www.taranakihockey.org.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0b:06:b8:e2:2d:7b:87:36:39:34:38:bd:9c:5d:51:32:39 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.taranakihockey.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0b:06:b8:e2:2d:7b:87:36:39:34:38:bd:9c:5d:51:32:39
Serial Number (int): 265088899169435810797165993518343929279033
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 94:40:27:e3:b5:cb:e1:23:4d:fa:e7:1b:c1:06:ab:d7:93:61:73:e2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d7:27:8a:d2:c3:df:a3:99:4a:8e:b2:35:6d:58:ec:6d:54:c4:10:80
Fingerprint (sha256): 24:6a:c0:55:b4:17:d5:d1:0a:8a:71:e1:e8:6f:05:06:6f:4f:f0:cf:54:48:cd:80:17:17:45:c3:c7:86:22:30

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.taranakihockey.org.nz

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.taranakihockey.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.acwpa.co.nz
www.ashleyrugby.co.nz
www.aucklandmarist.co.nz
www.avondaleint.school.nz
www.badmintonhb.co.nz
www.belmontparkbowlingclub.co.nz
www.blenheimgolfclub.co.nz
www.bluffhillbowls.co.nz
www.bowlswanganui.org.nz
www.boxingnz.org.nz
www.bushmultisport.org.nz
www.cambridgenetball.org.nz
www.canamju.org
www.canterburycommunityrugby.co.nz
www.canterburyrugby.co.nz
www.clevedoncricketclub.co.nz
www.clevedonrifleclub.co.nz
www.cmih.co.nz
www.crfu.co.nz
www.edenrugby.co.nz
www.ellesmererugby.org.nz
www.gisborneharriers.co.nz
www.glenburniceskatingclub.co.nz
www.grammarcarlton.co.nz
www.grammartec.co.nz
www.halswellcricket.co.nz
www.hastings-central.school.nz
www.hastingsintermediate.school.nz
www.heet.net.nz
www.hillseekers.co.nz
www.hillseekers4wd.co.nz
www.karakarugbyclub.co.nz
www.manurewarugby.co.nz
www.marchingcanterbury.co.nz
www.mariancollege.school.nz
www.maristnh.co.nz
www.marlboroughtennis.co.nz
www.mchockey.co.nz
www.midcanterburyrugby.co.nz
www.mttauharagymnastics.co.nz
www.mtwellingtonrugby.co.nz
www.mtwswim.co.nz
www.ncnc.org.nz
www.nelsoncarclub.co.nz
www.netballkapiti.org.nz
www.netballmanawatu.org.nz
www.netballsouthcanterbury.co.nz
www.netballtaranaki.org.nz
www.oacnz.org
www.ophc.co.nz
www.orfu.co.nz
www.paparoa.school.nz
www.parkvale.school.nz
www.photosnap.co.nz
www.pickleball.org.nz
www.pioneerbasketballclub.co.nz
www.prebbletonnetball.org.nz
www.primarysportwellington.org.nz
www.puhoisports.org.nz
www.rollestonrugby.co.nz
www.seatounafc.org.nz
www.smognetball.org.nz
www.southlandmtbclub.co.nz
www.stanthony.ac.nz
www.stheliersbowlingclub.co.nz
www.stjos.school.nz
www.suburbsrugby.co.nz
www.taierirugby.co.nz
www.taniwha.co.nz
www.taranakihockey.org.nz
www.tasmanrugbyreferees.co.nz
www.teawamutusquash.co.nz
www.technicalharriers.co.nz
www.temata.school.nz
www.timarusquashclub.co.nz
www.touchcanterbury.co.nz
www.trenthamrifleclub.co.nz
www.tuakauponyclub.co.nz
www.ultrarunner.org.nz
www.valleyhockey.org.nz
www.volleyballbop.co.nz
www.wellingtonrnr.org.nz
www.wellingtontouch.org.nz
www.wellsfordsquashclub.co.nz
www.whtc.co.nz
www.wmsc.org.nz
www.wops.co.nz

