eden.rugby

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:63:1a:09:2f:73:f4:bc:7b:57:4e:87:b9:e3:9d:71:89:88 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=eden.rugby

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:63:1a:09:2f:73:f4:bc:7b:57:4e:87:b9:e3:9d:71:89:88
Serial Number (int): 295059419741476014712570947720432504113544
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f6:35:0a:7f:7e:61:4a:1f:a7:ae:aa:68:09:be:80:a0:08:5c:42:e5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f2:a6:aa:9d:0a:d4:87:03:13:6b:49:d9:d7:73:fd:68:58:f3:05:93
Fingerprint (sha256): 28:e9:24:b3:09:13:78:99:aa:89:7e:e7:47:6f:6d:79:13:7b:70:44:9b:96:f7:33:a2:43:01:e6:3f:b5:11:f1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate eden.rugby

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eden.rugby

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akaranacityrifleclub.co.nz
aurfc.co.nz
belfastrugby.co.nz
bopgolf.co.nz
canterburywaterpolo.org.nz
cdcricket.co.nz
centralcitybaseball.org.nz
cliftoncricket.nz
cliftoncricketclub.co.nz
collegesportsportal.co.nz
crossrecreationcentre.co.nz
ctfc.co.nz
eden.rugby
edenrugby.co.nz
fastpitch.co.nz
flaxmillbaymotel.co.nz
goodmanrural.co.nz
greenislandbadmintonclub.net.nz
greertonmaristnz.org.nz
halswellunitedfc.co.nz
hampsteadclub.co.nz
harbourcityhockey.org.nz
harboursidenetball.co.nz
harboursidenetball.nz
havelocknorthbridgeclub.co.nz
hawkesbayrugbyreferees.co.nz
hawkfootball.org.nz
hbcricket.co.nz
hbmagpies.co.nz
hbreds.nz
hbrfu.co.nz
hbru.co.nz
healthyfamiliesinvercargill.org.nz
highlightcam.co.nz
hillseekers.co.nz
hillseekers4wd.co.nz
hockeymarlborough.org.nz
hpnc.org.nz
huttaikido.org.nz
invercargillnetball.co.nz
karakarugbyclub.co.nz
kjcc.org.nz
magpies.co.nz
maristrugby.org.nz
marsdensport.school.nz
merivalepap.co.nz
mesoball.co.nz
mtbtauranga.co.nz
mtsquashclub.co.nz
nelsonnetball.co.nz
netballsouthcanterbury.co.nz
northshorerugby.co.nz
nzblackpowder.nz
nzssfootball.co.nz
nzsssc.co.nz
nzsssc.org.nz
ojcc.org.nz
papakurarugbyleague.co.nz
papatoetoenorth.school.nz
photocard.co.nz
pngolf.co.nz
pointrugby.co.nz
rangatiragolf.co.nz
redcliffsbowls.co.nz
register4rugby.co.nz
registerforrugby.co.nz
schoolsport.nz
schoolsportnz.co.nz
schoolsportnz.org.nz
sctrials.co.nz
southlandschoolsport.org.nz
sportauckland.co.nz
sportauckland.nz
sportauckland.org.nz
sportslink.org.nz
sportspay.co.nz
sportsportal.co.nz
sportyapp.co.nz
sportynews.co.nz
supersixes.co.nz
tasmanvolley.org.nz
taurangafarmersmarket.co.nz
totaltouch.org.nz
tuki.co.nz
turbotouch.co.nz
turbotouch.org.nz
wellingtonsoftball.org.nz
westcoastsoftball.co.nz

Other certificates including the domain name eden.rugby

(limited to 100 certificates)
www.sportycrm.com
www.sportsground.com
sportycrm.com
eden.rugby
sporty.org.nz
hbnetball.co.nz
www.sportsground.com
www.cyclingsc.co.nz
sporty.org.nz
www.marlboroughtrampingclub.co.nz
www.membermanager.co.nz
www.membermanager.co.nz
sporty.org.nz
sporty.org.nz
www.eden.rugby
sporty.org.nz
eden.rugby
sked.co.nz
golfnorthland.co.nz
sporty.org.nz
sporty.org.nz
www.sporty.org.nz
cfc.co.nz
www.cfc.co.nz

