kiwischools.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a2:ba:26:fb:d6:e4:ac:0f:7d:79:bd:3f:cd:96:e4:9b:2a was issued on by Let's Encrypt.

With 67 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kiwischools.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a2:ba:26:fb:d6:e4:ac:0f:7d:79:bd:3f:cd:96:e4:9b:2a
Serial Number (int): 316710040058879797582000574721342660975402
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 04:ba:8a:01:57:fd:5b:8b:a9:68:9e:df:f3:6e:ab:7c:fe:34:2b:02
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e7:77:db:5d:8d:d1:9b:2b:ce:b5:1e:74:c7:a0:ba:70:d0:a2:07:e0
Fingerprint (sha256): 19:bb:25:c7:c7:b0:e3:67:95:87:c5:b6:d1:19:ae:41:24:70:be:c4:26:77:b5:7c:51:22:ba:79:ee:4a:ff:34

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kiwischools.com

67

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kiwischools.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

awahou.kiwischools.com
awahou.school.nz
cpanel.kiwischools.com
default.kiwischools.com
getappandgo.kiwischools.com
jireh.kiwischools.com
jireh.school.nz
kiwischools.co.nz
kiwischools.com
kiwischools.kiwischools.com
mail.awahou.kiwischools.com
mail.default.kiwischools.com
mail.getappandgo.co
mail.getappandgo.kiwischools.com
mail.jireh.kiwischools.com
mail.kiwischools.com
mail.kiwischools.kiwischools.com
mail.marcellinplaceholder.kiwischools.com
mail.maristhb.kiwischools.com
mail.nspa.kiwischools.com
mail.royaloakint.kiwischools.com
mail.stjosephsdvke.kiwischools.com
mail.tokoroacentral.kiwischools.com
mail.whangareiheads.school.nz
mail.wilson.kiwischools.com
marcellin.school.nz
marcellinplaceholder.kiwischools.com
maristhb.kiwischools.com
maristhernebay.school.nz
nspa.kiwischools.com
nspa.org.nz
royaloakint.kiwischools.com
royaloakint.school.nz
stjosephsdvke.kiwischools.com
stjosephsdvke.school.nz
tokoroacentral.kiwischools.com
tokoroacentral.school.nz
webdisk.kiwischools.com
webmail.kiwischools.com
whangareiheads.school.nz
wilson.kiwischools.com
wilson.school.nz
www.awahou.kiwischools.com
www.awahou.school.nz
www.default.kiwischools.com
www.getappandgo.co
www.getappandgo.kiwischools.com
www.jireh.kiwischools.com
www.jireh.school.nz
www.kiwischools.co.nz
www.kiwischools.com
www.kiwischools.kiwischools.com
www.marcellin.school.nz
www.marcellinplaceholder.kiwischools.com
www.maristhb.kiwischools.com
www.maristhernebay.school.nz
www.nspa.kiwischools.com
www.nspa.org.nz
www.royaloakint.kiwischools.com
www.royaloakint.school.nz
www.stjosephsdvke.kiwischools.com
www.stjosephsdvke.school.nz
www.tokoroacentral.kiwischools.com
www.tokoroacentral.school.nz
www.whangareiheads.school.nz
www.wilson.kiwischools.com
www.wilson.school.nz

