www.stuff.co.nz

- STUFF LIMITED -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:1c:5e:04:f9:6e:53:17:7c:52:b6:3e:d3:92:85:a8 was issued on by DigiCert Inc.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

STUFF LIMITED

Organization: STUFF LIMITED
Locality: Wellington
Country: NZ

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:1c:5e:04:f9:6e:53:17:7c:52:b6:3e:d3:92:85:a8
Serial Number (int): 6793431231574089527519236801724319144
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b9:24:32:11:b3:39:67:a1:cc:a7:4f:f3:39:ef:66:30:9a:5c:ee:1e
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): d6:f5:5f:18:15:f8:8e:31:2f:53:1c:23:fd:8f:de:2c:02:e6:4c:ad
Fingerprint (sha256): 32:54:c4:7d:84:7c:55:b0:0b:95:c4:a4:1a:52:83:2b:e8:65:ef:ca:35:92:e1:a9:f0:d6:b4:e3:db:08:95:ad

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate www.stuff.co.nz

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.stuff.co.nz

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.stuff.co.nz
99.fairfaxmedia.co.nz
about.stuff.co.nz
accounts-dev.stuff.co.nz
accounts-preprod.stuff.co.nz
accounts.stuff.co.nz
advertise-staging.stuff.co.nz
advertise.fairfaxmedia.co.nz
advertise.stuff.co.nz
api-preprod.stuff.co.nz
api-staging.stuffads.co.nz
api.stuff.co.nz
api.stuffads.co.nz
assets.stuff.co.nz
audiencefinder.stuff.co.nz
canary-preprod.stuff.co.nz
canary.stuff.co.nz
cdn-my-devint.stuff.co.nz
cdn-my-preprod.stuff.co.nz
cdn-my.stuff.co.nz
conair-devint.stuff.co.nz
conair-staging.stuff.co.nz
conair.stuff.co.nz
file2.stuff.co.nz
i-preprod.stuff.co.nz
i.preprod.stuff.co.nz
i.stuff.co.nz
identity-staging.stuff.co.nz
identity-uat.stuff.co.nz
identity.stuff.co.nz
interactives.stuff.co.nz
making.stuff.co.nz
marketing.play.stuff.co.nz
media.stuff.co.nz
my-devint.stuff.co.nz
my-preprod.stuff.co.nz
my.preprod.stuff.co.nz
my.stuff.co.nz
np.fairfaxmedia.co.nz
nzcms.fairfaxmedia.co.nz
nznp.fairfaxmedia.co.nz
payments-dev.stuff.co.nz
payments-preprod.stuff.co.nz
payments.stuff.co.nz
play.stuff.co.nz
production-ugc-api.fairfaxmedia.co.nz
production-ugc.fairfaxmedia.co.nz
resources-preprod.stuff.co.nz
resources.stuff.co.nz
sponsoredinteractive.stuff.co.nz
staging-nzcms.fairfaxmedia.co.nz
staging-ugc-api.fairfaxmedia.co.nz
staging-ugc.fairfaxmedia.co.nz
static.fairfaxmedia.co.nz
static.stuff.co.nz
static2.stuff.co.nz
static3.stuff.co.nz
stuff.co.nz
technology.fairfaxmedia.co.nz
uat-ugc-api.fairfaxmedia.co.nz
uat-ugc.fairfaxmedia.co.nz
ugc-api.stuff.co.nz
ugc.stuff.co.nz
widgets.stuff.co.nz
www-alpha-preprod.stuff.co.nz
www-alpha.stuff.co.nz
www-preprod.stuff.co.nz
www-staging.stuffads.co.nz
www.bestonthebox.co.nz
www.fairfaxmagazines.co.nz
www.preprod.stuff.co.nz
www.stuffads.co.nz

