www.cobdenprimary.skoolsites.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:99:a1:e5:8a:27:cb:f0:12:11:da:81:57:bd:14:6f:ac:33 was issued on by Let's Encrypt.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.cobdenprimary.skoolsites.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:99:a1:e5:8a:27:cb:f0:12:11:da:81:57:bd:14:6f:ac:33
Serial Number (int): 400727543411372086753965563901526206819379
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b5:71:ab:89:8c:e4:e2:85:2f:10:c2:17:da:1f:62:67:7b:51:a3:8e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c8:1a:53:6e:1d:38:9c:79:10:a6:f2:6e:7a:66:9d:58:d5:42:33:22
Fingerprint (sha256): 26:64:e6:23:16:dc:4e:eb:5c:35:58:cd:68:73:4d:86:20:c0:fd:5c:3e:01:4d:a5:0e:22:e0:52:0f:60:48:54

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.cobdenprimary.skoolsites.co.nz

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cobdenprimary.skoolsites.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allenton.school.skoolsites.co.nz
allentonschool.skoolsites.co.nz
bigrock.school.nz
cobden.school.nz
cobdenprimary.skoolsites.co.nz
cpanel.skoolsites.co.nz
duntroon.school.nz
duvauchelle.school.nz
faircol.skoolsites.co.nz
hiwinuischool.skoolsites.co.nz
huntlycollege.school.nz
mangerekura.school.nz
maromaku.school.nz
mayfield.school.nz
mtbiggs.skoolsites.co.nz
northlandcollege.skoolsites.co.nz
nsc.school.nz
opotikicol.school.nz
otocoll.school.nz
paeroacentralschool.skoolsites.co.nz
parkvale.school.nz
practiceschool.skoolsites.co.nz
rangi.school.nz
saintmarks.skoolsites.co.nz
skoolsites.co.nz
solwayprimary.skoolsites.co.nz
spotswoodcollege.skoolsites.co.nz
stjohnsgirls.school.nz
stjosephsdvke.school.nz
stleos.school.nz
taitacentral.skoolsites.co.nz
taitoko.skoolsites.co.nz
tehaukaretu.school.nz
templatetwo.skoolsites.co.nz
tikorangi.school.nz
tokomaru.school.nz
totara.skoolsites.co.nz
waikaretu.school.nz
waiotahevalley.skoolsites.co.nz
waitakereprimary.school.nz
waitoki.skoolsites.co.nz
walton.school.nz
ward.school.nz
waverlypark.school.skoolsites.co.nz
westendnp.school.nz
www.allenton.school.skoolsites.co.nz
www.allentonschool.skoolsites.co.nz
www.bigrock.school.nz
www.cobden.school.nz
www.cobdenprimary.skoolsites.co.nz
www.duntroon.school.nz
www.duvauchelle.school.nz
www.faircol.skoolsites.co.nz
www.hiwinuischool.skoolsites.co.nz
www.huntlycollege.school.nz
www.mangerekura.school.nz
www.maromaku.school.nz
www.mayfield.school.nz
www.mtbiggs.skoolsites.co.nz
www.northlandcollege.skoolsites.co.nz
www.nsc.school.nz
www.opotikicol.school.nz
www.otocoll.school.nz
www.paeroacentralschool.skoolsites.co.nz
www.parkvale.school.nz
www.practiceschool.skoolsites.co.nz
www.rangi.school.nz
www.saintmarks.skoolsites.co.nz
www.skoolsites.co.nz
www.solwayprimary.skoolsites.co.nz
www.spotswoodcollege.skoolsites.co.nz
www.stjohnsgirls.school.nz
www.stjosephsdvke.school.nz
www.stleos.school.nz
www.taitacentral.skoolsites.co.nz
www.taitoko.skoolsites.co.nz
www.tehaukaretu.school.nz
www.templatetwo.skoolsites.co.nz
www.tikorangi.school.nz
www.tokomaru.school.nz
www.totara.skoolsites.co.nz
www.waikaretu.school.nz
www.waiotahevalley.skoolsites.co.nz
www.waitakereprimary.school.nz
www.waitoki.skoolsites.co.nz
www.walton.school.nz
www.ward.school.nz
www.waverlypark.school.skoolsites.co.nz
www.westendnp.school.nz
www.zayedcollege.school.nz
zayedcollege.school.nz

