www.waitakereprimary.school.nz

Issued by R10

About this certificate

This digital certificate with serial number 03:b9:80:9e:69:da:ec:15:16:3e:f9:39:a3:74:eb:23:f1:05 was issued on by Let's Encrypt.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.waitakereprimary.school.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:b9:80:9e:69:da:ec:15:16:3e:f9:39:a3:74:eb:23:f1:05
Serial Number (int): 324460059389016285181441784778310549762309
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 09:48:c8:cf:58:2b:47:6a:00:e4:e9:38:19:ea:fe:b4:a1:d5:e5:9f
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): a3:63:9d:33:09:0a:dc:83:55:4b:05:1d:97:4f:02:66:2c:0f:2d:31
Fingerprint (sha256): 1b:d4:14:ad:0e:f7:7c:2b:db:90:1f:4f:c0:4f:d4:59:d7:4a:db:92:01:15:fc:7f:7e:21:98:45:78:0c:a4:f5

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate www.waitakereprimary.school.nz

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.waitakereprimary.school.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allenton.school.skoolsites.co.nz
allentonschool.skoolsites.co.nz
bigrock.school.nz
cobden.school.nz
cpanel.skoolsites.co.nz
duntroon.school.nz
duvauchelle.school.nz
faircol.skoolsites.co.nz
hiwinuischool.skoolsites.co.nz
huntlycollege.school.nz
mangerekura.school.nz
maromaku.school.nz
mayfield.school.nz
mtbiggs.skoolsites.co.nz
northlandcollege.skoolsites.co.nz
nsc.school.nz
opotikicol.school.nz
otocoll.school.nz
parkvale.school.nz
pomare.school.nz
practiceschool.skoolsites.co.nz
rangi.school.nz
saintmarks.skoolsites.co.nz
skoolsites.co.nz
solwayprimary.skoolsites.co.nz
stjohnsgirls.school.nz
stjosephsdvke.school.nz
stleos.school.nz
taitacentral.school.nz
taitoko.school.nz
tehaukaretu.school.nz
templatetwo.skoolsites.co.nz
terangianiwaniwa.school.nz
tikorangi.school.nz
tokomaru.school.nz
totara.skoolsites.co.nz
waikaretu.school.nz
waiotahe.school.nz
waitakereprimary.school.nz
waitoki.skoolsites.co.nz
wakanui.school.nz
wakari.school.nz
walton.school.nz
ward.school.nz
waverlypark.school.skoolsites.co.nz
westendnp.school.nz
www.allenton.school.skoolsites.co.nz
www.allentonschool.skoolsites.co.nz
www.bigrock.school.nz
www.cobden.school.nz
www.duntroon.school.nz
www.duvauchelle.school.nz
www.faircol.skoolsites.co.nz
www.hiwinuischool.skoolsites.co.nz
www.huntlycollege.school.nz
www.mangerekura.school.nz
www.maromaku.school.nz
www.mayfield.school.nz
www.mtbiggs.skoolsites.co.nz
www.northlandcollege.skoolsites.co.nz
www.nsc.school.nz
www.opotikicol.school.nz
www.otocoll.school.nz
www.parkvale.school.nz
www.pomare.school.nz
www.practiceschool.skoolsites.co.nz
www.rangi.school.nz
www.saintmarks.skoolsites.co.nz
www.skoolsites.co.nz
www.solwayprimary.skoolsites.co.nz
www.stjohnsgirls.school.nz
www.stjosephsdvke.school.nz
www.stleos.school.nz
www.taitacentral.school.nz
www.taitoko.school.nz
www.tehaukaretu.school.nz
www.templatetwo.skoolsites.co.nz
www.terangianiwaniwa.school.nz
www.tikorangi.school.nz
www.tokomaru.school.nz
www.totara.skoolsites.co.nz
www.waikaretu.school.nz
www.waiotahe.school.nz
www.waitakereprimary.school.nz
www.waitoki.skoolsites.co.nz
www.wakanui.school.nz
www.wakari.school.nz
www.walton.school.nz
www.ward.school.nz
www.waverlypark.school.skoolsites.co.nz
www.westendnp.school.nz
www.zayedcollege.school.nz
zayedcollege.school.nz

