meeanee.school.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1b:bc:7b:e5:57:5b:57:a7:d8:a5:bd:50:29:e5:b9:72:c1 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=meeanee.school.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1b:bc:7b:e5:57:5b:57:a7:d8:a5:bd:50:29:e5:b9:72:c1
Serial Number (int): 270775019869460160901332253364267697926849
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cc:c3:c4:86:af:76:a8:ce:4d:da:7a:4e:92:15:8d:54:87:93:9b:ec
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 28:69:11:be:96:38:06:8e:8c:33:d1:1c:b7:7b:21:81:4c:52:d7:03
Fingerprint (sha256): 1a:28:3d:c2:bd:63:5a:91:b1:40:fa:bd:eb:4a:4c:03:63:62:2a:9a:d2:ee:5d:95:61:7b:f4:8f:88:99:43:10

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate meeanee.school.nz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for meeanee.school.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acwpa.co.nz
ashleyrugby.co.nz
badmintonhb.co.nz
blenheimgolfclub.co.nz
bluffhillbowls.co.nz
bowlswanganui.org.nz
boxingnz.org.nz
bushmultisport.org.nz
cambridgenetball.org.nz
canamju.org
canoeslalombop.co.nz
canterburybaseball.co.nz
canterburycommunityrugby.co.nz
canterburyrugby.co.nz
clevedoncricketclub.co.nz
clevedonrifleclub.co.nz
cmih.co.nz
crfu.co.nz
devonportsquash.org.nz
ellesmererugby.org.nz
gisborneharriers.co.nz
glenburniceskatingclub.co.nz
grammarcarlton.co.nz
grammartec.co.nz
halswellcricket.co.nz
hastings-central.school.nz
hastingsintermediate.school.nz
heet.net.nz
manukaumasters.co.nz
manurewarugby.co.nz
maorirugby.co.nz
marewa.school.nz
mariancollege.school.nz
maristfc.co.nz
maristnh.co.nz
marlboroughtennis.co.nz
martinboroughtennisclub.co.nz
mchockey.co.nz
meeanee.school.nz
midcanterburyrugby.co.nz
mttauharagymnastics.co.nz
mtwellingtonrugby.co.nz
mtwswim.co.nz
ncnc.org.nz
nelsoncarclub.co.nz
netballkapiti.org.nz
netballtaranaki.org.nz
nzpca.org
oacnz.org
ophc.co.nz
orfu.co.nz
otagotouch.co.nz
papakurarugby.co.nz
paparoa.school.nz
parkvale.school.nz
pickleball.org.nz
pioneerbasketballclub.co.nz
prebbletonnetball.org.nz
primarysportwellington.org.nz
puhoisports.org.nz
rangi.school.nz
rollestonrugby.co.nz
rosmini.school.nz
smognetball.org.nz
southlandmtbclub.co.nz
southlandtriclub.co.nz
sportsouthland.co.nz
stanthony.ac.nz
stjos.school.nz
suburbsrugby.co.nz
taierirugby.co.nz
taniwha.co.nz
taranakihockey.org.nz
tasmanrugbyreferees.co.nz
technicalharriers.co.nz
timarusquashclub.co.nz
touchcanterbury.co.nz
trenthamrifleclub.co.nz
tuakauponyclub.co.nz
ultrarunner.org.nz
uniss.co.nz
valleyhockey.org.nz
volleyballbop.co.nz
waikatotouch.co.nz
wellingtontouch.org.nz
wellsfordsquashclub.co.nz
whtc.co.nz
willowpark.school.nz
wmsc.org.nz

Other certificates including the domain name meeanee.school.nz

(limited to 100 certificates)
www.diamondsportsnz.co.nz
meeanee.school.nz
bowlsdunedin.co.nz
meeanee.school.nz
meeanee.school.nz
meeanee.school.nz
www.bowlswestcoast.org.nz
www.ophc.co.nz
meeanee.school.nz
www.opotikicol.school.nz
keirunga.org.nz
www.ophc.co.nz
www.manurewamets.co.nz
distanceridingnewzealand.co.nz
whangareirowingclub.org.nz
sportsground.co.nz
meeanee.school.nz
manurewamets.co.nz
www.baseballnewzealand.org
www.waihibeachtennisclub.co.nz
rosmini.school.nz
www.diamondsportnz.co.nz
www.westcoastsoftball.co.nz
meeanee.school.nz
mtwswim.co.nz

Certificate

The complete raw certificate details for meeanee.school.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMkTCCC3mgAwIBAgISAxu8e+VXW1en2KW9UCnluXLBMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MTYxNTEyMDRaFw0x
