www.sporty.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:63:e4:fe:bb:78:6d:48:bf:0c:56:37:ce:4b:fc:15:b2:f7 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:63:e4:fe:bb:78:6d:48:bf:0c:56:37:ce:4b:fc:15:b2:f7
Serial Number (int): 295329198749246473683488699872330902778615
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 17:4c:c3:7e:c2:76:8d:1c:89:68:81:7a:02:e9:43:6d:60:fa:d7:cb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d8:39:98:16:82:da:02:e4:46:a4:8c:01:3d:7c:c5:f8:c6:28:9c:91
Fingerprint (sha256): 20:a2:28:1f:5f:52:25:7f:da:ab:8e:80:b9:d5:12:c6:34:5a:e2:1a:3a:a9:e9:66:71:aa:01:fd:51:4b:48:13

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sporty.co.nz

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bowlsnapier.co.nz
howicksoftball.co.nz
olympicwrestlingnz.com
starling.org.nz
swim.diocesan.school.nz
www.abundantlife.school.nz
www.ahiparagamefishclub.co.nz
www.ararimu.school.nz
www.ashleyforestrallysprint.co.nz
www.aucklandrugby.co.nz
www.aucklandsquashjuniors.nz
www.aucklandtouch.co.nz
www.boptouch.co.nz
www.bowlshawkesbay.org.nz
www.bowlsnapier.co.nz
www.bowlswaikanae.com
www.cometswimming.co.nz
www.csa.org.nz
www.eakfc.org
www.ecbsoftball.org.nz
www.feildinglawnmowerracing.org.nz
www.generatenetwork.org
www.hamiltoncanoepolo.org.nz
www.harbourhockey.org.nz
www.hawkesbaylandingpad.co.nz
www.hblp.co.nz
www.hbsfc.co.nz
www.hockeysouthcanterbury.co.nz
www.howicksoftball.co.nz
www.huttaikido.org.nz
www.hyc.org.nz
www.jcc.org.nz
www.juniorcricket.co.nz
www.jyf.co.nz
www.karakatennis.co.nz
www.kensingtonfitness.co.nz
www.kiwikidz.co.nz
www.lincolnbowlingclub.co.nz
www.manurewaswimmingclub.co.nz
www.marketground.co.nz
www.marlborough-car-club.co.nz
www.marlboroughparktennis.co.nz
www.marlboroughvolleyball.org.nz
www.mtbtauranga.co.nz
www.mtrbmx.co.nz
www.nelsonfarmersmarket.co.nz
www.nelsonfarmersmarket.org.nz
www.nelsonsoftball.org.nz
www.netballwairarapa.co.nz
www.northharboursoftball.co.nz
www.nskfc.org.nz
www.nzpowerlifting.co.nz
www.olympicwrestlingnz.com
www.otahuhuroversrugbyleague.co.nz
www.parafednorthland.co.nz
www.phcc.co.nz
www.playbowls.co.nz
www.playsoftball.co.nz
www.ponsonbybowls.nz
www.porritt.school.nz
www.prdf.co.nz
www.rangatiragolf.co.nz
www.ratec.org.nz
www.rbpc.nz
www.riverroad.co.nz
www.rugby-foundation.org.nz
www.schoolsportaoraki.co.nz
www.sissnetball.co.nz
www.southcanterburytouch.co.nz
www.sportotago.co.nz
www.sporty.co.nz
www.squashauckland.org.nz
www.starling.org.nz
www.stewartalexander.co.nz
www.swim.diocesan.school.nz
www.taradale.co.nz
www.tasportscycling.co.nz
www.tgahockey.co.nz
www.torbaytennis.org.nz
www.totaltouch.org.nz
www.touchnorthharbour.co.nz
www.touchpapamoa.co.nz
www.tuki.co.nz
www.twyford.school.nz
www.volleyballhb.org.nz
www.waiopehu.ac.nz
www.waiukuponyclub.co.nz
www.whangareitri.co.nz
www.wmcc.net.nz
www.woodendrugby.co.nz

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
turbotouch.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
mtrbmx.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporthb.net.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
uat.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
www.sporty.co.nz

Certificate

The complete raw certificate details for www.sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJCpDh4cNreU9LcwOoZ8
I5t5ErrbQnKInepA4C+6CjBFSBJKFuqalC72JCTtU5EegZsoQGRrrOO6Ch7huTmb
0PJa6ip2n0oNlrMw5f9cNVkibkYFAb1Kj0D4de0m4p5+HLmBqvbyvOsTYNu7j/ui
DceK+3vZwR9LyB2qtSV0DW4sWqix7IGZMKN3VURj3PPaTnuc+4KYdAeOOJ7BuYS0
wL0AzeaRabBUZwQHoBwVaRdp411sUsnyhcvDbJDkKuWZ80bJEDM8pOF43wZHpcga
jwQpvq8FsoG1HIeTGXcs/2y6MtVbIC4UYL6V6L56JI8pF18Z+DuaItPhdj0dM6tJ
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295329198749246473683488699872330902778615
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 02:04:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 02:04:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24309089241432854977441881545342568137693230815222580331363484218737232318773026805946407457398672541208303943801369213937787217044860350190176066082917511532141347243012330141897643737960941520621965339469387753239525327797163465837710253880747856583546040255410246316919531687550142989392132019937135753630048239158099755421606330674126852184022528991135076954998451165431279889921344196233171481094879016703710944892207509478819906035278150753235007423145825416480294019941207584196839108417780964306766173451815490245030983124569968678290492153952196376434508059551964867630942460456577081451833038425051521305053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							174cc37ec2768d1c8968817a02e9436d60fad7cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2202 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlsnapier.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howicksoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olympicwrestlingnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swim.diocesan.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abundantlife.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahiparagamefishclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ararimu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashleyforestrallysprint.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandsquashjuniors.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandtouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boptouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlshawkesbay.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsnapier.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswaikanae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cometswimming.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eakfc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecbsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feildinglawnmowerracing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.generatenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hamiltoncanoepolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harbourhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbaylandingpad.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hblp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbsfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeysouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicksoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huttaikido.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hyc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juniorcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jyf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakatennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kensingtonfitness.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiwikidz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lincolnbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manurewaswimmingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marketground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlborough-car-club.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughparktennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughvolleyball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtbtauranga.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtrbmx.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballwairarapa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northharboursoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nskfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzpowerlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olympicwrestlingnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otahuhuroversrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parafednorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playsoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ponsonbybowls.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.porritt.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prdf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rangatiragolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ratec.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rbpc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverroad.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugby-foundation.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsportaoraki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sissnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcanterburytouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportotago.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.squashauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stewartalexander.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swim.diocesan.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taradale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasportscycling.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tgahockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.torbaytennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.totaltouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchnorthharbour.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchpapamoa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twyford.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volleyballhb.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiopehu.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiukuponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareitri.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wmcc.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodendrugby.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170a3806b1c0000040300473045022100ed6b50a39b7bf18d22ff7053f405029526c5df8d7c5eaba5ae3acd9599b18060022064db5ee4e56385c109ef2bbf8e71c84c641b079c4c35770feb5474d2ff0c13d5007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a3806b370000040300483046022100f014d70424853b391cd1ebb392d7f0793c9052317f14fd31aa8d4f01a57c2dd9022100b15ce39281d1072e4b0861c256228c64620316a8e724f61b881b1dcb04345a10
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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