Other certificates including the domain name stuff.co.nz

(limited to 100 certificates)
*.stuff.co.nz
deaths.stuff.co.nz
composer.contentstaging.shift21.ffx.nz
popshop.stuff.co.nz
t.comms.stuff.co.nz
coupons.stuff.co.nz
*.stuff.co.nz
*.stuff.co.nz
www.communications.stuff.co.nz
www.stuff.co.nz
coupons.stuff.co.nz
www.stuff.co.nz
social.stuff.co.nz
shop.stuff.co.nz
*.stuff.co.nz
*.stuff.co.nz
events.stuff.co.nz
www.stuff.co.nz
coupons.stuff.co.nz
stuff.co.nz
*.preprod.stuff.co.nz
stuff.co.nz
www.stuff.co.nz
www.stuff.co.nz
*.stuff.co.nz
playwidget.stuff.co.nz
somniture.stuff.co.nz
somniture.stuff.co.nz
devices.play.stuff.co.nz
my.preprod.stuff.co.nz
prospective2.shared.global.fastly.net
*.stuff.co.nz
www.stuff.co.nz
subscribers.theage.com.au
*.stuff.co.nz
prospective2.shared.global.fastly.net
*.fairfaxmedia.com.au
prospective2.shared.global.fastly.net
*.stuff.co.nz
stuff.co.nz
*.preprod.stuff.co.nz
prospective2.shared.global.fastly.net
test.communications.stuff.co.nz
ssl470690.cloudflaressl.com
pressphotocomp.stuff.co.nz
www.stuff.co.nz
*.stuff.co.nz
www.stuff.co.nz
prospective2.shared.global.fastly.net
www.stuff.co.nz
*.stuff.co.nz
prospective2.shared.global.fastly.net
prospective2.shared.global.fastly.net
analytics.stuff.co.nz
prospective2.shared.global.fastly.net
somniture.stuff.co.nz
*.preprod.stuff.co.nz
shop.stuff.co.nz
*.preprod.stuff.co.nz
prospective2.shared.global.fastly.net
deaths.stuff.co.nz
www.communications.stuff.co.nz
www.stuff.co.nz
*.stuff.co.nz
prospective2.shared.global.fastly.net
*.idm.stuff.co.nz
stuff.co.nz
www.stuff.co.nz
www.stuff.co.nz
pressfanzone.stuff.co.nz
www.stuff.co.nz
*.preprod.stuff.co.nz
shop.stuff.co.nz
*.stuff.co.nz
events.stuff.co.nz
*.stuff.co.nz
stuff.co.nz
shop.stuff.co.nz
www.stuff.co.nz
www.stuff.co.nz
ssl470689.cloudflaressl.com
www.communications.stuff.co.nz
somniture.stuff.co.nz
stuff.co.nz
*.stuff.co.nz
deaths.stuff.co.nz
stuff.co.nz
knowthecrew.stuff.co.nz
prospective2.shared.global.fastly.net
play.stuff.co.nz
popshop.stuff.co.nz
www.stuff.co.nz
shop.stuff.co.nz
*.preprod.stuff.co.nz
stuff.co.nz
www.stuff.co.nz
www.stuff.co.nz
playwidget.stuff.co.nz
prospective2.shared.global.fastly.net
*.stuff.co.nz

Certificate

The complete raw certificate details for www.stuff.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEq/J6EHVTSGJcDBeQIX0WjNpjLR/X
mNvNlsb8zOkOmQIGSUQ+Boj23l/onPIpnIGJNMD0Uo6FVzI8gEXHKKyViQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6793431231574089527519236801724319144
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wellington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'STUFF LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.stuff.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004abf27a10755348625c0c1790217d168cda632d1fd798dbcd96c6fccce90e99020649443e0688f6de5fe89cf2299c818934c0f4528e8557323c8045c728ac9589
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b9243211b33967a1cca74ff339ef66309a5cee1e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1789 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '99.fairfaxmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-dev.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-preprod.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advertise-staging.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advertise.fairfaxmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advertise.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-preprod.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-staging.stuffads.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stuffads.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audiencefinder.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canary-preprod.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canary.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-my-devint.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-my-preprod.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-my.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conair-devint.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conair-staging.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conair.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'file2.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-preprod.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.preprod.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-staging.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-uat.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactives.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'making.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.play.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-devint.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-preprod.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.preprod.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np.fairfaxmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzcms.fairfaxmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nznp.fairfaxmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments-dev.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments-preprod.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production-ugc-api.fairfaxmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production-ugc.fairfaxmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources-preprod.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sponsoredinteractive.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-nzcms.fairfaxmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-ugc-api.fairfaxmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-ugc.fairfaxmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.fairfaxmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technology.fairfaxmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-ugc-api.fairfaxmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-ugc.fairfaxmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugc-api.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugc.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-alpha-preprod.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-alpha.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-preprod.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-staging.stuffads.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestonthebox.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fairfaxmagazines.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stuffads.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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