belmontparkbowlingclub.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:06:fc:73:5a:84:22:c5:2b:84:db:6f:1a:fa:9f:75:3f:74 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=belmontparkbowlingclub.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:06:fc:73:5a:84:22:c5:2b:84:db:6f:1a:fa:9f:75:3f:74
Serial Number (int): 263714116401768643660567147937946425180020
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 11:38:8a:f4:08:9b:ec:4e:07:0d:d6:fd:4e:0f:70:c1:93:e7:7a:82
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 26:96:4b:a8:1f:a3:4c:a4:9b:81:d9:57:69:68:16:a1:e0:b1:8d:33
Fingerprint (sha256): 18:0e:4b:a4:da:df:84:ea:25:a8:a0:1b:ee:72:f8:30:48:35:81:93:4e:89:cc:f8:b1:97:58:a2:10:02:88:2c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate belmontparkbowlingclub.co.nz

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for belmontparkbowlingclub.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aucklandleague.co.nz
avalonrugby.co.nz
badminton.org.nz
bayofislandsdressagegroup.co.nz
belfastnetball.co.nz
belmontparkbowlingclub.co.nz
blokarthb.co.nz
bluerovers.co.nz
bophockey.co.nz
bowlsbop.co.nz
bowlsstadium.nz
brownsbaybowls.org.nz
burnsiderugby.co.nz
canterburycountrycricket.co.nz
canterburyunited.co.nz
capitalbaseball.co.nz
cathcollege.school.nz
chchfootballsquash.co.nz
christchurchmetrocricket.co.nz
christchurchmetrocricket.com
christchurchmetrocricket.org.nz
clubsnzdarts.co.nz
darfieldcricket.co.nz
darfieldrugby.co.nz
dunedinnetball.co.nz
eastcoastexpo.co.nz
frasertechcricket.nz
havelockski.org.nz
hawkesbayfarmersmarket.co.nz
hawkesbaysquash.co.nz
hbbct.org.nz
hbbusinesshub.co.nz
hbbusinesshub.nz
hnhs.school.nz
hni.school.nz
hnwafc.org.nz
hockeywairarapa.org.nz
hsobburnside.co.nz
kapitigymsports.co.nz
kapitisoftball.co.nz
kaumatuatc.org.nz
kerikerimtbclub.co.nz
lincolnbowlingclub.co.nz
maristalbion.co.nz
marlinsnetball.co.nz
mcobsquash.co.nz
mooloo.co.nz
mooloocommunityrugby.co.nz
moonshinetrail.co.nz
mpcricket.org.nz
netballwaitakere.co.nz
northgolf.nz
northharbourwaterpolo.co.nz
otta.org.nz
otumoetaifootball.co.nz
papakuranetball.nz
pauanuilifeguards.org.nz
playsoftball.co.nz
prebbletonfootball.co.nz
primarysportscanterbury.org.nz
pukekohesoftball.co.nz
purc.co.nz
rowandale.school.nz
royaloakbowls.co.nz
rugby-foundation.org.nz
rugbyfoundation.co.nz
rugbyfoundation.com
rugbyfoundation.nz
sailhbc.org.nz
sharkssports.co.nz
silverdalerugby.co.nz
sporthb.co.nz
sporthb.net.nz
sporthbchb.co.nz
sporthbwairoa.co.nz
squashauckland.org.nz
storans.school.nz
sumnerbowls.co.nz
takapunarugby.co.nz
taupohockey.co.nz
ths.school.nz
touchnz.co.nz
touchnz.nz
trfu.co.nz
wahinetoamcc.nz
westshore.school.nz
whangareinetball.co.nz
worldpowerlifting.nz
wsra.nz
zephyr.org.nz

