sportnorthland.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6e:60:27:52:a5:ed:26:0e:17:38:dc:75:32:22:4c:d9:de was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sportnorthland.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6e:60:27:52:a5:ed:26:0e:17:38:dc:75:32:22:4c:d9:de
Serial Number (int): 298895728220060433970260081248531548789214
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f7:d9:e8:f2:77:89:d7:56:9b:a9:d2:8f:1b:e2:6e:d3:52:30:28:b2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a0:86:ab:e8:3e:ca:77:ec:ae:a5:43:10:47:ab:92:4f:24:59:eb:87
Fingerprint (sha256): 1b:e3:3a:c3:23:56:ff:50:6d:91:ef:01:a7:e1:7c:3c:cc:d1:c3:d9:d6:1c:d0:76:42:e7:24:3f:e3:f7:c3:b9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sportnorthland.co.nz

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sportnorthland.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aff.org.nz
aoraki-dragons.co.nz
ardmoremarist.co.nz
arra.org.nz
baseballnzcharity.com
bayolympic.co.nz
bbafc.org.nz
bopbadminton.co.nz
bowlssouthland.co.nz
bowlsstadium.nz
brooklyncroquetclub.org
burwoodafc.co.nz
businesshb.nz
canoeslalomnz.org.nz
capitalfootball.org.nz
carltonjuniorsrugby.co.nz
centralfootball.org.nz
clevedontennisclub.co.nz
cmydt.co.nz
cornwallcricket.co.nz
dioarts.co.nz
dioarts.school.nz
druryfootball.co.nz
ecbafc.co.nz
foxtongolf.co.nz
gksports.co.nz
glenviewsoccer.co.nz
greenhithefootball.org
hbcc.org.nz
helensvillerugby.co.nz
howicknetball.org.nz
karakasportspark.co.nz
katikatifc.co.nz
kbhs.school.nz
mainlandfootball.co.nz
marlboroughfootball.co.nz
mbnc.co.nz
mountroskillrugby.co.nz
mrra.co.nz
nelsonbaysfootball.co.nz
newplymouthcroquetclub.co.nz
nff.org.nz
nhrra.co.nz
norths.co.nz
northsrugby.co.nz
nzfootball.co.nz
oratiaunited.co.nz
otahuhusoccer.org.nz
papakuracityfc.org.nz
papakuranetball.org.nz
papamoafootballclub.co.nz
papamoafootballclub.nz
papanuiredwoodafc.co.nz
papatoetoeunited.co.nz
parklandsunited.co.nz
parklandsunitedsportsclub.net.nz
pcbasketballclub.co.nz
phoenixsynchro.co.nz
ravensbourne.co.nz
redbeachsquashclub.co.nz
rivertongolf.co.nz
schoolground.co.nz
schoolground.nz
scpacers.co.nz
slalomnz.org.nz
southlandfootball.org.nz
speedway.co.nz
sportcanterbury.org.nz
sportnorthland.co.nz
sportnorthland.nz
sporttasman.org.nz
sportwaitakere.co.nz
sportwaitakere.nz
sydenhamrugby.co.nz
takapunaafc.co.nz
taradalefootball.org.nz
tcafc.co.nz
teawamutuafc.co.nz
thesalmonrun.nz
unimountafc.org.nz
waibopfootball.co.nz
waihekeunited.org.nz
waihoraclaytarget.co.nz
waitakerecityfc.org.nz
waitakererugby.co.nz
wakefieldfc.nz
wanakafootball.org.nz
westernafc.com
worldseriescricket.co.nz
wssfa.nz

