www.firth.skoolsites.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:52:4f:8b:b9:74:c4:7f:1a:96:f4:9f:3b:df:95:59:c5:fe was issued on by Let's Encrypt.

With 63 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.firth.skoolsites.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:52:4f:8b:b9:74:c4:7f:1a:96:f4:9f:3b:df:95:59:c5:fe
Serial Number (int): 376458032316985341533776015637720610751998
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 16:1f:3b:a0:0b:91:88:61:f6:b6:8a:42:c3:df:de:bf:d0:86:cd:7d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a5:64:82:b5:e1:38:49:7a:02:23:e4:5b:8b:f6:6f:b1:06:f8:b6:7b
Fingerprint (sha256): 1f:69:47:a5:f6:12:c1:64:d1:bb:47:74:3c:fb:b1:9d:3f:5a:79:ea:af:6f:c5:89:c1:c8:12:40:e6:87:f2:9e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.firth.skoolsites.co.nz

63

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.firth.skoolsites.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.selwyn-park.skoolsites.co.nz
*.skoolsites.co.nz
awhitu.school.nz
bigrock.school.nz
dargavilleprimary.school.nz
duntroon.school.nz
maihiihi.school.nz
mangatangi.school.nz
matamataint.school.nz
matamataintermediate.school.nz
mossburn.school.nz
otaki.school.nz
pap-west.school.nz
ranzau.school.nz
roseneath.school.nz
skoolsites.co.nz
stjosephsdvke.school.nz
vogeltown.school.nz
woodlands.school.nz
www.aria.skoolsites.co.nz
www.awhitu.school.nz
www.bigrock.school.nz
www.cannington.skoolsites.co.nz
www.dargavilleprimary.school.nz
www.duntroon.school.nz
www.ebbettpark.skoolsites.co.nz
www.firth.skoolsites.co.nz
www.geraldineps.skoolsites.co.nz
www.glenmass.skoolsites.co.nz
www.gorger.skoolsites.co.nz
www.haukaretu.skoolsites.co.nz
www.helensville.skoolsites.co.nz
www.ilminsterinter.skoolsites.co.nz
www.knapdale.skoolsites.co.nz
www.lichfield.skoolsites.co.nz
www.maihiihi.school.nz
www.manaia.skoolsites.co.nz
www.mangatangi.school.nz
www.matamataint.school.nz
www.matamataintermediate.school.nz
www.mimis.skoolsites.co.nz
www.mossburn.school.nz
www.norsewood.skoolsites.co.nz
www.ongarue.skoolsites.co.nz
www.opotikicollege.skoolsites.co.nz
www.otaki.school.nz
www.pap-west.school.nz
www.randwick.skoolsites.co.nz
www.rangi.skoolsites.co.nz
www.ranzau.school.nz
www.riverina.skoolsites.co.nz
www.roseneath.school.nz
www.stcathcol.skoolsites.co.nz
www.stjosephsdvke.school.nz
www.tarras.skoolsites.co.nz
www.tehoro.skoolsites.co.nz
www.thames-south.skoolsites.co.nz
www.totara.skoolsites.co.nz
www.vogeltown.school.nz
www.waitunawest.skoolsites.co.nz
www.wood.skoolsites.co.nz
www.woodlands.school.nz
www.zayedgirls.skoolsites.co.nz

Other certificates including the domain name skoolsites.co.nz

(limited to 100 certificates)
skoolsites.co.nz
skoolsites.co.nz
*.ebbettpark.skoolsites.co.nz
skoolsites.co.nz
templatetwo.skoolsites.co.nz
skoolsites.co.nz
www.firth.skoolsites.co.nz
skoolsites.co.nz
www.cobdenprimary.skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
wakanui.skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
www.matamataintermediate.school.nz
skoolsites.co.nz
skoolsites.co.nz
taitoko.skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
mossburn.school.nz
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
cpanel.skoolsites.co.nz
www.riverina.school.nz
birkdalenorth.school.nz
skoolsites.co.nz
www.lichfield.school.nz
skoolsites.co.nz
skoolsites.co.nz

Certificate

The complete raw certificate details for www.firth.skoolsites.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GrTNCAlVC81U+kEbojs
jX7V8cVIHRIjPBtwg8V5ZvVj3nfgj7hwRPXnrOAhet/2admxlc3S5V6YkxzIzFUN
rMJuEfwFP0Dw5fvvIgriVm2V/wamyzec4XnROAyqI6UKqwx/dyI8ejzJ3FfIUUfS
STfWogbyrnMNE2i77QfBrOo42V+sNQrbgJvVUaqMGK79PD5mMFsP89HbZenduf1v
Njl39Qc17/VIQdg5KxRZb6dOziLbQ1cl5RCVU+F6o+MTVaxQRAodGleIkkxQMs3Q
auXX/gX2hO9NiPo2DgDTqLZT5teJZvM/tRqZWsvQ5v1wflwVC9mhf3HwsucfH5Ka
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 376458032316985341533776015637720610751998
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-06 20:02:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 20:02:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.firth.skoolsites.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26310244810717036319494518048887569938338496497421279253915071897417129524492881598824286997912934204565969782169179484344836939508634007631565224478087163187072727682288169779561389258294033379658797618364536445964497345351014031516099293871698073484391717298994106997313009091264114802627237626219646319279849334441475945596963899318486128972415800465767630842238256747759849505442946804347444019610121207795094708138156797855418437907512704232887759643183039921730519852497586870261978242283599357943047452726584963566226382276664798415660817452764537136070722410056767132787548613995602035299354330076376993012253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							161f3ba00b918861f6b68a42c3dfdebfd086cd7d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1705 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.selwyn-park.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awhitu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigrock.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dargavilleprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duntroon.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maihiihi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mangatangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matamataint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matamataintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mossburn.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otaki.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pap-west.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranzau.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roseneath.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephsdvke.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vogeltown.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodlands.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aria.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awhitu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigrock.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cannington.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dargavilleprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duntroon.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebbettpark.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firth.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geraldineps.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenmass.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gorger.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haukaretu.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helensville.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilminsterinter.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knapdale.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lichfield.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maihiihi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manaia.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mangatangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matamataint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matamataintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mimis.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mossburn.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norsewood.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ongarue.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opotikicollege.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otaki.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pap-west.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.randwick.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rangi.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranzau.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverina.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roseneath.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcathcol.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephsdvke.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tarras.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tehoro.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thames-south.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.totara.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vogeltown.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitunawest.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wood.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodlands.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zayedgirls.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a6c4d7e670000040300473045022058f6a4d42fe4687d1e734a7bc0bf361fea4b54db1243937580d69e31edac1a78022100f48b9e091a6589ceba576e1308738ff19e65369163e00affea6bd0d06f1b50920076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a6c4d7e970000040300473045022100ab329b45f8ecd947db5209ab6e408c78459809cc0c10c058cd2862d6ce6ba5d102201514475bd7c3f3f181106293e8ed5b494c4a45fe324c1710c422eb84365e7a88
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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