Other certificates including the domain name skoolsites.co.nz

(limited to 100 certificates)
skoolsites.co.nz
www.papa.ac.nz
skoolsites.co.nz
*.ebbettpark.skoolsites.co.nz
skoolsites.co.nz
templatetwo.skoolsites.co.nz
skoolsites.co.nz
www.waitakereprimary.school.nz
www.firth.skoolsites.co.nz
skoolsites.co.nz
www.cobdenprimary.skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
mangerekura.school.nz
wakanui.skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
www.terangianiwaniwa.skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
www.matamataintermediate.school.nz
skoolsites.co.nz
skoolsites.co.nz
taitoko.skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
mossburn.school.nz
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
duntroon.school.nz
skoolsites.co.nz
cpanel.skoolsites.co.nz
www.riverina.school.nz
birkdalenorth.school.nz
skoolsites.co.nz
wairauvalley.skoolsites.co.nz
www.lichfield.school.nz
terangianiwaniwa.school.nz
skoolsites.co.nz
skoolsites.co.nz
glenavy.school.nz

Certificate

The complete raw certificate details for www.cobdenprimary.skoolsites.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAxSUJt5bvVtyx0cgoaP
deyW3b7L8vpx0kp8xQn9QObAVuU52p14YxZApPhXA25/nirNN8igJcUMDh4aeKqn
EpxbyhFEzhrg8/jSC63s0KEjCffkZTjcPq1GEYqKHn5IXbryfWf4VX/eDxvy6Zrs
Hhe0pPEduI05JVGE09ZNq958GzAmej7pQI2urW/4iTWcMZfWp64aLU7fENX8iynn
zBbjmF/chfXUiQ0ua9ymFEjQy2TyHAuMTfTr3Yb2IN/VEztKnhnN4JZQqjiYcIkY
43yzJs2j3ydQ4w6zuPXZslPe3SQ4kN6y1E5fwyXg8zGEV2AAf0X9FYRmzMdHP/R3
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 400727543411372086753965563901526206819379
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-20 23:13:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-18 23:13:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cobdenprimary.skoolsites.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23233924092801642143275413071442465162798711977203553739515843363027664738030683017684301884761732323384450065325763803639462977425608894385416431851930139469066086545893967255822231656869741095228408974951206990353109390146378728673992224013045056200349200000911287072459029107278633573738014016631298723862633182442605578406010281315257865268191259393246115566082085974626787370363369959927517820713317368841234440188236542362166419510317532488292658815155126634317116661799839668889400176355586286954657736085675237054785504726537667187354579119555118130857482972068580934502412243467558598992782721620848921573297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b571ab898ce4e2852f10c217da1f62677b51a38e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2471 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allenton.school.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allentonschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigrock.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cobden.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cobdenprimary.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duntroon.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duvauchelle.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faircol.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiwinuischool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntlycollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mangerekura.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maromaku.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayfield.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtbiggs.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northlandcollege.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opotikicol.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otocoll.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paeroacentralschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkvale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practiceschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintmarks.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solwayprimary.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotswoodcollege.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnsgirls.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephsdvke.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stleos.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taitacentral.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taitoko.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tehaukaretu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'templatetwo.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tikorangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokomaru.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totara.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikaretu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waiotahevalley.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitakereprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitoki.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walton.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ward.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waverlypark.school.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westendnp.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allenton.school.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allentonschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigrock.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cobden.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cobdenprimary.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duntroon.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duvauchelle.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faircol.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hiwinuischool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huntlycollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mangerekura.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maromaku.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mayfield.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtbiggs.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northlandcollege.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opotikicol.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otocoll.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paeroacentralschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkvale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.practiceschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintmarks.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solwayprimary.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spotswoodcollege.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnsgirls.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephsdvke.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stleos.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taitacentral.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taitoko.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tehaukaretu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.templatetwo.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tikorangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokomaru.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.totara.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikaretu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiotahevalley.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitakereprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitoki.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walton.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ward.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waverlypark.school.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westendnp.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zayedcollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zayedcollege.school.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f987ec80c00000403004730450220629e2a63f4f0a30f06b1d90a3e90a0cd80d14ba776ec2c0d2129315ce2539007022100d111f1e322cb699a2510347c77b76aa065622b7352501966ba8f901988170ffc00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f987ec83a0000040300473045022100b3714e1838e9bab89a5e41c99768cc22a998a28e6cb0183a226ae188978eeb5902206143c6e29ad821a742b4c2db2ee338670b37e7af61072cc3c262b3ad76e26a3b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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