sportycrm.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9d:ca:ae:c8:c5:2c:fa:a8:89:e8:3d:12:7c:31:d7:7d:b1 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sportycrm.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9d:ca:ae:c8:c5:2c:fa:a8:89:e8:3d:12:7c:31:d7:7d:b1
Serial Number (int): 315030600988773805883388154954933096381873
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 00:df:6c:28:d0:c2:d1:7e:4f:16:9c:84:7e:a7:7d:e3:8a:6e:5a:29
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 71:7e:6d:53:12:69:a3:b8:1c:76:69:f3:f6:06:99:76:ca:1d:52:92
Fingerprint (sha256): 13:ac:b3:94:c9:33:51:24:7a:71:68:2f:d9:cc:77:36:a4:e1:df:a2:af:88:6f:ba:3f:19:13:87:e7:5f:23:ec

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sportycrm.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sportycrm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arrowtownrugby.co.nz
aucklandsoftball.org.nz
basketballhawkesbay.co.nz
bowlswaikato.co.nz
cashmere.school.nz
cfc.co.nz
christchurchfootballclub.co.nz
countiesmanukaurugbyleague.co.nz
cra.kiwi
cricketwellington.co.nz
cyclingsc.co.nz
eden.rugby
ellerslieeagles.co.nz
feildingfarmersmarket.co.nz
feildingfarmersmarket.net.nz
feildingfarmersmarket.org.nz
fenciblefoundation.co.nz
glenfieldrugbyleague.co.nz
golfnorthland.co.nz
greenacrescountry.org.nz
harbourgolf.co.nz
hastingsboys.school.nz
havelocknorth.rugby
hawkesbay.basketball
hawkesbaynetball.co.nz
hbnetball.co.nz
hbrugby.co.nz
healthyfamilieswaitakere.org.nz
hjac.org.nz
hockeymarlborough.org.nz
hokowhitubridge.org.nz
horouta.co.nz
hpnc.org.nz
huianetball.co.nz
ie19.co.nz
ie19.nz
karakarugbyclub.co.nz
kirweerugby.co.nz
kjcc.org.nz
manawatusoftball.co.nz
manawatusoftball.org.nz
maniapoto.school.nz
manukauaucklandvolleyball.co.nz
maoribasketball.com
marlboroughnetball.org.nz
marlboroughtrampingclub.co.nz
marsdensport.school.nz
membermanager.co.nz
metrofootball.org.nz
mff.nz
mitre10park.co.nz
mountsports.co.nz
nzblackpowder.nz
nzteachersgames.co.nz
otakisportsclub.co.nz
parklandsrugby.co.nz
patoka.school.nz
pioneerfishingclub.co.nz
pngolf.co.nz
polo.org.nz
ponsonbyrugby.co.nz
prebbleton.com
referees.co.nz
register4rugby.co.nz
schoolsport.nz
schoolsportnz.co.nz
schoolsportnz.org.nz
sctrials.co.nz
sked.co.nz
soulutionzsports.nz
southcanterbury.basketball
sportauckland.co.nz
sportauckland.nz
sportauckland.org.nz
sportsafe.co.nz
sporty.org.nz
sportycrm.co.nz
sportycrm.com
st-marys-wellington.school.nz
stmaryswellington.school.nz
stmw.school.nz
taradaleint.school.nz
volleysouth.org.nz
waihibeachtennisclub.co.nz
waimakunited.org.nz
wanakafootball.nz
wdta.org.nz
whangareibridgeclub.nz

Other certificates including the domain name sportycrm.com

(limited to 100 certificates)
www.sportycrm.com
www.giafc.co.nz
sportycrm.com
www.sportsground.com
fdmc.school.nz
arrowtownrugby.co.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
freyberg.ac.nz
sporty.org.nz
sporty.org.nz
www.ams.school.nz
www.skeggsfoundation.nz

Certificate

The complete raw certificate details for sportycrm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv/XQnPBlxVQX4qXrbNY
m2L92b0xafoK41M9pJSjU/0ZgUIl1wO38r82hUx5wVfzKyxjQ6qE+okV0bgNQxv8
yvEQzzNp+oO9Iz4SIkGUJcRIKsHpolpct2Bcfht66zfWUu9sYBrBUfmhB0+8Hv0a
3m/XOxLj4+Omxgut84dw9t6ysJ3f+jYTjr/Ard8I5cmjCc0nTRQ9P+0Prja8SrQC
w2k2uS9syZkV0pFneRAW/bBWy9YWnHypA7F+JCT+XHhheaPp4Qod7jB3eVm9/O3z
vE3Im1SYaxPJgqyVM1f3AwEuhrmTX/lFWzmEg2WHR7ylo8khCzB3/N/Zk02u/lwj
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315030600988773805883388154954933096381873
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-19 18:11:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-17 18:11:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sportycrm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17042092694439582404887226614994945628533994916738489136369962726463853259015300662632266211154348984680307663117904887919336635549107863290231019627149301157260413282404622429582254301618236478817364386033029800705389130790444467185547137203268117961355539737430236259869063338316009002423432097989102861043778975064923453107780560942592727606628940837570144301930581713449792627024295817587785474357828151364121368845636757872393240237746100887778124951172122521375426513287225120110924892048781691253405498065961596535534408204672899474262695348692199363701914564000705757738279720508797607169361389307663843336983
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							00df6c28d0c2d17e4f169c847ea77de38a6e5a29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1845 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arrowtownrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketballhawkesbay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswaikato.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashmere.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchfootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countiesmanukaurugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cra.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cricketwellington.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyclingsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eden.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellerslieeagles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fenciblefoundation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenfieldrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfnorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenacrescountry.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harbourgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastingsboys.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelocknorth.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbay.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbaynetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyfamilieswaitakere.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hjac.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeymarlborough.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hokowhitubridge.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horouta.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huianetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie19.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie19.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakarugbyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirweerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manawatusoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manawatusoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maniapoto.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manukauaucklandvolleyball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maoribasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughtrampingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsdensport.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membermanager.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrofootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mff.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitre10park.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzblackpowder.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzteachersgames.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otakisportsclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parklandsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patoka.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneerfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pngolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponsonbyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbleton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'referees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register4rugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsport.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sctrials.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sked.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soulutionzsports.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southcanterbury.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsafe.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportycrm.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportycrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-marys-wellington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryswellington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmw.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taradaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volleysouth.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihibeachtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waimakunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanakafootball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdta.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareibridgeclub.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e8513890d000004030047304502203bbad30a9819114ec8fb06a9b2df26b94f067ba30974f4eff1b1f39b3e2279da022100c984490812ef1c66d9c5895ce1a6a4cbfbf0b97bb38530e90052170f9894a896007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e851389020000040300483046022100eae24bcd6b69196740c2ccc647fa922ff4b6172a2770a2c0c5acb814b4e2014a022100d02a735299c59bcb05de49e455c3765ab601ea65d71cdd0478e7fb66039b7c0f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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