Other certificates including the domain name taranakihockey.org.nz

(limited to 100 certificates)
willowpark.school.nz
www.diamondsportsnz.co.nz
bowlsdunedin.co.nz
meeanee.school.nz
sporty.co.nz
www.taranakihockey.org.nz
sporty.co.nz
www.canterburybaseball.co.nz
www.ophc.co.nz
www.opotikicol.school.nz
www.ophc.co.nz
distanceridingnewzealand.co.nz
taranakihockey.org.nz
www.rollestonrugby.co.nz
sporty.co.nz
taranakihockey.org.nz
sporty.co.nz
www.baseballnewzealand.org
canterburybaseball.co.nz
uniss.co.nz
sporty.co.nz
www.waihibeachtennisclub.co.nz
rosmini.school.nz
sporty.co.nz
sporty.co.nz
canterburybaseball.co.nz
www.westcoastsoftball.co.nz
meeanee.school.nz
mtwswim.co.nz

Certificate

The complete raw certificate details for www.taranakihockey.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr8qzg/KM/Qb+R4OMP7s
v+IX7ifzjD8i233roDbwSkIqbHVaExiOeaN4VgXeWA4DLvj9xfrSI6P4VsBQNIGF
dleuexHVOz6+9Sk86SqXLf8BsEun24kg8F2CZDQbsk5/f9UgAR/bAxlOXxkpF2uG
Cc0HVrabu0UacIGG88f7OplVHgYsoHUa1NJMn+3mmVFqsBWApgEZ1pzrOmc/n+G3
1Mqof5Mdt91HFO3tH4uWY0FgCloWHMKUiBrX316e+0lDnTVBZCMI5fjZ7U58lytX
drJzR51pZBWt3kpwW2V8KrvgUQTZ04AUWQs2OdDrnqW3tazKP12nbgFonLo1zUwx
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265088899169435810797165993518343929279033
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-19 04:47:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-17 04:47:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.taranakihockey.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24584499226483459159710264354134935435526112894757131730486767219136718074194508166970792968308184234605658931783211457087925291866873572440732575699615138307002999570657505638925629738289224377747731814890826961471592395719872789376101418059142881244651587021300527489416325666242671850099591689663251340032204759219985086173245559970443192157590125790933913222424463780679541726144884406083999659007263666348606803081747604759234168262128960837093148876825848484594130801986287846956619006856675526466872137763713676508440195305916667950650201485407640256501496693903107704721095747134978901452400948732169693180291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							944027e3b5cbe1234dfae71bc106abd7936173e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2204 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acwpa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashleyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandmarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avondaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badmintonhb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belmontparkbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blenheimgolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluffhillbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boxingnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bushmultisport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambridgenetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canamju.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburycommunityrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clevedoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clevedonrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmih.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edenrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ellesmererugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gisborneharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenburniceskatingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grammarcarlton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grammartec.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halswellcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastings-central.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastingsintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heet.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillseekers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillseekers4wd.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakarugbyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manurewarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marchingcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mariancollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristnh.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughtennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mchockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mttauharagymnastics.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtwellingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtwswim.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsoncarclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballkapiti.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballmanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballsouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballtaranaki.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oacnz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ophc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paparoa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkvale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photosnap.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pickleball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pioneerbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prebbletonnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primarysportwellington.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.puhoisports.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rollestonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seatounafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smognetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandmtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanthony.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stheliersbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjos.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suburbsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taierirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taniwha.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taranakihockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasmanrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teawamutusquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.technicalharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temata.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timarusquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trenthamrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuakauponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ultrarunner.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valleyhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volleyballbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonrnr.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtontouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellsfordsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whtc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wmsc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wops.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e823333240000040300473045022100c26109fc22568d5e749ef65bb28509afe863380bea3cbbbdc9dae3bb4574a81202203345a1b17c071012d743d15b871deb5e5a8bbbd3e950d16a85ed142c6577578e00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e8233335d0000040300463044022058200cbcd6bdcf40490b93fc475caae68bc62899019f633e8c5c29f812c0059c02207e16931b6d62ef719b973b52786f4f3d0626542879e8aedf23906ece45f33606
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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