www.bowlswestcoast.org.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d5:ba:ce:87:32:f4:eb:69:e9:4a:c1:84:c1:d2:f0:ef:55 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bowlswestcoast.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d5:ba:ce:87:32:f4:eb:69:e9:4a:c1:84:c1:d2:f0:ef:55
Serial Number (int): 334065310711971988743226775836285989875541
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 14:22:6c:4c:2d:b3:5f:74:ec:a9:14:e5:a7:be:6e:d7:4f:4c:91:73
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 16:ec:85:90:27:2a:c4:18:de:7e:01:68:b0:02:38:90:4c:85:91:b7
Fingerprint (sha256): 31:32:b2:80:88:23:e3:f1:bf:bb:dc:b2:97:98:49:b8:97:5c:ed:f8:a0:f4:50:eb:7d:cd:e5:27:62:9c:c4:ff

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.bowlswestcoast.org.nz

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bowlswestcoast.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.athleticswanganui.co.nz
www.aucklandservicerifle.org.nz
www.baseballnewzealand.co.nz
www.baseballnewzealand.com
www.baseballnewzealand.org
www.baseballnz.com
www.bowlsdunedin.co.nz
www.bowlstaurangasouth.co.nz
www.bowlswestcoast.org.nz
www.canterburybaseball.co.nz
www.collegerifles.co.nz
www.countiesbadminton.co.nz
www.dairyflattennis.co.nz
www.developyourlegacy.co.nz
www.diamondblacks.co.nz
www.diamondblacks.com
www.diamondblacks.org.nz
www.diamondsport.co.nz
www.diamondsportnz.co.nz
www.diamondsportnz.com
www.diamondsports.co.nz
www.diamondsportsnz.co.nz
www.diamondsportsnz.com
www.distanceridingnewzealand.co.nz
www.gameoftwohalfwits.com
www.ghryc.co.nz
www.hcwaterpolo.co.nz
www.howicksailingclub.co.nz
www.hpbaseball.co.nz
www.hphawks.co.nz
www.hphawks.com
www.hrc.org.nz
www.kereru.school.nz
www.ladiessocialcycling.org.nz
www.lnissn.org.nz
www.lynnavon.org.nz
www.mahedrysdale.co.nz
www.mahedrysdale.com
www.manukaumasters.co.nz
www.maoribasketball.co.nz
www.maorirugby.co.nz
www.marewa.school.nz
www.marlborough-touch.co.nz
www.meeanee.school.nz
www.mmcc.co.nz
www.motuekatouch.co.nz
www.myhockey.co.nz
www.mysoftball.co.nz
www.newzealandbaseball.co.nz
www.nscbaseball.co.nz
www.nzsra.org.nz
www.opotikicol.school.nz
www.orokohangamusictrust.co.nz
www.papakurarugby.co.nz
www.poolburn.school.nz
www.ppnc.co.nz
www.rangi.school.nz
www.rosegardenscroquetclub.org.nz
www.rosmini.school.nz
www.royaloakracquets.co.nz
www.rugbysouthland.co.nz
www.rugbysouthlandreferees.co.nz
www.runwalkseries.co.nz
www.saintjosmatata.school.nz
www.softballauckland.org.nz
www.southbridgerugby.com
www.southcanterburybasketball.co.nz
www.southernrugby.co.nz
www.southlandfestivalofrunning.co.nz
www.southlandtriclub.co.nz
www.sportsouthland.co.nz
www.teeball.co.nz
www.tennismanawatu.org.nz
www.touchsouthland.co.nz
www.ulyssesnelson.org.nz
www.uniss.co.nz
www.upperhuttrifleclub.co.nz
www.waihibeachtennisclub.co.nz
www.waikaregolfclub.co.nz
www.wairarapacarclub.org.nz
www.wellingtonbaseball.co.nz
www.wellingtonbaseballassociation.co.nz
www.westaucklandafc.co.nz
www.westcoastsoftball.co.nz
www.whangamatasurf.co.nz
www.whangareirowingclub.org.nz
www.whangaroasportfishingclub.co.nz
www.willowpark.school.nz