Other certificates including the domain name waitakereprimary.school.nz

(limited to 100 certificates)
smtp.waitakereprimary.school.nz
templatetwo.skoolsites.co.nz
www.waitakereprimary.school.nz
waitakereprimary.school.nz
www.cobdenprimary.skoolsites.co.nz
waitakereprimary.school.nz
mangerekura.school.nz
www.waitakereprimary.school.nz
skoolsites.co.nz
www.waitakereprimary.school.nz
skoolsites.co.nz
www.waitakereprimary.school.nz
smtp.waitakereprimary.school.nz
skoolsites.co.nz
waitakereprimary.school.nz
taitoko.skoolsites.co.nz
www.waitakereprimary.school.nz
skoolsites.co.nz
www.waitakereprimary.school.nz
skoolsites.co.nz
www.waitakereprimary.school.nz
waitakereprimary.school.nz
skoolsites.co.nz
waitakereprimary.school.nz
duntroon.school.nz
www.waitakereprimary.school.nz
waitakereprimary.school.nz
cpanel.skoolsites.co.nz
waitakereprimary.school.nz
waitakereprimary.school.nz
waitakereprimary.school.nz
skoolsites.co.nz
terangianiwaniwa.school.nz
waitakereprimary.school.nz
skoolsites.co.nz
waitakereprimary.school.nz
skoolsites.co.nz