OTEyMTUxNTEyMDRaMBwxGjAYBgNVBAMTEW1lZWFuZWUuc2Nob29sLm56MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgVEFGIPXXzI6ETB//hQ5VHcD0fV
PFHP6CimADrZoutL6y2h7w4zBQLCKdag+VhDo5GA19iQG4C5CBKx6xusC5SYUQcc
/6QoKV5mOdCi1xMn57m0bI7ckOp7RPub1wRH3r62Q2BKKiNAnlOZ1mHcHY5igH5b
q1ZwTIFht6OvOef+WghXBQYXPSU2hJD9DqtlIqDfz2cSbTIc2gTd8UzqHhbGuWRG
Oi5RgAgaacQ5mhixBElkgZM/WllVy/JofXreuXLFRPmGQ3WuTOUVfcFEffBFpOrU
T/D2JeFu9pUT5bjD6IF2tIWJ0dKcIDdBFPH7Wbxr6RBHt777k/hnaVQJTQIDAQAB
o4IJnTCCCZkwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTMw8SGr3aozk3aek6SFY1U
h5Ob7DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcB
AQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlw
dC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlw
dC5vcmcvMIIHUQYDVR0RBIIHSDCCB0SCC2Fjd3BhLmNvLm56ghFhc2hsZXlydWdi
eS5jby5ueoIRYmFkbWludG9uaGIuY28ubnqCFmJsZW5oZWltZ29sZmNsdWIuY28u
bnqCFGJsdWZmaGlsbGJvd2xzLmNvLm56ghRib3dsc3dhbmdhbnVpLm9yZy5ueoIP
Ym94aW5nbnoub3JnLm56ghVidXNobXVsdGlzcG9ydC5vcmcubnqCF2NhbWJyaWRn
ZW5ldGJhbGwub3JnLm56ggtjYW5hbWp1Lm9yZ4IUY2Fub2VzbGFsb21ib3AuY28u
bnqCGGNhbnRlcmJ1cnliYXNlYmFsbC5jby5ueoIeY2FudGVyYnVyeWNvbW11bml0
eXJ1Z2J5LmNvLm56ghVjYW50ZXJidXJ5cnVnYnkuY28ubnqCGWNsZXZlZG9uY3Jp
Y2tldGNsdWIuY28ubnqCF2NsZXZlZG9ucmlmbGVjbHViLmNvLm56ggpjbWloLmNv
Lm56ggpjcmZ1LmNvLm56ghZkZXZvbnBvcnRzcXVhc2gub3JnLm56ghVlbGxlc21l
cmVydWdieS5vcmcubnqCFmdpc2Jvcm5laGFycmllcnMuY28ubnqCHGdsZW5idXJu
aWNlc2thdGluZ2NsdWIuY28ubnqCFGdyYW1tYXJjYXJsdG9uLmNvLm56ghBncmFt
bWFydGVjLmNvLm56ghVoYWxzd2VsbGNyaWNrZXQuY28ubnqCGmhhc3RpbmdzLWNl
bnRyYWwuc2Nob29sLm56gh5oYXN0aW5nc2ludGVybWVkaWF0ZS5zY2hvb2wubnqC
C2hlZXQubmV0Lm56ghRtYW51a2F1bWFzdGVycy5jby5ueoITbWFudXJld2FydWdi
eS5jby5ueoIQbWFvcmlydWdieS5jby5ueoIQbWFyZXdhLnNjaG9vbC5ueoIXbWFy
aWFuY29sbGVnZS5zY2hvb2wubnqCDm1hcmlzdGZjLmNvLm56gg5tYXJpc3RuaC5j
by5ueoIXbWFybGJvcm91Z2h0ZW5uaXMuY28ubnqCHW1hcnRpbmJvcm91Z2h0ZW5u
aXNjbHViLmNvLm56gg5tY2hvY2tleS5jby5ueoIRbWVlYW5lZS5zY2hvb2wubnqC
GG1pZGNhbnRlcmJ1cnlydWdieS5jby5ueoIZbXR0YXVoYXJhZ3ltbmFzdGljcy5j
by5ueoIXbXR3ZWxsaW5ndG9ucnVnYnkuY28ubnqCDW10d3N3aW0uY28ubnqCC25j
bmMub3JnLm56ghNuZWxzb25jYXJjbHViLmNvLm56ghRuZXRiYWxsa2FwaXRpLm9y
Zy5ueoIWbmV0YmFsbHRhcmFuYWtpLm9yZy5ueoIJbnpwY2Eub3JngglvYWNuei5v
cmeCCm9waGMuY28ubnqCCm9yZnUuY28ubnqCEG90YWdvdG91Y2guY28ubnqCE3Bh
cGFrdXJhcnVnYnkuY28ubnqCEXBhcGFyb2Euc2Nob29sLm56ghJwYXJrdmFsZS5z
Y2hvb2wubnqCEXBpY2tsZWJhbGwub3JnLm56ghtwaW9uZWVyYmFza2V0YmFsbGNs
dWIuY28ubnqCGHByZWJibGV0b25uZXRiYWxsLm9yZy5ueoIdcHJpbWFyeXNwb3J0
d2VsbGluZ3Rvbi5vcmcubnqCEnB1aG9pc3BvcnRzLm9yZy5ueoIPcmFuZ2kuc2No
b29sLm56ghRyb2xsZXN0b25ydWdieS5jby5ueoIRcm9zbWluaS5zY2hvb2wubnqC
EnNtb2duZXRiYWxsLm9yZy5ueoIWc291dGhsYW5kbXRiY2x1Yi5jby5ueoIWc291
dGhsYW5kdHJpY2x1Yi5jby5ueoIUc3BvcnRzb3V0aGxhbmQuY28ubnqCD3N0YW50
aG9ueS5hYy5ueoIPc3Rqb3Muc2Nob29sLm56ghJzdWJ1cmJzcnVnYnkuY28ubnqC
EXRhaWVyaXJ1Z2J5LmNvLm56gg10YW5pd2hhLmNvLm56ghV0YXJhbmFraWhvY2tl
eS5vcmcubnqCGXRhc21hbnJ1Z2J5cmVmZXJlZXMuY28ubnqCF3RlY2huaWNhbGhh
cnJpZXJzLmNvLm56ghZ0aW1hcnVzcXVhc2hjbHViLmNvLm56ghV0b3VjaGNhbnRl
cmJ1cnkuY28ubnqCF3RyZW50aGFtcmlmbGVjbHViLmNvLm56ghR0dWFrYXVwb255
Y2x1Yi5jby5ueoISdWx0cmFydW5uZXIub3JnLm56ggt1bmlzcy5jby5ueoITdmFs
bGV5aG9ja2V5Lm9yZy5ueoITdm9sbGV5YmFsbGJvcC5jby5ueoISd2Fpa2F0b3Rv
dWNoLmNvLm56ghZ3ZWxsaW5ndG9udG91Y2gub3JnLm56ghl3ZWxsc2ZvcmRzcXVh
c2hjbHViLmNvLm56ggp3aHRjLmNvLm56ghR3aWxsb3dwYXJrLnNjaG9vbC5ueoIL
d21zYy5vcmcubnowTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEw
KDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgor
BgEEAdZ5AgQCBIH1BIHyAPAAdgDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd
3fHb/gAAAW062Gr+AAAEAwBHMEUCIBEU7uJ9FelsSSHa9Wnlg6/Isp1lwSlnCSh5
HobWOUBfAiEA0Lbnv3XY9bG9yZWBWsG9ppVlMzCVeWCjEPlHptdIBHkAdgApPFGW
VMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAW062GrwAAAEAwBHMEUCIQCK
