www.hbcricket.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ee:ff:e1:52:de:c2:74:fc:74:45:ed:34:77:af:d0:84:b2 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.hbcricket.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ee:ff:e1:52:de:c2:74:fc:74:45:ed:34:77:af:d0:84:b2
Serial Number (int): 342664184208988839225047033925110273705138
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 89:e4:c7:d4:f1:36:a2:7b:ad:ae:23:8d:ca:6c:21:a4:67:b8:e5:64
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): be:4a:57:06:ba:e1:57:48:ff:08:81:35:0e:b9:48:9d:48:db:70:a1
Fingerprint (sha256): 2a:89:8e:8c:e8:cb:e2:a8:52:62:85:6a:71:bd:b6:de:45:85:96:dd:7b:6e:53:83:1b:f9:a4:e8:cc:14:ae:bd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.hbcricket.co.nz

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hbcricket.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aklbadminton.com
arts.diocesan.school.nz
cjrs.co.nz
courtinthebay.co.nz
kaiapoinetball.co.nz
kirweenetball.co.nz
masseyrfc.co.nz
mca.org.nz
mcnetball.co.nz
ngaiwi.school.nz
patumahoerugby.co.nz
prebbletonrugby.co.nz
sport.aotea.school.nz
tairuaslsc.org.nz
taurangasports.co.nz
tearohafootball.com
tepukesports.co.nz
waitematarugby.co.nz
warkworthnetballclub.com
www.aklbadminton.com
www.belfastrugby.co.nz
www.bopgolf.co.nz
www.bophockey.co.nz
www.brownsbaybowls.org.nz
www.burnsiderugby.co.nz
www.canterburycountrycricket.co.nz
www.cathcollege.school.nz
www.cdcricket.co.nz
www.chchfootballsquash.co.nz
www.cjrs.co.nz
www.courtinthebay.co.nz
www.darfieldrugby.co.nz
www.eastcoastexpo.co.nz
www.gonville.school.nz
www.greenislandbadmintonclub.net.nz
www.greertonmaristnz.org.nz
www.hampsteadrugby.co.nz
www.havelocknorthbridgeclub.co.nz
www.havelockski.org.nz
www.hawkesbayfarmersmarket.co.nz
www.hawkesbaysquash.co.nz
www.hbcricket.co.nz
www.hnhs.school.nz
www.hpnc.org.nz
www.invercargillnetball.co.nz
www.kaiapoinetball.co.nz
www.kaitaiacollege.school.nz
www.kapitigymsports.co.nz
www.kirweenetball.co.nz
www.kjcc.org.nz
www.mandevillesports.co.nz
www.maraetaitennis.co.nz
www.masseyrfc.co.nz
www.mca.org.nz
www.mcnetball.co.nz
www.merivalepap.co.nz
www.mgcarclubcanterbury.nz
www.mpcricket.org.nz
www.netballwaitakere.co.nz
www.ngaiwi.school.nz
www.northcanterburyrugby.co.nz
www.northharbourwaterpolo.co.nz
www.northshorerugby.co.nz
www.nzpca.org
www.nzssfootball.co.nz
www.otta.org.nz
www.papatoetoenorth.school.nz
www.patumahoerugby.co.nz
www.pointrugby.co.nz
www.ponekerugby.com
www.prebbletonrugby.co.nz
www.primarysportscanterbury.org.nz
www.sctrials.co.nz
www.silverdalerugby.co.nz
www.sportauckland.co.nz
www.sportauckland.org.nz
www.sportslink.org.nz
www.sportspark.co.nz
www.supersixes.co.nz
www.tabletennissouth.org.nz
www.tairuaslsc.org.nz
www.taupohockey.co.nz
www.taurangasports.co.nz
www.tearohafootball.com
www.tepukesports.co.nz
www.waikatogolf.co.nz
www.waikatogolf.nz
www.waitematarugby.co.nz
www.warkworthnetballclub.com
www.zephyr.org.nz

Other certificates including the domain name hbcricket.co.nz

(limited to 100 certificates)
www.hblp.co.nz
supersixes.co.nz
eden.rugby
www.hbcricket.co.nz
www.mysporty.co.nz
hbcricket.co.nz
www.sportslink.org.nz
maristrugby.org.nz
hbnetball.co.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.mysporty.co.nz
ctfc.co.nz
sporty.org.nz
www.hbcricket.co.nz
www.bowlsnapier.co.nz
www.lincolnbowlingclub.co.nz
turbotouch.co.nz
sporty.org.nz
sporty.org.nz
starling.org.nz
www.hbcricket.co.nz
bowlsnapier.co.nz
www.mysporty.co.nz
eden.rugby
sked.co.nz
www.mysporty.co.nz
bowlsnapier.co.nz

Certificate

The complete raw certificate details for www.hbcricket.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINujCCDKKgAwIBAgISA+7/4VLewnT8dEXtNHev0ISyMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDQwMjQxMTVaFw0y
MDA2MDIwMjQxMTVaMB4xHDAaBgNVBAMTE3d3dy5oYmNyaWNrZXQuY28ubnowggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRudgjYtYjTddykANB+l51sAla
6Bjs1ZENjtmuonDHRtQVvxcZnSs3118sO5nKwLyLEREgtpm/ffc76GpncB1aSNcp
f1TXywy75lZV4mJlHUeb+Hv+iFrfiXcMc06/AcuncQ79s8tAEKGXNKWJGYGpHzSE
cNce7tHXuJcNvOXa2ATLVEmYPOHVLiaCSJv/QH8zIYiWUB79cKtKC8IfaGOk0cjE
hC35x1myRFZJYYX7TlsueMQADBubnfJLSZVSXJm3scKwv9ZN1OufsPwobxFu8rOw
0YD3PQKbpNfAng/k0seFQDc/fQG0zUMgHDyKWLAmCjS6eqq0rD6N5BpwcEeVAgMB
AAGjggrEMIIKwDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFInkx9TxNqJ7ra4jjcps
IaRnuOVkMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF
BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy
eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy
eXB0Lm9yZy8wggh2BgNVHREEgghtMIIIaYIQYWtsYmFkbWludG9uLmNvbYIXYXJ0
cy5kaW9jZXNhbi5zY2hvb2wubnqCCmNqcnMuY28ubnqCE2NvdXJ0aW50aGViYXku
Y28ubnqCFGthaWFwb2luZXRiYWxsLmNvLm56ghNraXJ3ZWVuZXRiYWxsLmNvLm56
gg9tYXNzZXlyZmMuY28ubnqCCm1jYS5vcmcubnqCD21jbmV0YmFsbC5jby5ueoIQ
bmdhaXdpLnNjaG9vbC5ueoIUcGF0dW1haG9lcnVnYnkuY28ubnqCFXByZWJibGV0
b25ydWdieS5jby5ueoIVc3BvcnQuYW90ZWEuc2Nob29sLm56ghF0YWlydWFzbHNj
Lm9yZy5ueoIUdGF1cmFuZ2FzcG9ydHMuY28ubnqCE3RlYXJvaGFmb290YmFsbC5j
b22CEnRlcHVrZXNwb3J0cy5jby5ueoIUd2FpdGVtYXRhcnVnYnkuY28ubnqCGHdh
cmt3b3J0aG5ldGJhbGxjbHViLmNvbYIUd3d3LmFrbGJhZG1pbnRvbi5jb22CFnd3
dy5iZWxmYXN0cnVnYnkuY28ubnqCEXd3dy5ib3Bnb2xmLmNvLm56ghN3d3cuYm9w
aG9ja2V5LmNvLm56ghl3d3cuYnJvd25zYmF5Ym93bHMub3JnLm56ghd3d3cuYnVy
bnNpZGVydWdieS5jby5ueoIid3d3LmNhbnRlcmJ1cnljb3VudHJ5Y3JpY2tldC5j
by5ueoIZd3d3LmNhdGhjb2xsZWdlLnNjaG9vbC5ueoITd3d3LmNkY3JpY2tldC5j
by5ueoIcd3d3LmNoY2hmb290YmFsbHNxdWFzaC5jby5ueoIOd3d3LmNqcnMuY28u
bnqCF3d3dy5jb3VydGludGhlYmF5LmNvLm56ghd3d3cuZGFyZmllbGRydWdieS5j
by5ueoIXd3d3LmVhc3Rjb2FzdGV4cG8uY28ubnqCFnd3dy5nb252aWxsZS5zY2hv
b2wubnqCI3d3dy5ncmVlbmlzbGFuZGJhZG1pbnRvbmNsdWIubmV0Lm56ght3d3cu
Z3JlZXJ0b25tYXJpc3Ruei5vcmcubnqCGHd3dy5oYW1wc3RlYWRydWdieS5jby5u
eoIhd3d3LmhhdmVsb2Nrbm9ydGhicmlkZ2VjbHViLmNvLm56ghZ3d3cuaGF2ZWxv
Y2tza2kub3JnLm56giB3d3cuaGF3a2VzYmF5ZmFybWVyc21hcmtldC5jby5ueoIZ
d3d3Lmhhd2tlc2JheXNxdWFzaC5jby5ueoITd3d3LmhiY3JpY2tldC5jby5ueoIS
d3d3LmhuaHMuc2Nob29sLm56gg93d3cuaHBuYy5vcmcubnqCHXd3dy5pbnZlcmNh
cmdpbGxuZXRiYWxsLmNvLm56ghh3d3cua2FpYXBvaW5ldGJhbGwuY28ubnqCHHd3
dy5rYWl0YWlhY29sbGVnZS5zY2hvb2wubnqCGXd3dy5rYXBpdGlneW1zcG9ydHMu
Y28ubnqCF3d3dy5raXJ3ZWVuZXRiYWxsLmNvLm56gg93d3cua2pjYy5vcmcubnqC
Gnd3dy5tYW5kZXZpbGxlc3BvcnRzLmNvLm56ghh3d3cubWFyYWV0YWl0ZW5uaXMu
Y28ubnqCE3d3dy5tYXNzZXlyZmMuY28ubnqCDnd3dy5tY2Eub3JnLm56ghN3d3cu
bWNuZXRiYWxsLmNvLm56ghV3d3cubWVyaXZhbGVwYXAuY28ubnqCGnd3dy5tZ2Nh
cmNsdWJjYW50ZXJidXJ5Lm56ghR3d3cubXBjcmlja2V0Lm9yZy5ueoIad3d3Lm5l
dGJhbGx3YWl0YWtlcmUuY28ubnqCFHd3dy5uZ2Fpd2kuc2Nob29sLm56gh53d3cu
bm9ydGhjYW50ZXJidXJ5cnVnYnkuY28ubnqCH3d3dy5ub3J0aGhhcmJvdXJ3YXRl
cnBvbG8uY28ubnqCGXd3dy5ub3J0aHNob3JlcnVnYnkuY28ubnqCDXd3dy5uenBj
YS5vcmeCFnd3dy5uenNzZm9vdGJhbGwuY28ubnqCD3d3dy5vdHRhLm9yZy5ueoId
d3d3LnBhcGF0b2V0b2Vub3J0aC5zY2hvb2wubnqCGHd3dy5wYXR1bWFob2VydWdi
eS5jby5ueoIUd3d3LnBvaW50cnVnYnkuY28ubnqCE3d3dy5wb25la2VydWdieS5j
b22CGXd3dy5wcmViYmxldG9ucnVnYnkuY28ubnqCInd3dy5wcmltYXJ5c3BvcnRz
Y2FudGVyYnVyeS5vcmcubnqCEnd3dy5zY3RyaWFscy5jby5ueoIZd3d3LnNpbHZl
cmRhbGVydWdieS5jby5ueoIXd3d3LnNwb3J0YXVja2xhbmQuY28ubnqCGHd3dy5z
cG9ydGF1Y2tsYW5kLm9yZy5ueoIVd3d3LnNwb3J0c2xpbmsub3JnLm56ghR3d3cu
c3BvcnRzcGFyay5jby5ueoIUd3d3LnN1cGVyc2l4ZXMuY28ubnqCG3d3dy50YWJs
ZXRlbm5pc3NvdXRoLm9yZy5ueoIVd3d3LnRhaXJ1YXNsc2Mub3JnLm56ghV3d3cu
dGF1cG9ob2NrZXkuY28ubnqCGHd3dy50YXVyYW5nYXNwb3J0cy5jby5ueoIXd3d3
LnRlYXJvaGFmb290YmFsbC5jb22CFnd3dy50ZXB1a2VzcG9ydHMuY28ubnqCFXd3
dy53YWlrYXRvZ29sZi5jby5ueoISd3d3LndhaWthdG9nb2xmLm56ghh3d3cud2Fp
dGVtYXRhcnVnYnkuY28ubnqCHHd3dy53YXJrd29ydGhuZXRiYWxsY2x1Yi5jb22C
EXd3dy56ZXBoeXIub3JnLm56MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB
gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn
MIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcAXqdz+d9WwOe1Nkh90EngMnqRmgyE
oRIShBh1loFxRVgAAAFwo6Id6QAABAMASDBGAiEAstoxhqMFhRBIb+Z9eplqy9A1
