www.sporty.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d6:30:73:6f:c8:19:d2:d1:be:a2:8b:d3:56:ba:88:2c:4e was issued on by Let's Encrypt.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d6:30:73:6f:c8:19:d2:d1:be:a2:8b:d3:56:ba:88:2c:4e
Serial Number (int): 334221686641499069086457654501052212849742
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 25:81:0a:13:61:ab:b8:18:f3:ae:33:05:56:f2:8f:89:15:23:25:47
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 01:34:3a:5e:63:b9:4f:ed:c3:40:70:48:65:5a:5b:ff:4d:52:25:00
Fingerprint (sha256): 25:be:a4:a3:32:b8:96:97:79:93:a9:81:73:98:57:6b:3c:0c:9a:bf:3b:31:b8:3f:be:44:e3:23:93:80:d9:ab

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sporty.co.nz

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aklbadminton.com
gonville.school.nz
masseyrfc.co.nz
mca.org.nz
netballchristchurch.org.nz
omusc.org.nz
sporty-production.trafficmanager.net
tairuaslsc.org.nz
www.aklbadminton.com
www.aucklandleague.co.nz
www.aurfc.co.nz
www.avalonrugby.co.nz
www.bophockey.co.nz
www.brownsbaybowls.org.nz
www.burwoodparktennisclub.kiwi
www.canterburywaterpolo.org.nz
www.centralcitybaseball.org.nz
www.dunedinnetball.co.nz
www.eastcoastexpo.co.nz
www.flaxmillbaymotel.co.nz
www.gonville.school.nz
www.hastingsrugbyandsports.co.nz
www.hawkesbayfarmersmarket.co.nz
www.hawkesbayrugbyreferees.co.nz
www.hbmagpies.co.nz
www.hbrfu.co.nz
www.hbru.co.nz
www.hni.school.nz
www.kjcc.org.nz
www.magpies.co.nz
www.mandevillesports.co.nz
www.maraetaitennis.co.nz
www.marsdensport.school.nz
www.masseyrfc.co.nz
www.mca.org.nz
www.merivalepap.co.nz
www.mgcarclubcanterbury.nz
www.montressors.co.nz
www.netballchristchurch.org.nz
www.northcanterburyrugby.co.nz
www.nzssfootball.co.nz
www.nzsssc.co.nz
www.nzsssc.org.nz
www.ojcc.org.nz
www.omusc.org.nz
www.pngolf.co.nz
www.primarysportscanterbury.org.nz
www.purc.co.nz
www.rowandale.school.nz
www.rugbyfoundation.co.nz
www.rugbyfoundation.com
www.rugbyfoundation.nz
www.scrfu.co.nz
www.southlandschoolsport.org.nz
www.sporthb.co.nz
www.sporthb.net.nz
www.sporthbchb.co.nz
www.sporthbwairoa.co.nz
www.sportspark.co.nz
www.sportspay.co.nz
www.sporty.co.nz
www.storans.school.nz
www.tairuaslsc.org.nz
www.takapunarugby.co.nz
www.taupohockey.co.nz
www.taurangafarmersmarket.co.nz
www.touchnz.co.nz
www.touchnz.nz
www.turbotouch.co.nz
www.waikatogolf.co.nz
www.waikatogolf.nz
www.waikatotouch.co.nz
www.wellingtonsoftball.org.nz

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
turbotouch.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
mtrbmx.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporthb.net.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
uat.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
www.sporty.co.nz

Certificate

The complete raw certificate details for www.sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaIzY2G96oA2hmyNWeiz
pzzDV5pLA3UHCignVuAKdfNYwiS3sNMmyP98vx52GNpkj1uVmDfylRQEa23QvjK5
hzrdYS/9mhWOffD9oHsW1JrahwesJz5qfLTs+vNDJxztsbfWSh6EfU8RK9MO9Tpq
NEpEbPRDRtdBHrMoc1bZUymvV/PXw6EoK/yeb6qLKkfftaQvD0Hi+YyKalUIPpZS
JPEh+2kHp5pCazBbeln/uew0CfHFaM+TCmzLU55mMvsclps+96ZYPzoMxZYXhJDO
9GKUMsAY8W8rz+5DEdDeoxu/dw+CiC0e8+uASKy+VUZXHIGdidChxrffYVjo25+H
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334221686641499069086457654501052212849742
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 05:35:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-25 05:35:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19899398043246945098388058503643803524764414527289888337909016386693289852382829453795809742594345282764477613647742248578470556100614520783912157803791479566784937523269095518820208354364841502732562576818249570968332106930760343069142673859121477496617703109409593777376262058806586843778325895942366667771708307158864373726309624051078516841415624121358698036292222305764505489624342964582607560958660473992655655605627178538699710604611737056735929054551687604390000365540575091332620986566327168981693129370536051219656923982324335716894224476400784504844696825200794060445362143695398419701078042877724943419353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25810a1361abb818f3ae330556f28f8915232547
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1719 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aklbadminton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gonville.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masseyrfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mca.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballchristchurch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omusc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty-production.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tairuaslsc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aklbadminton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aurfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avalonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bophockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brownsbaybowls.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burwoodparktennisclub.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburywaterpolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralcitybaseball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dunedinnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastcoastexpo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flaxmillbaymotel.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gonville.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastingsrugbyandsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbayfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbayrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbmagpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbru.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hni.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kjcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mandevillesports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maraetaitennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marsdensport.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masseyrfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mca.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.merivalepap.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mgcarclubcanterbury.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montressors.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballchristchurch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzssfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzsssc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzsssc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ojcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omusc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pngolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primarysportscanterbury.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rowandale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbyfoundation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbyfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbyfoundation.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandschoolsport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporthb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporthb.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporthbchb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporthbwairoa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportspay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.storans.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tairuaslsc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.takapunarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taupohockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taurangafarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchnz.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turbotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikatogolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikatogolf.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikatotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonsoftball.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016af80081f8000004030047304502201bfd6597a58337e3279a053463800ba15246c60fd27f9fd4c95de5298f721c870221009e9cf7e732c31c5a32f9e3a089046558f537c435e4d545b762d997436cc10f4f00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016af80082150000040300463044022008a711770b6df0794e974d6043f308d9e21ab82328f44936279f5efc6f796217022027dfb5ba7f18737d81b43ad58f7fbb35985c81886a45e7d816aaa3f7576420dd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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