjMVLm+leGHSMDM7U9Zk+0qE2nPm3HvfoSl/fBD+jJK
Wnxn9aJE5MPJ3WSUc7gcXsOyhDYWofzCSJYuRhkrybYW5IS+3Fy6Xn55RJ/AxAr4
fVm4cz0iuMYyJPadPO92LcFx5HHG/QXGjRf+/IvvQIkRC+L4fds+jgbMPXnC2RsX
MC7/B1o+kzvyVKTRO+8TnkYckFnNFMwIJbYDomtMAEJPHDp/e0JuPmDrWDj35Jjp
9C5a0EmoMKVZzXeRUxCOqHyuOBnWpKo3R57QFfzuIVEwihfSqmwV+k7Lors7Or7Q
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285443608649895710000110778809232179420814
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-29 09:54:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-27 09:54:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.diamondsportsnz.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19466462420844153272057615810018940560162711819783830018665419463505621624434606374882775524036955215895555673734843267128116796398590694082175779117241589368068510256276951594869205689533484610356747468697078959076779779875711882118133798736801276894609061155785578487494193183494056340330276618496730587859884776092859132302329849182547616001304459988813186353216610041842268422838501810136507633195851134172564369257482606775955180283360213773079156905642535081898698607006560399110361323017264505436912696350149033126366535942132337905634711296119608435938099597004643827855788525588700719062049926719723521626351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0e941acbb0e0d6420d36c69a3f237804cd854968
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2258 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashleyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athleticswanganui.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avondaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnewzealand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnewzealand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsdunedin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlstaurangasouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boxingnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambridgenetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburybaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburycommunityrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countiesbadminton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dairyflattennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondblacks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondblacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondblacks.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportsnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportsnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.distanceridingnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ellesmererugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghryc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastingsintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcwaterpolo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hphawks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hphawks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakarugbyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kereru.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lnissn.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lynnavon.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahedrysdale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahedrysdale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manukaumasters.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manurewarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maorirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marewa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristnh.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meeanee.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mttauharagymnastics.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myhockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballkapiti.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballmanurewa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballtaranaki.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nscbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ophc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opotikicol.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orokohangamusictrust.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakurarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photosnap.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pickleball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poolburn.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ppnc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rollestonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runwalkseries.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintjosmatata.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smognetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softballauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southbridgerugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southernrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandfestivalofrunning.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandmtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandtriclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanthony.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taniwha.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taranakihockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tennismanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uniss.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonbaseballassociation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westaucklandafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westcoastsoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangamatasurf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareirowingclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.willowpark.school.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c3d5e44b00000040300483046022100d97532a350efdbba3061cbea70c7d51e0682c5f6eac38dfd985dacff25a52708022100c63f37aac1a101836e88745fe8a54f46e34acb9046a24f15f112aecd8cef3347007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c3d5e44d10000040300473045022100cde8f51942c4e3cf03e4c0ab55bf7dad8a1becd0bcc0e12ead311130ddf7562e02206604ac38c559f96f80aa30e5a825673258f4301677bda30bba41d89956092680
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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