www.katikatifc.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b1:4a:ca:9e:6d:16:8e:f4:1f:03:84:f9:ed:ee:d9:a1:e3 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.katikatifc.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b1:4a:ca:9e:6d:16:8e:f4:1f:03:84:f9:ed:ee:d9:a1:e3
Serial Number (int): 321666251669203924364195568044714732659171
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 42:70:41:05:4e:9d:92:03:38:21:8f:1c:cb:02:9d:78:2a:7e:f4:c5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f7:06:5e:2c:6a:bf:c4:2e:f0:40:96:d0:49:a0:76:0b:44:94:f9:9d
Fingerprint (sha256): 1c:11:78:c4:a4:66:20:87:b1:7f:67:2b:2c:a3:31:08:39:cd:76:0c:4d:75:fa:ef:90:15:14:95:10:a4:4d:0d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.katikatifc.co.nz

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.katikatifc.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.aff.org.nz
www.ardmoremarist.co.nz
www.aucklandbaseball.co.nz
www.aucklandfootball.org.nz
www.aucklandservicerifle.org.nz
www.bbafc.org.nz
www.bowlssouthland.co.nz
www.bowlswestcoast.org.nz
www.brooklyncroquetclub.org
www.burwoodafc.co.nz
www.capitalfootball.org.nz
www.centralfootball.co.nz
www.centralfootball.org.nz
www.clevedontennisclub.co.nz
www.cmsport.co.nz
www.collegerifles.co.nz
www.cornwallcricket.co.nz
www.developyourlegacy.co.nz
www.footballsouth.co.nz
www.gameoftwohalfwits.com
www.glenfieldbowls.co.nz
www.greenhithefootball.org
www.hbcc.org.nz
www.hendersonsquash.co.nz
www.howicksailingclub.co.nz
www.hrc.org.nz
www.karakasportspark.co.nz
www.katikatifc.co.nz
www.keirunga.org.nz
www.keirungaartists.org.nz
www.ladiessocialcycling.org.nz
www.linfield.co.nz
www.linwoodrugby.co.nz
www.linwoodrugby.com
www.mainlandfootball.co.nz
www.makikihi.school.nz
www.manurewamets.co.nz
www.maoribasketball.co.nz
www.marlborough-touch.co.nz
www.marlboroughfootball.co.nz
www.mmcc.co.nz
www.motuekatouch.co.nz
www.mountfortwaterpolo.nz
www.myfootball.co.nz
www.nelsonbaysfootball.co.nz
www.nelsonnetball.co.nz
www.newplymouthcroquetclub.co.nz
www.newzealandbaseball.co.nz
www.nff.org.nz
www.nhbmx.org.nz
www.nzfootball.co.nz
www.nzsra.org.nz
www.oratiaunited.co.nz
www.osssa.org.nz
www.ravensbourne.co.nz
www.redbeachsquashclub.co.nz
www.rosegardenscroquetclub.org.nz
www.royaloakracquets.co.nz
www.rugbysouthland.co.nz
www.rugbysouthlandreferees.co.nz
www.schoolground.co.nz
www.schoolground.nz
www.scpacers.co.nz
www.slalomnz.org.nz
www.southcanterburybasketball.co.nz
www.southlandbmxclub.co.nz
www.sportcanterbury.org.nz
www.sportsground.co.nz
www.sportsportal.co.nz
www.sportwaitakere.co.nz
www.sportwaitakere.nz
www.sportyapp.co.nz
www.takapunaafc.co.nz
www.tcafc.co.nz
www.teeball.co.nz
www.turbotouch.org.nz
www.ulyssesnelson.org.nz
www.upperhuttrifleclub.co.nz
www.waibopfootball.co.nz
www.waihekeunited.org.nz
www.waihibeachtennisclub.co.nz
www.waihoraclaytarget.co.nz
www.waikaregolfclub.co.nz
www.wairarapacarclub.org.nz
www.waitakerecityfc.org.nz
www.waitakererugby.co.nz
www.waitematarowing.org.nz
www.westernafc.com
www.whangaroasportfishingclub.co.nz
www.woolstonparkindoorbowls.org.nz