ZNVNd4tW6Js2PSQL3vICIQDcv33UgB2Vnw6eCwti/zfOv7eRtGGmNG9qB1i2oYAG
MwB3ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABcKOiHdkAAAQD
AEgwRgIhANVz9Wl0KAiYHL0Z0Oz6ZINvNNJlkauBu/crBjRA8/f+AiEAjGVQe5Or
StkxUY7rfor+uGd43ZdqbkPRTkJe9Pcf/cwwDQYJKoZIhvcNAQELBQADggEBAAUh
UXWE6kOjJk7y9slWv7f+jg6SkRL2yy8S6g52nS1vjzTzcOxHqJD4auZoa/ntuj12
x2zBE0VK3ApLRxLSPEBUHU44SpmpHN9O8MWLbcUGWT4SVfGpy6rpaJ4EvRC1du2x
v0lpgN9ZO7ArZU0BGxp3RNJunDcZ1gL7Ap2BEQo3MMaCmIWdkcNva/H6TGBXUlGB
mrvedQuMTTF9oHK3CkR/Jkem2eOBTAmuCZ8g4gBhhwmMd+Ji3Ms+/5nM3wADGxA8
61f0+XKbhxcOKDOXOLHef9MTmhmjwRVGrjGqoNTn0cdgnhKSNxOemfV+NsXDqlwG
Jz9LlKuSq3OMk/FU8C8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bnYI2LWI03XcpADQfpe
dbAJWugY7NWRDY7ZrqJwx0bUFb8XGZ0rN9dfLDuZysC8ixERILaZv333O+hqZ3Ad
WkjXKX9U18sMu+ZWVeJiZR1Hm/h7/oha34l3DHNOvwHLp3EO/bPLQBChlzSliRmB
qR80hHDXHu7R17iXDbzl2tgEy1RJmDzh1S4mgkib/0B/MyGIllAe/XCrSgvCH2hj
pNHIxIQt+cdZskRWSWGF+05bLnjEAAwbm53yS0mVUlyZt7HCsL/WTdTrn7D8KG8R
bvKzsNGA9z0Cm6TXwJ4P5NLHhUA3P30BtM1DIBw8iliwJgo0unqqtKw+jeQacHBH
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342664184208988839225047033925110273705138
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 02:41:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 02:41:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hbcricket.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26475448972870113114332597100351134446934830910648649323925000908345749810659898849431858841694347070509752845674692774011813279226487764692666747126627611050405552329949267393881983444405157574364048888573246884076862649684522502762855300405978967432681540790455538620980020227050799984935762995629681722915323110103122811933718402628757711778546568753964030197998680506408609896333681737139682455569705843240401475022049771523924532818265976904978676000170671421039892533149106988971297159138081323408505330503818498961960843850082955526311084409087034679674578200049043807441527793471468661642077422432960988071829
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							89e4c7d4f136a27badae238dca6c21a467b8e564
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aklbadminton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arts.diocesan.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjrs.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courtinthebay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaiapoinetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirweenetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masseyrfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mca.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngaiwi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patumahoerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport.aotea.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tairuaslsc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taurangasports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tearohafootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tepukesports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitematarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warkworthnetballclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aklbadminton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belfastrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bopgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bophockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brownsbaybowls.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burnsiderugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburycountrycricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathcollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chchfootballsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cjrs.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courtinthebay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darfieldrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastcoastexpo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gonville.