Certificate

The complete raw certificate details for www.waitakereprimary.school.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIONTCCDR2gAwIBAgISA7mAnmna7BUWPvk5o3TrI/EFMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTAwHhcNMjQwNjE5MjEwMTMwWhcNMjQwOTE3MjEwMTI5WjApMScwJQYDVQQD
Ex53d3cud2FpdGFrZXJlcHJpbWFyeS5zY2hvb2wubnowggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQC+4hQjX1uPTLex8+djxb3G0nR5HmRl7c6qQsTsSnap
f/QnF5Uz8ASEXAqo/JEFtNVfvfnoF7fw2OoN4TBtpPViNia79iGNsR3qLQ40dQjX
dpqHjY1D0+epJ6csI9FG3+Lr5uiW++InifPY8zeIZxp2LpsCZlk8Pj5DZbrDezeb
mRtUfMPZr3xGDUE85bNrTPX3SsQmQYTHbFVbayQO764/snl0VBc+IUeRErnzQtNg
E2CC/Kf5noRF35KZ2OZEruIOMAieYhVN4vV2EiCePubFtbK9Fs7OAvVWbsMvD8XL
EIX0Mgu+9EsuPMRJLJ2dTNU29I+n+0qZvVXpeaJXk6kVAgMBAAGjggtLMIILRzAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG
A1UdEwEB/wQCMAAwHQYDVR0OBBYEFAlIyM9YK0dqAOTpOBnq/rSh1eWfMB8GA1Ud
IwQYMBaAFLu8w0el5LypxsOkcgwQjaI14cjoMFcGCCsGAQUFBwEBBEswSTAiBggr
BgEFBQcwAYYWaHR0cDovL3IxMC5vLmxlbmNyLm9yZzAjBggrBgEFBQcwAoYXaHR0
cDovL3IxMC5pLmxlbmNyLm9yZy8wgglSBgNVHREEgglJMIIJRYIgYWxsZW50b24u
c2Nob29sLnNrb29sc2l0ZXMuY28ubnqCH2FsbGVudG9uc2Nob29sLnNrb29sc2l0
ZXMuY28ubnqCEWJpZ3JvY2suc2Nob29sLm56ghBjb2JkZW4uc2Nob29sLm56ghdj
cGFuZWwuc2tvb2xzaXRlcy5jby5ueoISZHVudHJvb24uc2Nob29sLm56ghVkdXZh
dWNoZWxsZS5zY2hvb2wubnqCGGZhaXJjb2wuc2tvb2xzaXRlcy5jby5ueoIeaGl3
aW51aXNjaG9vbC5za29vbHNpdGVzLmNvLm56ghdodW50bHljb2xsZWdlLnNjaG9v
bC5ueoIVbWFuZ2VyZWt1cmEuc2Nob29sLm56ghJtYXJvbWFrdS5zY2hvb2wubnqC
Em1heWZpZWxkLnNjaG9vbC5ueoIYbXRiaWdncy5za29vbHNpdGVzLmNvLm56giFu
b3J0aGxhbmRjb2xsZWdlLnNrb29sc2l0ZXMuY28ubnqCDW5zYy5zY2hvb2wubnqC
FG9wb3Rpa2ljb2wuc2Nob29sLm56ghFvdG9jb2xsLnNjaG9vbC5ueoIScGFya3Zh
bGUuc2Nob29sLm56ghBwb21hcmUuc2Nob29sLm56gh9wcmFjdGljZXNjaG9vbC5z
a29vbHNpdGVzLmNvLm56gg9yYW5naS5zY2hvb2wubnqCG3NhaW50bWFya3Muc2tv
b2xzaXRlcy5jby5ueoIQc2tvb2xzaXRlcy5jby5ueoIec29sd2F5cHJpbWFyeS5z
a29vbHNpdGVzLmNvLm56ghZzdGpvaG5zZ2lybHMuc2Nob29sLm56ghdzdGpvc2Vw
aHNkdmtlLnNjaG9vbC5ueoIQc3RsZW9zLnNjaG9vbC5ueoIWdGFpdGFjZW50cmFs
LnNjaG9vbC5ueoIRdGFpdG9rby5zY2hvb2wubnqCFXRlaGF1a2FyZXR1LnNjaG9v
bC5ueoIcdGVtcGxhdGV0d28uc2tvb2xzaXRlcy5jby5ueoIadGVyYW5naWFuaXdh
bml3YS5zY2hvb2wubnqCE3Rpa29yYW5naS5zY2hvb2wubnqCEnRva29tYXJ1LnNj
aG9vbC5ueoIXdG90YXJhLnNrb29sc2l0ZXMuY28ubnqCE3dhaWthcmV0dS5zY2hv
b2wubnqCEndhaW90YWhlLnNjaG9vbC5ueoIad2FpdGFrZXJlcHJpbWFyeS5zY2hv
b2wubnqCGHdhaXRva2kuc2tvb2xzaXRlcy5jby5ueoIRd2FrYW51aS5zY2hvb2wu
bnqCEHdha2FyaS5zY2hvb2wubnqCEHdhbHRvbi5zY2hvb2wubnqCDndhcmQuc2No
b29sLm56giN3YXZlcmx5cGFyay5zY2hvb2wuc2tvb2xzaXRlcy5jby5ueoITd2Vz
dGVuZG5wLnNjaG9vbC5ueoIkd3d3LmFsbGVudG9uLnNjaG9vbC5za29vbHNpdGVz
LmNvLm56giN3d3cuYWxsZW50b25zY2hvb2wuc2tvb2xzaXRlcy5jby5ueoIVd3d3
LmJpZ3JvY2suc2Nob29sLm56ghR3d3cuY29iZGVuLnNjaG9vbC5ueoIWd3d3LmR1
bnRyb29uLnNjaG9vbC5ueoIZd3d3LmR1dmF1Y2hlbGxlLnNjaG9vbC5ueoIcd3d3
LmZhaXJjb2wuc2tvb2xzaXRlcy5jby5ueoIid3d3Lmhpd2ludWlzY2hvb2wuc2tv
b2xzaXRlcy5jby5ueoIbd3d3Lmh1bnRseWNvbGxlZ2Uuc2Nob29sLm56ghl3d3cu
bWFuZ2VyZWt1cmEuc2Nob29sLm56ghZ3d3cubWFyb21ha3Uuc2Nob29sLm56ghZ3
d3cubWF5ZmllbGQuc2Nob29sLm56ghx3d3cubXRiaWdncy5za29vbHNpdGVzLmNv
Lm56giV3d3cubm9ydGhsYW5kY29sbGVnZS5za29vbHNpdGVzLmNvLm56ghF3d3cu
bnNjLnNjaG9vbC5ueoIYd3d3Lm9wb3Rpa2ljb2wuc2Nob29sLm56ghV3d3cub3Rv
Y29sbC5zY2hvb2wubnqCFnd3dy5wYXJrdmFsZS5zY2hvb2wubnqCFHd3dy5wb21h
cmUuc2Nob29sLm56giN3d3cucHJhY3RpY2VzY2hvb2wuc2tvb2xzaXRlcy5jby5u
eoITd3d3LnJhbmdpLnNjaG9vbC5ueoIfd3d3LnNhaW50bWFya3Muc2tvb2xzaXRl
cy5jby5ueoIUd3d3LnNrb29sc2l0ZXMuY28ubnqCInd3dy5zb2x3YXlwcmltYXJ5
LnNrb29sc2l0ZXMuY28ubnqCGnd3dy5zdGpvaG5zZ2lybHMuc2Nob29sLm56ght3
d3cuc3Rqb3NlcGhzZHZrZS5zY2hvb2wubnqCFHd3dy5zdGxlb3Muc2Nob29sLm56
ghp3d3cudGFpdGFjZW50cmFsLnNjaG9vbC5ueoIVd3d3LnRhaXRva28uc2Nob29s
Lm56ghl3d3cudGVoYXVrYXJldHUuc2Nob29sLm56giB3d3cudGVtcGxhdGV0d28u
c2tvb2xzaXRlcy5jby5ueoIed3d3LnRlcmFuZ2lhbml3YW5pd2Euc2Nob29sLm56
ghd3d3cudGlrb3JhbmdpLnNjaG9vbC5ueoIWd3d3LnRva29tYXJ1LnNjaG9vbC5u
eoIbd3d3LnRvdGFyYS5za29vbHNpdGVzLmNvLm56ghd3d3cud2Fpa2FyZXR1LnNj
aG9vbC5ueoIWd3d3LndhaW90YWhlLnNjaG9vbC5ueoIed3d3LndhaXRha2VyZXBy
aW1hcnkuc2Nob29sLm56ghx3d3cud2FpdG9raS5za29vbHNpdGVzLmNvLm56ghV3
d3cud2FrYW51aS5zY2hvb2wubnqCFHd3dy53YWthcmkuc2Nob29sLm56ghR3d3cu
d2FsdG9uLnNjaG9vbC5ueoISd3d3LndhcmQuc2Nob29sLm56gid3d3cud2F2ZXJs
eXBhcmsuc2Nob29sLnNrb29sc2l0ZXMuY28ubnqCF3d3dy53ZXN0ZW5kbnAuc2No
