arrowtownrugby.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c2:a0:50:1a:b6:13:e2:18:2d:d7:3a:59:4b:b4:dd:45:76 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=arrowtownrugby.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c2:a0:50:1a:b6:13:e2:18:2d:d7:3a:59:4b:b4:dd:45:76
Serial Number (int): 327564729382785399996785050724501909489014
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 88:19:d6:e5:88:ff:5f:c9:cb:1c:26:2a:80:c1:92:5a:fb:4c:0a:df
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b9:16:20:84:f1:4c:87:ac:13:64:3c:46:c6:4b:f0:ab:9f:99:7a:4a
Fingerprint (sha256): 28:7a:c7:f0:d6:e4:75:d1:9a:ea:e7:ed:80:1d:2b:6a:f9:2a:21:f5:fd:b7:35:a0:20:93:80:6a:28:c3:d5:7f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate arrowtownrugby.co.nz

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for arrowtownrugby.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arrowtownrugby.co.nz
athleticsotago.co.nz
aucklandsoftball.org.nz
basketballhawkesbay.co.nz
bowlswaikato.co.nz
canoepolohb.co.nz
cashmere.school.nz
cfc.co.nz
christchurchfootballclub.co.nz
countiesmanukaurugbyleague.co.nz
cra.kiwi
cricketwellington.co.nz
cyclingsc.co.nz
darel.co.nz
ellerslieeagles.co.nz
feildingfarmersmarket.co.nz
feildingfarmersmarket.net.nz
feildingfarmersmarket.org.nz
fenciblefoundation.co.nz
freyberg.ac.nz
gijfc.co.nz
glenfieldrugbyleague.co.nz
golfnorthland.co.nz
greenacrescountry.org.nz
harbourgolf.co.nz
hastingsboys.school.nz
havelocknorth.rugby
hawkesbay.basketball
hawkesbaynetball.co.nz
hbnetball.co.nz
hbrugby.co.nz
healthyfamilieswaitakere.org.nz
hjac.org.nz
hockeywanganui.org.nz
hokowhitubridge.org.nz
horouta.co.nz
huianetball.co.nz
ie19.co.nz
ie19.nz
jonesyyouthfoundation.co.nz
kartsport.org.nz
kirweerugby.co.nz
kiwitagnz.co.nz
leamingtonrugby.co.nz
lindisfarne.school.nz
lrsc.co.nz
manawatusoftball.co.nz
manawatusoftball.org.nz
maniapoto.school.nz
manukauaucklandvolleyball.co.nz
maoribasketball.com
marlboroughnetball.org.nz
marlboroughtrampingclub.co.nz
membermanager.co.nz
metrofootball.org.nz
mff.nz
mitre10park.co.nz
mountsports.co.nz
nzteachersgames.co.nz
otakisportsclub.co.nz
parklandsrugby.co.nz
patoka.school.nz
pbhockey.co.nz
pioneerfishingclub.co.nz
polo.org.nz
ponsonbyrugby.co.nz
porthillunited.co.nz
prebbleton.com
referees.co.nz
rotoruaunited.co.nz
shirleyrugby.co.nz
sked.co.nz
soulutionzsports.nz
southcanterbury.basketball
sportsafe.co.nz
sporty.org.nz
sportycrm.co.nz
sportycrm.com
st-marys-wellington.school.nz
stmaryswellington.school.nz
stmw.school.nz
taradaleint.school.nz
volleysouth.org.nz
waihibeachtennisclub.co.nz
waimakunited.org.nz
wanakafootball.nz
wdta.org.nz
whangareibridgeclub.nz

Other certificates including the domain name arrowtownrugby.co.nz

(limited to 100 certificates)
www.sportycrm.com
www.giafc.co.nz
sportycrm.com
arrowtownrugby.co.nz
arrowtownrugby.co.nz
arrowtownrugby.co.nz
fdmc.school.nz
arrowtownrugby.co.nz
arrowtownrugby.co.nz
arrowtownrugby.co.nz
arrowtownrugby.co.nz
www.marlboroughtrampingclub.co.nz
arrowtownrugby.co.nz
sporty.org.nz
arrowtownrugby.co.nz
arrowtownrugby.co.nz
arrowtownrugby.co.nz
arrowtownrugby.co.nz
arrowtownrugby.co.nz
golfnorthland.co.nz
freyberg.ac.nz
arrowtownrugby.co.nz
arrowtownrugby.co.nz
www.sporty.org.nz
www.skeggsfoundation.nz
cfc.co.nz
www.cfc.co.nz
arrowtownrugby.co.nz

