sporty.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:80:f0:8d:40:26:dd:ef:e7:3f:39:a8:dc:05:67:20:ee:05 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:80:f0:8d:40:26:dd:ef:e7:3f:39:a8:dc:05:67:20:ee:05
Serial Number (int): 305212748895159867505099499103157462560261
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4e:d1:02:4a:0b:30:7f:f5:cb:e7:f8:fe:34:53:23:80:0a:3d:f6:ff
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6b:0a:e4:68:7b:80:b8:74:12:82:3d:68:b2:9e:90:aa:5f:fe:ca:6e
Fingerprint (sha256): 15:b1:87:21:14:37:58:25:f2:70:0e:25:74:7b:31:13:b5:02:a6:63:ad:3d:cd:a0:b9:06:85:73:5b:d2:4b:6e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.co.nz

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arataki.school.nz
aucklandnetball.co.nz
beachlandsspeedway.co.nz
boprugby.co.nz
brucepulmanpark.com
cityrovers.co.nz
clevedongamefishingclub.co.nz
cliftonmarineclub.co.nz
csfc.co.nz
dunedintriclub.co.nz
frimley.school.nz
gateballnz.co.nz
glenedenunited.co.nz
glenfieldsoftballclub.co.nz
hibiscuscoast.basketball
huntlyinternationalspeedway.co.nz
iona.school.nz
kaiparabasketball.com
karatenz.co.nz
kartsportrotorua.nz
mknetball.co.nz
motuekanetball.co.nz
myrugby.co.nz
netballhuttvalley.co.nz
netballwellington.co.nz
nghs.school.nz
northcanterbury.basketball
northernunitedfootball.co.nz
northernunitedsports.co.nz
ohopefootball.org.nz
oldboys.co.nz
onemanaslsc.org.nz
otagocricket.co.nz
otagocricket.nz
otagosoftball.com
otagotouch.co.nz
papnorth.school.nz
poriruaindoorsports.co.nz
prebbletonvillagesquare.co.nz
rockynookbowls.nz
rotoruaspeedway.co.nz
runtimaru.co.nz
sportschaplaincy.co.nz
sporty.co.nz
squashwaikato.co.nz
tairuarsc.co.nz
teatatusoccer.org.nz
tetauihubaseball.nz
thelongroom.co.nz
workingequitationkaikoheboi.co.nz
wtrugby.com

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
turbotouch.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
mtrbmx.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporthb.net.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
uat.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
www.sporty.co.nz

Certificate

The complete raw certificate details for sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdLF8bNhKNjPRzcSz8MB
Oau3ylIm5drDMBT+vrnuNkwb2lgTU1gjGklsaIMD929iMZWAW7vS7JkwooFin0Na
YeZ8i3eA+16A2Ju98gdLjCaNkBI/+VawaSzJuMeEhH3g6WCNPzSyFxvldgJR/yak
9ewrGLpRmxzdATpcKBCh4hhg9cdFWHKA+weahI12xr9syIUTdFp08S0CsQQsXxOf
DZ+aZ9Q4EV/KvHWIhelKvoFc+SlMEOQ7SK1ydiuqJda/3h0ojQJ/CCqCixP5lQ06
s3p84bAljn+bmTSPwQy7oeL2Av5rAuvttDHYCHy7yhSsd/xvptPlkvRQ0+4yE0eO
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305212748895159867505099499103157462560261
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-14 19:49:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-12 19:49:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22953069347051672768742892086142586830540839667346520278449326926275853448653208532152745639337086129234911598498455826747239247435686970348216140249978280921096380127705295685643382184667155782957383747046995656521802502346524337356791884395197625504124047887111374034278625753053691265040190150580355562853399933818003514576341907101937352827031327002831586197588309845798312926735170737656094582864540577142048551913700365588544077263880028884080960184889744872787281818677710805768016098560921748773936065108649390358971462882187254945439575134163068063077879734771534174498792021498930049478368631732903931776729
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ed1024a0b307ff5cbe7f8fe345323800a3df6ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arataki.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachlandsspeedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boprugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brucepulmanpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityrovers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedongamefishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliftonmarineclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunedintriclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frimley.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateballnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenedenunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenfieldsoftballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hibiscuscoast.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntlyinternationalspeedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iona.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaiparabasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karatenz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartsportrotorua.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mknetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motuekanetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballhuttvalley.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballwellington.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nghs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcanterbury.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernunitedfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernunitedsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohopefootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldboys.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onemanaslsc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otagocricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otagocricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otagosoftball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otagotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papnorth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poriruaindoorsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonvillagesquare.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockynookbowls.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotoruaspeedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runtimaru.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportschaplaincy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squashwaikato.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tairuarsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teatatusoccer.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tetauihubaseball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelongroom.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workingequitationkaikoheboi.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wtrugby.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (239 bytes)
							00ed0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e3eba591100000403004630440220555f89c5d49f63142c456a5ca83dddbb61b71773fcc2c69bab282df50d86711302207382678536daa98abd0a1cda4971d4311b4437470d789119860e75031f912b46007400a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e3eba59150000040300453043021f6a81ca2a85c6b7399c2cb4c250d1d70353ca892c987ab82ea07207032487f8022016ff4a7281300c7c2a4207a73eca30ec6a40f335ecda7f117d65e9e706f68473
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a62e01fe211010da26b2b69e6ac751c0a715d11a9a4ea20511a81b4325fed5e9da3879b58d5bc6a07366aa95b4a70eede6fd403ca363db709d68745a65cc232e4d3d1719fb98da751d1a42b3a4858319272618b16f46a34c66943b78d56b81f43ed337327ad340a3a27d6f52fb3a9c7f783078b43fcd5e47ba0eb72872fd841b83b8f20dc7bfb530ed5c0b7208aac82246b1d79c0672aa6eaf3543fc832ffa309d3cb8cb809eed1c586b0cf56eca9ec020e020aa5184eb620d92993508e76ac871041fda5ea9141c5aa49ef6ab21911976149719ae8509f00a76766967dea53a90a510712e8ea9088839af3ced4e36bfa7d080d5872887e32e315441d7ce2958