b29sLm56ghp3d3cuemF5ZWRjb2xsZWdlLnNjaG9vbC5ueoIWemF5ZWRjb2xsZWdl
LnNjaG9vbC5uejATBgNVHSAEDDAKMAgGBmeBDAECATCCAQIGCisGAQQB1nkCBAIE
gfMEgfAA7gB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABkDKE
6ysAAAQDAEYwRAIgJsXO/Z50BihgNVcrqOHWVbMvvmYAev8c3rXCnet8DJoCIB6L
1IIXdGU0npqQq49pni5HHy9pxxt0zas/NDQAuQWwAHUAdv+IPwq2+5VRwmHM9Ye6
NLSkzbsp3GhCCp/mZ0xaOnQAAAGQMoTrfAAABAMARjBEAiASTQ4FKbAPrkhz8Yhe
eIIxJ17bq3Li2kqvT2nYsw61vQIgIGjkD3zoHDLygNnteK2KcpMxv6ZF99v1ZQwm
FG/R07swDQYJKoZIhvcNAQELBQADggEBALcvkRaolHntQQhspAmRYK4bj9Cuavti
qM9Ny9LoXqW2sr2MhKWES7jGqGqJ84wxpUrnMqcZwgsiTw9fnuX8C7Q/9vOnUDvU
AuL/6klQXslY15t7MOFDoLrg8hCQMFqpqae3YlmAJvATwJTfHbFipOBIk43YTlHl
iJU9FcjVWzByTSsnxmAv5gq8heEZKVMPS4KyljHHu8ESO2hrFuXlsbwgX/IrUBjM
3V157gGz7KvgfJdN7azEWFgq96Pl4ECNfBOEHPoQkQ3LwS1tyvUC7pUglIRT60Es
f2mJDJcBympAo4EFDnww5b/olMPr9XtHqVp/QZRwHFUsWdkzcl5kXZQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuIUI19bj0y3sfPnY8W9
xtJ0eR5kZe3OqkLE7Ep2qX/0JxeVM/AEhFwKqPyRBbTVX7356Be38NjqDeEwbaT1
YjYmu/YhjbEd6i0ONHUI13aah42NQ9PnqSenLCPRRt/i6+bolvviJ4nz2PM3iGca
di6bAmZZPD4+Q2W6w3s3m5kbVHzD2a98Rg1BPOWza0z190rEJkGEx2xVW2skDu+u
P7J5dFQXPiFHkRK580LTYBNggvyn+Z6ERd+SmdjmRK7iDjAInmIVTeL1dhIgnj7m
xbWyvRbOzgL1Vm7DLw/FyxCF9DILvvRLLjzESSydnUzVNvSPp/tKmb1V6XmiV5Op
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324460059389016285181441784778310549762309
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-19 21:01:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-17 21:01:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.waitakereprimary.school.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24096761488183721018892025657979464457595056030824800151826198455236943587753620577343209157782850779979619407630551332386457656909312260196408580557624653323515331162495959565306691003332305040538720709907250194505758625314799925396401960403009314081705892987150560896274248825588786767758910502578568710559873292296170164889726221817557891379544655579573659273031232922471398333856012612726734951597867262870624708243846349554601946013138413822741626731297094873683826659460993429945349732778498215167776374777317322512602828404531135633631493095877404775415269726244690680376290209340588106972934496040495344757013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0948c8cf582b476a00e4e93819eafeb4a1d5e59f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2377 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allenton.school.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allentonschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigrock.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cobden.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duntroon.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duvauchelle.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faircol.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiwinuischool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntlycollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mangerekura.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maromaku.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayfield.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtbiggs.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northlandcollege.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opotikicol.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otocoll.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkvale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pomare.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practiceschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintmarks.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solwayprimary.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnsgirls.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephsdvke.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stleos.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taitacentral.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taitoko.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tehaukaretu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'templatetwo.