Other certificates including the domain name sportnorthland.co.nz

(limited to 100 certificates)
maristinvercargill.co.nz
amdg.org.nz
sporty.co.nz
sportnorthland.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.akaranacityrifleclub.co.nz
hockeymanawatu.org.nz
www.cyclingsc.co.nz
hockeymanawatu.org.nz
sporty.co.nz
maristinvercargill.co.nz
hockeymanawatu.org.nz
maristinvercargill.co.nz
www.pukekohesoftball.co.nz
www.eden.rugby
amdg.org.nz
maristinvercargill.co.nz
maristalbion.co.nz
www.mooloocommunityrugby.co.nz
sporty.co.nz
www.christchurchmetrocricket.co.nz
www.crossrecreationcentre.co.nz
www.christchurchmetrocricket.org
www.marlinsnetball.co.nz
www.sportsground.com
sporty.co.nz
www.pauanuilifeguards.org.nz

Certificate

The complete raw certificate details for sportnorthland.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXNPxHvqSqJq+NeOGNnB
6Q5BYHVQiwkV/YylOGV8xqxxg8vwkkYufbVLFwBMHmuCe3mxS/1p9ZRRpJBYHg8B
Nh71ZOdFwONcdik0HN18MeRLs/8o/q32G+XXgJJX3KZNsFB7rJPIj0x/jiegBUh9
Gv9otARKpwM/xFQwFRgoe3gstUwM7X156f8A0YfpvqhOFOJyNx6Y0qbDPu8wcsMC
zo+62X0kTLUSHSRbzWGmB2lfuW/oUA/NXcYCVdwyYGLA+sqgd5chddDQjNtaxye5
DY250WoEA0tqnkNw6z4H9Cr5sYCQWXqYCP+gneyq/HB49Azp5bB0JA4B+6jv8QXI
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298895728220060433970260081248531548789214
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-28 22:15:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-26 22:15:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sportnorthland.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25935714783273130173808709206357254776482852055094399577357037117105490745614535635305076483203495180706415133526299597385893451156349636765719129538582108854946409622432561244843367514278148847113616176572585639007344357338700191594167870958634446982994501542858881276298513499589356597961558801920631826470654564997059580842832777349307725918281940848099703072230734232344774270417251864534337326444962621747682139260152358597071934218496394316383595231186135200087163437713281665267515334520099470418592888099677291649106817568367006426276603428562533856949314165110886616184645484345517701313156396787281303029897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7d9e8f27789d7569ba9d28f1be26ed3523028b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1838 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aoraki-dragons.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ardmoremarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnzcharity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayolympic.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bopbadminton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlssouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlsstadium.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooklyncroquetclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesshb.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canoeslalomnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carltonjuniorsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedontennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmydt.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornwallcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dioarts.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dioarts.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'druryfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecbafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxtongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gksports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenviewsoccer.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenhithefootball.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helensvillerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howicknetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakasportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katikatifc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbhs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainlandfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbnc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountroskillrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrra.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonbaysfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newplymouthcroquetclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhrra.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norths.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oratiaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otahuhusoccer.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakuracityfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakuranetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papamoafootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papamoafootballclub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papanuiredwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papatoetoeunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parklandsunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parklandsunitedsportsclub.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoenixsynchro.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ravensbourne.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redbeachsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivertongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolground.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scpacers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slalomnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportcanterbury.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportnorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportnorthland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporttasman.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportwaitakere.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportwaitakere.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sydenhamrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takapunaafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taradalefootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teawamutuafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesalmonrun.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unimountafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waibopfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihekeunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihoraclaytarget.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitakerecityfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitakererugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wakefieldfc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanakafootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westernafc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldseriescricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wssfa.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001675c9abc6c0000040300463044022051eefcd3dfea92aff1842f3ad1a3d277b6d9505eff31ef0a2e5ea4c1cd355627022072bc615c1528b47f07f0d8f3bf016df52c8fdb27f6d09c1ec7294f4f55d2233000770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001675c9abcbb000004030048304602210086b86d2c8a6d7ebea25b14d2976d88770e5e9981160f14acb7e5e489fcf73983022100acc46370caa4b2c71f2d1d00f2b9bd52f1a6065ad6313e0bb56f06d0330571fa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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