Other certificates including the domain name kiwischools.com

(limited to 100 certificates)
*.kiwischools.com
kiwischools5.kiwischools.com
kiwischools.com
otahuhu.kiwischools.com
boulcott.kiwischools.com
greenhithe.school.nz
kevins.kiwischools.com
tamaki.kiwischools.com
tekuraowaikare.school.nz
kiwischools.com
kiwischools.com
boulcott.kiwischools.com
sunnyvale.kiwischools.com
dannevirkesouth.kiwischools.com
kiwischools.com
maristhb.kiwischools.com
kiwischools.com
raivalley.kiwischools.com
otahuhuint.kiwischools.com
wrm.kiwischools.com
kiwischools.com
kiwischools.com
greenhithe.kiwischools.com
kiwischools.co.nz
kiwischools.com
kiwischools.com
otahuhuint.kiwischools.com
kiwischools.com
kiwischools3.kiwischools.com
peps.school.nz
matangi.kiwischools.com
balfour.kiwischools.com
pakurangaheights.kiwischools.com
ridgeview.kiwischools.com
leabank.kiwischools.com
jireh.school.nz
awahou.kiwischools.com
tokanui.kiwischools.com
demo.kiwischools.com
jireh.school.nz
kiwischools.com
*.kiwischools.com
balfour.kiwischools.com
kevins.kiwischools.com
kiwischools.com
kiwischools.com
*.kiwischools.com
kiwischools.com
kiwischools.co.nz
kiwischools.com
tikokino.kiwischools.com
kiwischools.com
kiwischools.com
peps.kiwischools.com
manurewasouth.school.nz
kiwischools.com
*.kiwischools.com
dairyflat.kiwischools.com
tokanui.school.nz
greytown1.kiwischools.com
kiwischools.com
kiwischools.com
kiwischools.com
kiwischools.com
kiwischools.com
kiwischools.com
birkdalenorth.kiwischools.com
balfour.kiwischools.com
kiwischools.com
kiwischools.com
kiwischools.com
manurewawest.kiwischools.com
stanhope.kiwischools.com
greenhithe.kiwischools.com
kiwischools.co.nz
*.kiwischools.com
kiwischools.com
whenuapai1.kiwischools.com
ridgeview.school.nz
ruahine.kiwischools.com
kiwischools.com
manurewasouth.kiwischools.com
kiwischools.co.nz
ngakonui.kiwischools.com
kiwischools.com
matangi2.kiwischools.com
birkdalenorth.kiwischools.com
kiwischools.com
kiwischools.co.nz
tekuraowaikare.kiwischools.com
whitikahu.kiwischools.com
kiwischools.com
peps.kiwischools.com
whenuapai1.kiwischools.com
kevins.kiwischools.com
kiwischools.com
kevins.kiwischools.com

Certificate

The complete raw certificate details for kiwischools.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub5rk4E7xMp3c3tICIss
ZFiHesdhyaWDTR4bhA9dnTG9UXl3XJuKWxxKL70yU+j9i5yJW/pX8sLx9bV4+17k
lTZiQyiiA1UWZPARA7bM+YPfuGUeZPTGQBW659vfgHTO2gw+gQKnkGVF3EKHOwri
CJtjCB/V90qtiHVeyLwnl67S1uK2b91Jl1WO+9zfy+UY8JscdXuId8CgVc0pAgk3
yxpRr0mQaFe/PYRgtcnMNrVIlXh/WocXMIe5dGE0phZhisvndUvM+6c2YP5n/9MQ
0mo8PenN9UtGNRjcQdQx3UyPVNrRPkdMajUxNPtvehX5Yep0SyKHw03zlVYeXnO0
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316710040058879797582000574721342660975402
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-30 00:19:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-28 00:19:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kiwischools.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23447986128643899555679397731590283790525240395087756204806108356531069851568415000979496856141451602489119164893876026651424272805678167823325327381302153403506246310684556006338874983030424932093163329257550297847439923689149592599420333183141247583672136197891227127698950756501614311144295208833901159679141229549483971171930731378641847227978691486754738285955570469181439268088183490884956875556731265598100512080353453442279526473891647444916204030682013586824027710374097230553866201302685810609818561698355694398266944530404213440859012422177045847609939815020901810594347124955347560423381699666562050667613
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04ba8a0157fd5b8ba9689edff36eab7cfe342b02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1822 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awahou.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awahou.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'default.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getappandgo.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jireh.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jireh.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwischools.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwischools.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.awahou.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.default.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.getappandgo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.getappandgo.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.jireh.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kiwischools.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.marcellinplaceholder.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.maristhb.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.nspa.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.royaloakint.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.stjosephsdvke.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tokoroacentral.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.whangareiheads.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.wilson.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcellin.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcellinplaceholder.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristhb.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristhernebay.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nspa.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nspa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaloakint.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaloakint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephsdvke.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephsdvke.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokoroacentral.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokoroacentral.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareiheads.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wilson.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wilson.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awahou.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awahou.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.default.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getappandgo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getappandgo.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jireh.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jireh.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiwischools.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiwischools.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marcellin.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marcellinplaceholder.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristhb.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristhernebay.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nspa.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nspa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaloakint.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaloakint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephsdvke.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephsdvke.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokoroacentral.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokoroacentral.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareiheads.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wilson.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wilson.school.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000166c28e22a90000040300483046022100ee741d8cbe429dd3b30f3cc586f9567d1963f263a3cf385ea75e38af159347fd0221009b4da27b872b6067a95b646c686457922316d7bc345a9e4f4d58b76f7b264a62007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166c28e24d20000040300473045022100b862d2d4d4d5121804e50c6ccd2abcfc829ed09ab02f769afde70099ac8ff035022003989e23600970ad8d586dc0a964bedafcc4c7a822652f9562aad360a738e670
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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