Other certificates including the domain name belmontparkbowlingclub.co.nz

(limited to 100 certificates)
belmontparkbowlingclub.co.nz
sporty.co.nz
belmontparkbowlingclub.co.nz
www.taranakihockey.org.nz
www.canterburybaseball.co.nz
www.opotikicol.school.nz
www.ophc.co.nz
sporty.co.nz
www.rollestonrugby.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
belmontparkbowlingclub.co.nz
sporty.co.nz
www.badmintonhb.co.nz
www.westcoastsoftball.co.nz
www.mttauharagymnastics.co.nz
yes.stockx.co.nz
sporty.co.nz
www.schoolground.com

Certificate

The complete raw certificate details for belmontparkbowlingclub.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDK1KX1wulNa/+7WG4d8
5wt9IZzXfT1BTkxXBu7cAXCuUjrSufG9oBSB/3xsPDtfhF9Vy0lqKM58sL/+C/ph
atAHBKqQydXE0ADrKlf1Z8A6TF4NAmW1tIdsCot3yY85zSzjuguDnzg7YRtUCktV
WrJbMfc4krkf6cQaI2dOnEVAPDkHO84JygFTZCArA+8bFJTGX9qr3nOIOey2zId/
/ZgiEwyzL4z9KaFiq/92GV3pHUv+4mesc9QKWvsoLVfEZ0mj7x+dQAfnoOHwdiRs
zgHh8rOnVd3xuLhSO9MPvSreklG+NHF5qBOPOK0uXovHAJ7onlcwL9qWPyVQgD9l
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263714116401768643660567147937946425180020
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-19 07:27:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-17 07:27:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'belmontparkbowlingclub.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23252852994984135301028605670706629255648239234844528867366034552225168691705346440852823075338220904182833087808479609518947330312036806894091491950802605047684112916545534562986978017925427228553673119675665258343461438678277224124158904425296388931326246435951272522269362587951726262064303873034770506481368996956547275631779992619043397646516005805545599192157207671070370273902630022448432615196092049452403895114821822838641120879201762344980290080205391223101573449246005366526159139908967972879180745404366235958966897726026553906872807433557798827909716296117495272199091355012264575254912317649340543755561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11388af4089bec4e070dd6fd4e0f70c193e77a82
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1888 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avalonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badminton.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayofislandsdressagegroup.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belfastnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belmontparkbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blokarthb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluerovers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bophockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlsbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlsstadium.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brownsbaybowls.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burnsiderugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburycountrycricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburyunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathcollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chchfootballsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchmetrocricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchmetrocricket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchmetrocricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubsnzdarts.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darfieldcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darfieldrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunedinnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastcoastexpo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frasertechcricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelockski.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbayfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbaysquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbbct.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbbusinesshub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbbusinesshub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hnhs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hni.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hnwafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeywairarapa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsobburnside.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapitigymsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapitisoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaumatuatc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kerikerimtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolnbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristalbion.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlinsnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcobsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mooloo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mooloocommunityrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moonshinetrail.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpcricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballwaitakere.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northgolf.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northharbourwaterpolo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otta.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otumoetaifootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakuranetball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pauanuilifeguards.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playsoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primarysportscanterbury.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pukekohesoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rowandale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaloakbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugby-foundation.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbyfoundation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbyfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbyfoundation.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sailhbc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharkssports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverdalerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporthb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporthb.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporthbchb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporthbwairoa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squashauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storans.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumnerbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takapunarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taupohockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ths.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchnz.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wahinetoamcc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westshore.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareinetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldpowerlifting.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsra.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zephyr.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e82c5dfe30000040300473045022062bcbdb145a0bec95b74d6b1f3ac9cf6a36813e5d0f6265ef8c54d9573cdcb91022100e9946ea2c15c90e45b3179955b8d3bb4753ce99d78cbd17e9d8c095dc3b3c85e007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e82c5e1dd00000403004630440220397002c84c3af2c1e11a3c233b31f64f4daa32c7177bf1bcd46c76a39a492d3702207bdfe8d5aeb8f182ee46cf7ec816114f40a21b274e4b694a174e7796ac564017
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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