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terangianiwaniwa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tikorangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokomaru.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totara.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikaretu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waiotahe.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitakereprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitoki.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wakanui.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wakari.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walton.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ward.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waverlypark.school.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westendnp.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allenton.school.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allentonschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigrock.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cobden.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duntroon.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duvauchelle.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faircol.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hiwinuischool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huntlycollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mangerekura.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maromaku.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mayfield.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtbiggs.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northlandcollege.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opotikicol.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otocoll.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkvale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pomare.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.practiceschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintmarks.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solwayprimary.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnsgirls.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephsdvke.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stleos.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taitacentral.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taitoko.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tehaukaretu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.templatetwo.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terangianiwaniwa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tikorangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokomaru.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.totara.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikaretu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiotahe.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitakereprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitoki.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wakanui.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wakari.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walton.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ward.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waverlypark.school.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westendnp.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zayedcollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zayedcollege.school.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001903284eb2b0000040300463044022026c5cefd9e7406286035572ba8e1d655b32fbe66007aff1cdeb5c29deb7c0c9a02201e8bd482177465349e9a90ab8f699e2e471f2f69c71b74cdab3f343400b905b000750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a74000001903284eb7c00000403004630440220124d0e0529b00fae4873f1885e788231275edbab72e2da4aaf4f69d8b30eb5bd02202068e40f7ce81c32f280d9ed78ad8a729331bfa645f7dbf5650c26146fd1d3bb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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