sporty.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:09:5b:27:9a:93:a8:aa:d8:53:25:1e:97:ef:d5:4a:8e:55 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:09:5b:27:9a:93:a8:aa:d8:53:25:1e:97:ef:d5:4a:8e:55
Serial Number (int): 264520564479952915186312167279205668261461
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 42:d7:98:c1:94:71:a1:74:9c:5a:db:83:03:e4:fb:8d:c8:49:d4:f1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 48:31:21:51:6a:71:d5:a3:15:35:65:36:b5:81:61:03:bd:da:56:d0
Fingerprint (sha256): 20:bc:08:b0:14:fb:8b:38:19:19:ca:b5:84:15:3f:07:6d:40:22:47:6a:44:e9:77:4d:e9:51:06:b2:ed:4c:26

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.co.nz

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ashleyrugby.co.nz
badmintonhb.co.nz
bowlsdunedin.co.nz
bowlswanganui.org.nz
boxingnz.org.nz
canamju.org
canterburybaseball.co.nz
clevedoncricketclub.co.nz
clevedonrifleclub.co.nz
countiesbadminton.co.nz
ellesmererugby.org.nz
gisborneharriers.co.nz
glenburniceskatingclub.co.nz
grammartec.co.nz
hastingsintermediate.school.nz
lnissn.org.nz
mahedrysdale.co.nz
mahedrysdale.com
manukaumasters.co.nz
manurewarugby.co.nz
maorirugby.co.nz
marewa.school.nz
mariancollege.school.nz
maristfc.co.nz
maristnh.co.nz
mchockey.co.nz
midcanterburyrugby.co.nz
ncnc.org.nz
netballkapiti.org.nz
netballmanurewa.org.nz
netballtaranaki.org.nz
orfu.co.nz
orokohangamusictrust.co.nz
papakurarugby.co.nz
primarysportwellington.org.nz
rollestonrugby.co.nz
smognetball.org.nz
southlandmtbclub.co.nz
southlandtriclub.co.nz
sporty.co.nz
stanthony.ac.nz
stjos.school.nz
suburbsrugby.co.nz
taranakihockey.org.nz
technicalharriers.co.nz
timarusquashclub.co.nz
touchcanterbury.co.nz
uniss.co.nz
valleyhockey.org.nz
wellingtontouch.org.nz
wmsc.org.nz

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
turbotouch.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
mtrbmx.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporthb.net.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
uat.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz

Certificate

The complete raw certificate details for sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjdlw7cbry3z53NOyzOi
Tgej7Jc5J2MVAJOdTgiN0qvryKlwJhyAWni0EsKTidGWg4OjQiDKkkAvErOSSaWD
oUqHfDFnTS0P+0AjdK3JrBhCo7oy/G0XfNIFMmMyMMQNG3e5SSFzb85KIuLB/1xW
uNve0TNgBuJW2H2ImcFRdFPUuvlY5bDjOB/iQh6ks6rUeTP++5V7vaCPdm/D3L/z
UbpnWHIvrEhZ7uv4oev5H0rrrRM25RqFjR5LOPDsFMU5hy/PyxJOVIaukjpLFErp
oMwvbV5bQhj8EgiyAXwzL6PLSbW3E+ElFQyKjjHBqOZzntFBastDEVM6Am8bqqyO
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264520564479952915186312167279205668261461
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 00:48:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 00:48:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25527455137224628390680915195433861707980459994210807726399492557981706072341402005665938002532253649332129460172149953043286544974364243186668047193595330807231659558398810528876432260735754339654882034938815449760325979555004574696516877749555202824636377658682987845547199941203901253855196918750892932928162870945059320038539729315907443394677691237074617469740606581707364806025239860997360722410298862822867124305341932140252509419356895832742430894388954185696833618074546934106600541941095920252123328323365970627726356895030485716466960889342540711813992823174262557746661952594412174464611977437380099214981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							42d798c19471a1749c5adb8303e4fb8dc849d4f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1074 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashleyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badmintonhb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlsdunedin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxingnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canamju.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburybaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedonrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countiesbadminton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellesmererugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisborneharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenburniceskatingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grammartec.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastingsintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lnissn.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahedrysdale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahedrysdale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manukaumasters.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maorirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marewa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariancollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristnh.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mchockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballkapiti.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballmanurewa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballtaranaki.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orokohangamusictrust.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakurarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primarysportwellington.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rollestonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smognetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandmtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandtriclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanthony.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjos.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suburbsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taranakihockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technicalharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timarusquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniss.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valleyhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtontouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmsc.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e3fcbd7cc000004030047304502205a1439a2792d1d67ca684fdfba3ae5fed1df3b4902860b58afbbf71f5f49c284022100cd9642ac08ecfc0261570ca92db70fb031c225365edb4ae649892bcb7bdd0c30007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e3fcbd7eb00000403004730450221008c6d224d1ec563b03c0debb732b7eb91f387d889661fca62e21609136cb8439402203deee85eb0a831446d3aaf28c970ee99a844f90d21384732a53c69a944f4a086
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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