Other certificates including the domain name bowlswestcoast.org.nz

(limited to 100 certificates)
oratiaunited.co.nz
sporty.co.nz
waibopfootball.co.nz
www.katikatifc.co.nz
www.bowlswestcoast.org.nz
pcbasketballclub.co.nz
pcbasketballclub.co.nz
sporty.co.nz
www.turbotouch.org.nz
keirunga.org.nz
karakasportspark.co.nz
www.manurewamets.co.nz
www.waitakerecityfc.org.nz
whangareirowingclub.org.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sportsground.co.nz
sportsground.co.nz
www.sportsground.com
www.aucklandsoftball.org.nz
sporty.co.nz
sporty.co.nz
www.brooklyncroquetclub.org
manurewamets.co.nz
sporty.co.nz
www.schoolground.nz
whangareirowingclub.org.nz
sporty.co.nz
sporty.co.nz
keirunga.org.nz
www.greenhithefootball.org
sportsground.co.nz
www.bowlswestcoast.org.nz

Certificate

The complete raw certificate details for www.bowlswestcoast.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiroDAf8l25nMev5pimd9
eHc3Wnn8XtRy99V6PuTkIIGiJG/rQ8sswGn9Niq6ubbvICidE4XnVAaquOp89ZAw
lTy5vZ0VF6jL348VJrvOQEjwJJBeAJpvwYelwsN/xVXTjWcxevKA6QP6POeg489F
kwZGneDl6DXiqxGqfck1eBxuqZHfJNzGCCHf1kzB3BhjHQdKMV2OHYSzqoMXgdES
2rxKhc/6h3FFiOxAXAz6MxmjuINtIvoJN/SIHmK1HhrJW7Amg+HLm4nxKkOtrsGg
M8CQ5p5Z4eW2nk4f4GAf572Voqz61W/kALS/kol4j5/6F9B64JuJB8fHfUv0UqAO
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334065310711971988743226775836285989875541
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-19 02:36:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-17 02:36:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bowlswestcoast.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17512611897522726169994329463906432706059547562836430398176676826429625916300029583309181804472068718987860511286447333316527257540621098917335351414297517683405069604543645087091624998112180692876176171251744718241502992101064926831658298997276372110068998491258011963958537658745414896091973401835932826069872943583778311823854332632176549707690462276766172542898333740323285252184925821115865184999398419932934906719809997825904379775788446248988532477294011339567161850656919642831212020743060855908304028229634173071461357270903399361732026144476399490991498443823412682850000542982107273084460745166085576199753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							14226c4c2db35f74eca914e5a7be6ed74f4c9173
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2301 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athleticswanganui.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandservicerifle.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnewzealand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnewzealand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsdunedin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlstaurangasouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswestcoast.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburybaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegerifles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countiesbadminton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dairyflattennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.developyourlegacy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondblacks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondblacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondblacks.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportsnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportsnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.distanceridingnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gameoftwohalfwits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghryc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcwaterpolo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicksailingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hphawks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hphawks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hrc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kereru.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ladiessocialcycling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lnissn.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lynnavon.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahedrysdale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahedrysdale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manukaumasters.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maoribasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maorirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marewa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlborough-touch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meeanee.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motuekatouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myhockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newzealandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nscbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzsra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opotikicol.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orokohangamusictrust.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakurarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poolburn.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ppnc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosegardenscroquetclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaloakracquets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbysouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbysouthlandreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runwalkseries.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintjosmatata.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softballauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southbridgerugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcanterburybasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southernrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandfestivalofrunning.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandtriclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teeball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tennismanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ulyssesnelson.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uniss.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upperhuttrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihibeachtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikaregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wairarapacarclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonbaseballassociation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westaucklandafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westcoastsoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangamatasurf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareirowingclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangaroasportfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.willowpark.school.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e81bbca5e000004030047304502205778b9d0f3a1a2362a049e7bfe82500c183b5b84f1420eeda6634c82854799df022100d1c63240fa9ad82f3e8f693fde85bfa692030c1ce976142349b126156417792a007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e81bbca4b000004030047304502201ba0df9d671fdb8c2217f545f241f3d0537c5ed2c3a409982a4596e9db037fb0022100860b65a36717820f07cec543e980cc18104d9c6656aee22ca1f82f887e9f495c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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