S5SwG+mI3PbpVIPq7AwxMpl5XuDdBLl5IqVOs46FGQIgSQKb7vG5yEb5ma/LekTt
dth4UPaYyZRDQEPDTDVsDeAwDQYJKoZIhvcNAQELBQADggEBAJMSSaqidE5bZHAM
t4Zh5Gggub1mjNuzrvhDydVS6OWXI+tzPq6DnmvHgCzyHxS47H3gbso2cSq0vtkg
EZmsb6kKZxT3AdPUfh1j+8tyxHyHp9ctdOs6V0Vfwuh3TZkJuMLA4M9E5uToTvwB
DMl3yHryWhIsaoaKYlCq5CYrlf1WvI7HTTIbVC0IQqrCC9NMt9T1Fo5sSt7zB2o7
xiHcaZd1jAcS/n/NrtnHYB4wb6sba4reWMXGTwWJQNS29eyRtMdx2HVdW04huMsQ
feU9T6Q4LQheOy3fciilmIODdRZLayp7ScDogqFEqg4RTDZKIdFSEinoIcSgnReO
WoFgvVY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgVEFGIPXXzI6ETB//hQ
5VHcD0fVPFHP6CimADrZoutL6y2h7w4zBQLCKdag+VhDo5GA19iQG4C5CBKx6xus
C5SYUQcc/6QoKV5mOdCi1xMn57m0bI7ckOp7RPub1wRH3r62Q2BKKiNAnlOZ1mHc
HY5igH5bq1ZwTIFht6OvOef+WghXBQYXPSU2hJD9DqtlIqDfz2cSbTIc2gTd8Uzq
HhbGuWRGOi5RgAgaacQ5mhixBElkgZM/WllVy/JofXreuXLFRPmGQ3WuTOUVfcFE
ffBFpOrUT/D2JeFu9pUT5bjD6IF2tIWJ0dKcIDdBFPH7Wbxr6RBHt777k/hnaVQJ
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270775019869460160901332253364267697926849
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-16 15:12:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-15 15:12:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'meeanee.school.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17928436035013535353124723630367830948662099852153877859644121481474396515795490446676684079596986865433795528881097196206229079219947543612806164646958135247906223816328949856655383923206539266475531349042171961147861668683495894304944888574867342299097259465827520745551665192135483005777955147828816623184766251902277178865592735006055288347512327105735169084360753406272228385553491187500063191408526507537668756059240247519275094275870839582999670615653950784530683263589841681685429504715741109351344684001947896962912163167000989314647139378544460831519496371981686850672166090196675064938487113487627236673869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ccc3c486af76a8ce4dda7a4e92158d5487939bec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1864 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acwpa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashleyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badmintonhb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blenheimgolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluffhillbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxingnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bushmultisport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgenetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canamju.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canoeslalombop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburybaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburycommunityrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedonrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmih.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devonportsquash.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellesmererugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisborneharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenburniceskatingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grammarcarlton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grammartec.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halswellcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastings-central.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastingsintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heet.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manukaumasters.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maorirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marewa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariancollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristnh.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughtennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martinboroughtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mchockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meeanee.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mttauharagymnastics.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtwellingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtwswim.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsoncarclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballkapiti.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballtaranaki.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzpca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oacnz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ophc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otagotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakurarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paparoa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkvale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pickleball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneerbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primarysportwellington.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puhoisports.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rollestonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smognetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandmtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandtriclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanthony.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjos.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suburbsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taierirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taniwha.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taranakihockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasmanrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technicalharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timarusquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trenthamrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuakauponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultrarunner.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniss.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valleyhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volleyballbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikatotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtontouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellsfordsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whtc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willowpark.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmsc.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d3ad86afe000004030047304502201114eee27d15e96c4921daf569e583afc8b29d65c129670928791e86d639405f022100d0b6e7bf75d8f5b1bdc995815ac1bda695653330957960a310f947a6d7480479007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d3ad86af000000403004730450221008a4b94b01be988dcf6e95483eaec0c313299795ee0dd04b97922a54eb38e8519022049029beef1b9c846f999afcb7a44ed76d87850f698c994434043c34c356c0de0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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