sporty.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f5:65:66:38:f4:7f:5f:25:c5:4e:f7:39:12:16:ca:fa:1f was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f5:65:66:38:f4:7f:5f:25:c5:4e:f7:39:12:16:ca:fa:1f
Serial Number (int): 344840820487950539624521346807567248718367
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3b:c1:42:46:cd:03:49:ea:fb:f1:3b:b6:23:f5:a1:06:b3:6c:5b:c7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9c:8c:ac:dc:37:07:1a:42:78:63:4c:0b:49:62:95:10:39:e3:7b:b5
Fingerprint (sha256): 35:82:81:9b:59:f0:88:95:b9:9e:61:5f:97:0d:4c:c8:99:f2:1c:c2:76:98:7b:ea:28:50:0d:a8:e0:6f:63:a4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sporty.co.nz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amdg.org.nz
aucklandleague.co.nz
avalonrugby.co.nz
badminton.org.nz
bayofislandsdressagegroup.co.nz
blokarthb.co.nz
bluerovers.co.nz
bowlsbop.co.nz
bowlsstadium.nz
brownsbaybowls.org.nz
burnsiderugby.co.nz
canterburycountrycricket.co.nz
canterburyunited.co.nz
capitalbaseball.co.nz
cathcollege.school.nz
chchfootballsquash.co.nz
christchurchmetrocricket.co.nz
christchurchmetrocricket.com
christchurchmetrocricket.org
christchurchmetrocricket.org.nz
clubsnzdarts.co.nz
darfieldcricket.co.nz
darfieldrugby.co.nz
dunedinnetball.co.nz
eastcoastexpo.co.nz
frasertechcricket.nz
havelockski.org.nz
hawkesbayfarmersmarket.co.nz
hawkesbaysquash.co.nz
hbbusinesshub.co.nz
hbbusinesshub.nz
hnhs.school.nz
hni.school.nz
hnwafc.org.nz
hockeywairarapa.org.nz
hsobburnside.co.nz
kapitigymsports.co.nz
kapitisoftball.co.nz
kaumatuatc.org.nz
kerikerimtbclub.co.nz
lincolnbowlingclub.co.nz
maristalbion.co.nz
maristinvercargill.co.nz
marlinsnetball.co.nz
mcobsquash.co.nz
mooloo.co.nz
mooloocommunityrugby.co.nz
moonshinetrail.co.nz
mpcricket.org.nz
netballwaitakere.co.nz
northgolf.nz
northharbourwaterpolo.co.nz
otta.org.nz
otumoetaifootball.co.nz
papakuranetball.nz
pauanuilifeguards.org.nz
playsoftball.co.nz
prebbletonfootball.co.nz
primarysportscanterbury.org.nz
pukekohesoftball.co.nz
purc.co.nz
rowandale.school.nz
royaloakbowls.co.nz
rugby-foundation.org.nz
rugbyfoundation.co.nz
rugbyfoundation.com
rugbyfoundation.nz
sailhbc.org.nz
sharkssports.co.nz
silverdalerugby.co.nz
sporthb.co.nz
sporthb.net.nz
sporthbchb.co.nz
sporthbwairoa.co.nz
sporty.co.nz
squashauckland.org.nz
storans.school.nz
sumnerbowls.co.nz
takapunarugby.co.nz
taupohockey.co.nz
ths.school.nz
touchnz.co.nz
touchnz.nz
trfu.co.nz
wahinetoamcc.nz
whangareinetball.co.nz
worldpowerlifting.nz
wsra.nz
zephyr.org.nz

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
turbotouch.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
mtrbmx.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporthb.net.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
uat.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz

Certificate

The complete raw certificate details for sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFmOk8h4oXmwBqrONVrq
0pDKPaqZ94ZDLbGRa6RQKygdyW8yoW2ogTrKQ0+m0/PC90ldBmRcK1hOknmxlDHL
a/3w94jmehw+B0C5OyzL57V+xjyob46HY7LFsvqz3iQde2EH5l6y/Uv+tn/GpdJb
6sYHqFvspeBdDXuC/DDms9bLz1z6Qx5/5HcOgA/OlRejQhRTc9EAQrtn/RxVgqem
6qrmMUtAwf80YAopcR3PzHwFf7XRISQBrKAgJmDfYTmxJF/k57Xn7lefE5WlYadU
OE//ujvgjdmYjaXBJpdISOXwkk5rOFv/5PIHyg41D3daIDzQrglQq58PqwjsB/dx
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344840820487950539624521346807567248718367
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 01:25:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 01:25:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16202665209944595843133528374264643077440078570851443345225530326871436253602124602787935379144722417452751294886270447234943394973502066576010219525852500140366407374252495234307561283678300185262030601352434961487396921600497228448639332033021667511407209783746288848071212816664598511813063862249321956828581367280741330069304284524212583050753091452735529127330818971164290800377736134441093903702933229996061228250604128495693671956512259879198305689736329608667518376677325846319371966649376544835419452034059161720094620713602044699017883279948217028433535303123942534259412672170335123380719579519267194237219
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3bc14246cd0349eafbf13bb623f5a106b36c5bc7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1867 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amdg.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avalonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badminton.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayofislandsdressagegroup.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blokarthb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluerovers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlsbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlsstadium.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brownsbaybowls.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burnsiderugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburycountrycricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburyunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathcollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chchfootballsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchmetrocricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchmetrocricket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchmetrocricket.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchmetrocricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubsnzdarts.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darfieldcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darfieldrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunedinnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastcoastexpo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frasertechcricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelockski.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbayfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbaysquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbbusinesshub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbbusinesshub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hnhs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hni.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hnwafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeywairarapa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsobburnside.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapitigymsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapitisoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaumatuatc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kerikerimtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolnbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristalbion.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristinvercargill.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlinsnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcobsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mooloo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mooloocommunityrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moonshinetrail.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpcricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballwaitakere.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northgolf.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northharbourwaterpolo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otta.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otumoetaifootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakuranetball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pauanuilifeguards.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playsoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primarysportscanterbury.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pukekohesoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rowandale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaloakbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugby-foundation.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbyfoundation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbyfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbyfoundation.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sailhbc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharkssports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverdalerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporthb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporthb.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporthbchb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporthbwairoa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squashauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storans.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumnerbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takapunarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taupohockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ths.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchnz.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wahinetoamcc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareinetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldpowerlifting.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsra.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zephyr.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016afc420f180000040300473045022100e0c060e2430ea21a9292059cf8d4bcba2272ad712c6253c9f374a4b33932b5f902206d00993f818797bfbf3ff70950b0fac24f16ae651fde4ce3cbdf4ec0efd519f300770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016afc420f050000040300483046022100cc2898fb5aa04c770fc6a897cb6b488d7d09cd7e8f92b74ece7d4c52eaceda88022100fc1affa58f47c9f26a11fa546ad423e61345a6ad41f6ec39d3eae40224e69823
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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