Certificate

The complete raw certificate details for arrowtownrugby.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDWvvR+MViL7i4NHWCFP
/E4zNbO8Aaf0x0GSOaB8zkYDYkmObnd/ObyRQlAI1kBXkvjdjuwmmLPnv0nHFycW
po1S1LeTP0002uzVcZFgyh1dMMvcjyJEJ+YdW3EeNZEChPV3HRxIe5jv4l+O6yv9
ErsRWVeTJbCWvem5gcXms7BnlmFh/zT5EnawyJxobegl4+/XLsoz72EzG+0ZdVxJ
36zZX9S7o5yWHqRiw8wWOiiBMPaLz8zKVdzFXXTI3CRMcLWwujyxOMhzpLNAxRhX
yP0k/aEP8v21ImZT1zc7K9G0eqJIsCg+W3/nanlx+l09dYoMGEq/3ZSLaNyzsBT/
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327564729382785399996785050724501909489014
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 00:58:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 00:58:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'arrowtownrugby.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25779088002829554398611366424746069084054546124676242327430321117589993702731030836962968046809223335656083895690784916717093385690061007478331500676159752270968266788247274019474075781262102523164451021215572379716109304578286716919052190097637806583588758690351159570940730428270146230841007015521884271779309097980550387855609826399220357516022924338552349996010415811838997532369108873344397285790458399069174350777333189345023334329836582111647375654083076986989760383214261572322283941018326940166763801484234162321278856590265607372411889756543512814642048894071769333641378303816354194200901022148436839169797
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8819d6e588ff5fc9cb1c262a80c1925afb4c0adf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1851 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arrowtownrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athleticsotago.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketballhawkesbay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswaikato.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canoepolohb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashmere.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchfootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countiesmanukaurugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cra.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cricketwellington.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyclingsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darel.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellerslieeagles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fenciblefoundation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freyberg.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gijfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenfieldrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfnorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenacrescountry.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harbourgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastingsboys.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelocknorth.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbay.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbaynetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyfamilieswaitakere.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hjac.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeywanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hokowhitubridge.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horouta.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huianetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie19.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie19.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jonesyyouthfoundation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartsport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirweerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwitagnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leamingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindisfarne.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lrsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manawatusoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manawatusoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maniapoto.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manukauaucklandvolleyball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maoribasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughtrampingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membermanager.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrofootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mff.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitre10park.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzteachersgames.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otakisportsclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parklandsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patoka.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbhockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneerfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponsonbyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porthillunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbleton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'referees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotoruaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirleyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sked.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soulutionzsports.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southcanterbury.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsafe.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportycrm.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportycrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-marys-wellington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryswellington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmw.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taradaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volleysouth.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihibeachtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waimakunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanakafootball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdta.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareibridgeclub.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170a343c57d0000040300473045022100deaef40de9e175137caea5a096fff548a0734fa8d690958e0bd032f1bc1186470220374a08d7646d6831bfffe4a877b9d96c3cd0384759226fd15a5db02a030791490075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170a343c5e000000403004630440220381b37cbd7191e1709005677d7daa8b3cbcdc9f7c834625cb58e377ad1c774570220463509e0cb0634ed51464ce8c59050df8564b6b91811003647f2b582ce25351d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000ae8196a5b12afd9e43718b6c07ec11d6ddef8d329ed15657863dc9b2138d33cef2515a23f917208b66368a52ce8f4f5329ed3a522b19a1ef5547076e112a8096ba121fe6a56edb9884f9752427a4cb92ec494df8f7b3541f78ec1930cee4b6265251e092010b7399e86a1da1d95e2546469b173d6ba9b500c7760a620648caa163d1c76dc194a95bbb49d0d5f752fb21deecb1c354dbf7fbffc107c3ed2a94bacba027331b97edb2c8d9ab0feef05e2e9855f0fc3371713b8b9fc404897be40d095610aa38a09d870bd10dbd69c956b28caea17f436a0a68213c4359c126836b0cd2244f5de2b07d10569b473157c83dfe720fc369b7f2b462a52f1acb2a339