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenislandbadmintonclub.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greertonmaristnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hampsteadrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havelocknorthbridgeclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havelockski.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbayfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbaysquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hnhs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invercargillnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaiapoinetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaitaiacollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kapitigymsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirweenetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kjcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mandevillesports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maraetaitennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masseyrfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mca.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.merivalepap.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mgcarclubcanterbury.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mpcricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballwaitakere.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ngaiwi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northharbourwaterpolo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northshorerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzpca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzssfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otta.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papatoetoenorth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patumahoerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pointrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ponekerugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prebbletonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primarysportscanterbury.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sctrials.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.silverdalerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportauckland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportslink.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supersixes.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tabletennissouth.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tairuaslsc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taupohockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taurangasports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tearohafootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tepukesports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikatogolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikatogolf.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitematarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warkworthnetballclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zephyr.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170a3a21de90000040300483046022100b2da3186a3058510486fe67d7a996acbd03564d54d778b56e89b363d240bdef2022100dcbf7dd4801d959f0e9e0b0b62ff37cebfb791b461a6346f6a0758b6a1800633007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a3a21dd90000040300483046022100d573f569742808981cbd19d0ecfa64836f34d26591ab81bbf72b063440f3f7fe0221008c65507b93ab4ad931518eeb7e8afeb86778dd976a6e43d14e425ef4f71ffdcc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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