Certificate

The complete raw certificate details for eden.rugby in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgR9WR0E2mkLM7NJxVR9r
/7bzZBOd03NttGCeT/u/gHQSlf1yd1RO/jOSfuLtjhJmgc47yT0eVUZmNk+9pT2B
3HiV6edAT7CvwX2W0L7XFYxvKSYLDf1BNipQBd8VlM8zFGcjNGtzCiEH4Rkmp2at
LrtJ5G7Dhh/xUpv0VOsbsfIyeOC9wwYzCqEHpa+SeBOT0nfKnnSGgU9Hbt+cWb2j
5CVlswUoQpcaNWm4VPpaF4GK+wMYLv1nyh0r6Q6wenpfaFR0BVNDMJSn56wKzu4I
muVlEWglmw2OPxmKFl21X0BBrFwdjm+4PEoEAo82SVjmQyF/zaVBV16rNm8BEzLW
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295059419741476014712570947720432504113544
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-30 21:58:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-30 21:58:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eden.rugby'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16300194203467315822464225298007150944824595168931522215833163299586548618138585889516338209878873689724981142454632442241483899283553608708231152212831422503200846656051202424804793874170741627465891774009185765427941889150650572408931145282474229818877873633864761674127076773836233823369487845617525179898462131483864395041883781312730500319354778727618299508505059747781005396579396407147933189790210639524801401461315237373167473227601742115423749729164865831691047599786021279835352477830910935341047608505215799858668270830790226891156146842475601049894162256115103145489817945852431290001416583939051515729479
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6350a7f7e614a1fa7aeaa6809be80a0085c42e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1827 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akaranacityrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belfastrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bopgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburywaterpolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralcitybaseball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliftoncricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliftoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegesportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossrecreationcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eden.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edenrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastpitch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaxmillbaymotel.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodmanrural.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenislandbadmintonclub.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greertonmaristnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halswellunitedfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hampsteadclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harbourcityhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harboursidenetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harboursidenetball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelocknorthbridgeclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbayrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbmagpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbreds.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbru.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyfamiliesinvercargill.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlightcam.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillseekers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillseekers4wd.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeymarlborough.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huttaikido.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invercargillnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakarugbyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristrugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsdensport.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merivalepap.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesoball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtbtauranga.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballsouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northshorerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzblackpowder.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzssfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsssc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsssc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ojcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakurarugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papatoetoenorth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photocard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pngolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pointrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangatiragolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redcliffsbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register4rugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registerforrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsport.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sctrials.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandschoolsport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportslink.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportspay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportyapp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportynews.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supersixes.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasmanvolley.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taurangafarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totaltouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westcoastsoftball.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168a0fbd30e0000040300473045022060b523c3b453f5a75b000bf2eb3bf7ce34b40aae1a2cdbe247ea8c117c22c5bc022100a979d910ede8df352411b85cc4ccfee057da292eb8ca54d8bdbfea0ef8f5164300750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168a0fbd306000004030046304402202a485fb5c65c35617e55cc2ae4a663592a9c399dad57e6d0919ee732b6765ab402201498f2c0deccbc1a41a118d90388c273e08f571813e294df9c664e142c29420a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0081fcefa41284ce2b54901c44d50f262b9f135e2380552bec554e50429ae6685ffb08b628caac37f87068c520938eb2113a0ef4b61886ff209c15d1ce40956b838ec65429230e9e4cd8735984b14bba6a088fe82939944cd8e823dbff73b4ef39fb5d24643854f4b7380a5fd74301153499d268f57dd8a932bc89df3cce46b705b23c2035f3461b221b2efde5fa98efb4ed852ae5c735b4a92d50adcadaa9dce86b316b1a07daf238733d76cfa2e2a4f8ece2d2989ec11a063b07bf311e07b2e3a7a8539cfd421cb23c3eadab201a4079817377be643666ee823a408de300b1041d3b680aa12f12b3a62de80439f5f715e1d5a209263a0db9c7d3aca11ad42a48