Other certificates including the domain name katikatifc.co.nz

(limited to 100 certificates)
maristinvercargill.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sportnorthland.co.nz
www.katikatifc.co.nz
sporty.co.nz
sporty.co.nz
pcbasketballclub.co.nz
pcbasketballclub.co.nz
sporty.co.nz
www.pkjsports.co.nz
sporty.co.nz
hockeymanawatu.org.nz
www.nzfootball.co.nz
hockeymanawatu.org.nz
sporty.co.nz
maristinvercargill.co.nz
hockeymanawatu.org.nz
maristinvercargill.co.nz
www.aucklandsoftball.org.nz
sporty.co.nz
www.brooklyncroquetclub.org
www.thesalmonrun.nz
maristinvercargill.co.nz
maristalbion.co.nz
www.mooloocommunityrugby.co.nz
sporty.co.nz
www.unimountafc.org.nz
www.christchurchmetrocricket.org
www.sportsground.com
sporty.co.nz
www.pauanuilifeguards.org.nz

Certificate

The complete raw certificate details for www.katikatifc.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopcClm82N/arsDW+b0A4
il2mvFIxbUjFjpq/vw8yjnzqetmkKqUQqi7XjY7Kwqp/4h4qCigTGkHJyxSaB+rt
Pc5///Yd4WETW3qizCVcQKyp+CnH3H3i0cmv7dUbUruN06tA9kzpZN6hQwk3glZb
+zcX1gqqAOP2oFae7lH45raYWK5duAfiNtajCVAHq4MLzIIl5gf08ohkAOjymWNK
YuUXU9xTmR0UsQffg0GMgDZnxeRBE7tw+G7k5cETdqHAZhH2VF1BBJ4LRXfBI8uj
zazD/i4d4yqrtpoOwWEbsQXqh0DD798XDgbFu+gc0bP7vXAN5aQ2x4TuAPnBcqCu
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321666251669203924364195568044714732659171
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-29 08:05:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-27 08:05:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.katikatifc.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20525071264110806488095523863886985011076669496568828372703040295461487269202490685130179411266337854828286697572572543206592020485560815979005170927787998388482557670593151237000972033086528012039960863864598215666504398774461885079367309520691742302168794342243750964300195561543717079607957336986928342150640724910755481896796671716325781901841390536887718324252992117602228499619124190271840717070525557729625988409654311793958246482929447416625551840849254445022635670831528842695631473346773229833822395864851763243975401677618425111905200287520306978537458282192874513622686489269580360374950903801546251742753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							427041054e9d920338218f1ccb029d782a7ef4c5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2305 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ardmoremarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandservicerifle.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlssouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswestcoast.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooklyncroquetclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitalfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clevedontennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegerifles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornwallcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.developyourlegacy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.footballsouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gameoftwohalfwits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenfieldbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenhithefootball.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hendersonsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicksailingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hrc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakasportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.katikatifc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keirunga.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keirungaartists.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ladiessocialcycling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linfield.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linwoodrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linwoodrugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainlandfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makikihi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manurewamets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maoribasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlborough-touch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motuekatouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountfortwaterpolo.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonbaysfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newplymouthcroquetclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newzealandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhbmx.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzsra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oratiaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osssa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ravensbourne.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redbeachsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosegardenscroquetclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaloakracquets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbysouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbysouthlandreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolground.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scpacers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slalomnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcanterburybasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandbmxclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportcanterbury.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportwaitakere.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportwaitakere.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportyapp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.takapunaafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tcafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teeball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turbotouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ulyssesnelson.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upperhuttrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waibopfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihekeunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihibeachtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihoraclaytarget.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikaregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wairarapacarclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitakerecityfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitakererugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitematarowing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westernafc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangaroasportfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woolstonparkindoorbowls.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c3cfaaa9100000403004730450220263b3fe3a60b7b08426b6e7cff7c52d553c8473c763d690d9cb4422422247b82022100a4fe76cdd58f15ba44c2900c7144a09cf098a72616e9c9958c3f02fd06cad647007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c3cfaa9df000004030046304402200eb95ac50f0795314dacdb7b803b946f021e6db497c5a398e4e4c1eb2fdec7d202200a4bd71fee75764890e6b083ff30aa0ab01247e7ecc5c78a97badb9c938dc197
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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