northcanterburyrugby.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:65:83:7e:ca:01:75:2f:64:28:30:fd:05:c0:d5:1d:80:0e was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=northcanterburyrugby.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:65:83:7e:ca:01:75:2f:64:28:30:fd:05:c0:d5:1d:80:0e
Serial Number (int): 295880164048309759256096484695112696037390
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 11:1c:c9:e9:99:19:2e:92:69:0d:9d:fe:59:11:ff:ee:4e:42:85:04
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 53:94:81:c0:26:1f:63:a6:d0:0f:a2:28:62:28:9e:7e:6c:27:fb:bf
Fingerprint (sha256): 24:f9:3b:c8:0a:1d:51:8c:2c:17:79:47:84:44:47:31:cb:18:73:b2:e2:17:b7:d9:ff:06:b5:ef:1b:7e:03:cc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate northcanterburyrugby.co.nz

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for northcanterburyrugby.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aafl.co.nz
abundantlife.school.nz
actc.org.nz
ahiparagamefishclub.co.nz
ararimu.school.nz
ashleyforestrallysprint.co.nz
aucklandrugby.co.nz
aucklandsquashjuniors.nz
aucklandtouch.co.nz
basketballtaranaki.co.nz
boptouch.co.nz
bowlshawkesbay.org.nz
bsgevents.co.nz
bullernetball.co.nz
cometswimming.co.nz
csa.org.nz
eakfc.org
ecbsoftball.org.nz
feildinglawnmowerracing.org.nz
generatenetwork.org
greertonponyclub.com
hamiltoncanoepolo.org.nz
hbcommunityfitness.co.nz
hbcommunityfitness.org.nz
hockeysouthcanterbury.co.nz
hyc.org.nz
jcc.org.nz
juniorcricket.co.nz
karakacricket.co.nz
karakatennis.co.nz
kiwikidz.co.nz
lucknow.school.nz
mandevillesports.co.nz
manurewaswimmingclub.co.nz
marketground.co.nz
marlborough-car-club.co.nz
marlboroughparktennis.co.nz
marlboroughvolleyball.org.nz
melrosetargetshooting.co.nz
morningtonbowlingclub.co.nz
mtrbmx.co.nz
nelsonfarmersmarket.co.nz
nelsonfarmersmarket.org.nz
nelsonsoftball.org.nz
netballmanawatu.org.nz
netballwairarapa.co.nz
northcanterburyrugby.co.nz
northcoterugby.co.nz
northharboursoftball.co.nz
northharbourtag.co.nz
nskfc.org.nz
nzpowerlifting.co.nz
nztua.com
osssa.org.nz
otahuhuroversrugbyleague.co.nz
parafednorthland.co.nz
playbowls.co.nz
ponsonbybowls.nz
porritt.school.nz
prdf.co.nz
ratec.org.nz
rbpc.nz
riverroad.co.nz
schoolground.com
schoolsportaoraki.co.nz
scrfu.co.nz
shoreroversnetball.co.nz
southerntack.co.nz
sportotago.co.nz
sportsground.com
stewartalexander.co.nz
stjosephschb.school.nz
sunrisecottage.co.nz
tabletennis.org.nz
taradale.co.nz
tasportscycling.co.nz
temata.school.nz
terracechb.school.nz
torbaytennis.org.nz
touchnorthharbour.co.nz
tutangiora.nz
twyford.school.nz
waikatohockey.org.nz
wellingtonrnr.org.nz
whangareitri.co.nz
wmcc.net.nz
woodendrugby.co.nz
wops.co.nz

Other certificates including the domain name northcanterburyrugby.co.nz

(limited to 100 certificates)
willowpark.school.nz
sporty.co.nz
www.montressors.co.nz
www.bophockey.co.nz
sporty.co.nz
northcanterburyrugby.co.nz
www.sporty.co.nz
www.hbcricket.co.nz
hastings-central.school.nz
ultrarunner.org.nz
sporty.co.nz
sporty.co.nz
www.hbcricket.co.nz
northharbourtag.co.nz
trenthamrifleclub.co.nz
sporty.co.nz
sporty.co.nz
kjcc.org.nz
www.sporty.co.nz
bowlsnapier.co.nz
aucklandmarist.co.nz
www.mysporty.co.nz
uniss.co.nz
www.darfieldrugby.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
pioneerbasketballclub.co.nz
bowlsnapier.co.nz
basketballtaranaki.co.nz

Certificate

The complete raw certificate details for northcanterburyrugby.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioZ6Swd0PTK2mkakCY5b
yEjTYB559EfVY198QRNvEHeTI1Qy60b2dOFRMRv9tW11i/vmpUQLGCz2MLMTQjoh
nt0tGjx2uBjQ5VZT+rfYJeb2mknJwJAo7ncGEwLrkHamsCYNWJIpIf3i1ilUvbDj
MK/HgYySNZUxevAtyRq/ihrW1Vv6hZmh9226oD//cg2F8aXLZfNMccluxkEwUXZ3
TqRNwASr9M4sCgTxQTpucUHXhv8CQutvTnQ54Tis81ne6cjG/EizT2lY2Xv2pygW
p64Pu0GovBtmkuEAw2beNRIF4keWljlunu4gTBsNmb4WWOehzU7wueaShEkipL+p
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295880164048309759256096484695112696037390
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-19 15:25:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-17 15:25:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'northcanterburyrugby.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17487199514347435633080097589721024473313233976236263386368488818936654249890472221402813701538330629396151019740142692607878688984914964589740548709615889982099319395425624187457233412548786788235534786541953480526774132546819092304272409973699519015358862315369988395257082832770410929722453045639403997842064936226370169200457231038804073322166767512822982065385391516375030868578660117687111920079043057643331519607728932838733360266169181862873571815562626254351413703846438851066783495223270614635753309621318897413423738911040019098538106000701996061883339638716789605237623781544906572416740624203807268514267
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							111cc9e999192e92690d9dfe5911ffee4e428504
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1846 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aafl.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abundantlife.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahiparagamefishclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ararimu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashleyforestrallysprint.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandsquashjuniors.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandtouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketballtaranaki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boptouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlshawkesbay.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsgevents.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullernetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cometswimming.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eakfc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecbsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildinglawnmowerracing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generatenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greertonponyclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamiltoncanoepolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcommunityfitness.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcommunityfitness.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeysouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juniorcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakacricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakatennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwikidz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucknow.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandevillesports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewaswimmingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlborough-car-club.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughparktennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughvolleyball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melrosetargetshooting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morningtonbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtrbmx.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballmanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballwairarapa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcoterugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northharboursoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northharbourtag.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nskfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzpowerlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nztua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osssa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otahuhuroversrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parafednorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponsonbybowls.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porritt.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prdf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratec.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbpc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverroad.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportaoraki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoreroversnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southerntack.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportotago.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stewartalexander.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephschb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunrisecottage.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabletennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taradale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasportscycling.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temata.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terracechb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torbaytennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchnorthharbour.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutangiora.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twyford.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikatohockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonrnr.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareitri.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmcc.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodendrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wops.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e847b87c00000040300483046022100f987ae82151a0263183b20113e42c9c859b865f7f94ecc9b0b2a1a4ecdf8f4e3022100d55e5b21bbb2bbaf402da98e430dfd61f32ef7a23845aff0871e195088dbfd93007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e847b87e30000040300483046022100d988a7f120ea1e7141303d9c5608e673f23d2cebbdfd4858cdf7ccbdbf6252a2022100c964be83ef596a1335e4750f88e47e194c2114c6a6fb8d571d2c388a630a9615
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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