www.rugby-foundation.org.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:26:21:57:2e:67:22:a4:f6:d0:d9:3e:1c:f6:40:18:76:be was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.rugby-foundation.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:26:21:57:2e:67:22:a4:f6:d0:d9:3e:1c:f6:40:18:76:be
Serial Number (int): 274311904933126060731958581715868010968766
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c3:ea:1a:6c:2d:80:e5:3e:6a:f8:f5:92:e5:04:06:44:ce:f3:e8:d2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 72:f0:db:a3:8a:0e:2b:08:21:c8:6c:f0:a9:40:8a:77:9b:83:71:c0
Fingerprint (sha256): 35:ff:11:50:56:c8:4e:28:b7:92:39:f3:59:ed:6e:60:3b:1a:b1:20:10:df:9c:d6:c7:80:eb:36:b3:3d:4c:dc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.rugby-foundation.org.nz

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.rugby-foundation.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

swim.diocesan.school.nz
www.abundantlife.school.nz
www.ahiparagamefishclub.co.nz
www.ararimu.school.nz
www.ashleyforestrallysprint.co.nz
www.aucklandrugby.co.nz
www.aucklandsquashjuniors.nz
www.aucklandtouch.co.nz
www.beckenhamtennisclub.co.nz
www.boptouch.co.nz
www.bowlshawkesbay.org.nz
www.bowlswaikanae.com
www.capitaldarts.co.nz
www.cometswimming.co.nz
www.cornwallparktouch.nz
www.csa.org.nz
www.eakfc.org
www.ecbsoftball.org.nz
www.farmpass.co.nz
www.feildinglawnmowerracing.org.nz
www.generatenetwork.org
www.gisborneboardriders.com
www.glenfieldsoftballclub.co.nz
www.greertonponyclub.com
www.hamiltoncanoepolo.org.nz
www.harbourhockey.org.nz
www.hbcfc.co.nz
www.hbcfc.org.nz
www.hbsfc.co.nz
www.hockeysouthcanterbury.co.nz
www.hortpass.co.nz
www.hyc.org.nz
www.jcc.org.nz
www.juniorcricket.co.nz
www.jyf.co.nz
www.karakacricket.co.nz
www.karakatennis.co.nz
www.kensingtonfitness.co.nz
www.kiwikidz.co.nz
www.manurewaswimmingclub.co.nz
www.marketground.co.nz
www.marlborough-car-club.co.nz
www.marlboroughparktennis.co.nz
www.marlboroughvolleyball.org.nz
www.mtrbmx.co.nz
www.nelsonfarmersmarket.co.nz
www.nelsonfarmersmarket.org.nz
www.nelsonsoftball.org.nz
www.netballwairarapa.co.nz
www.nhcc.co.nz
www.northharbourcycling.co.nz
www.northharboursoftball.co.nz
www.nskfc.org.nz
www.nzpowerlifting.co.nz
www.otahuhuroversrugbyleague.co.nz
www.parafednorthland.co.nz
www.phcc.co.nz
www.playbowls.co.nz
www.playsoftball.co.nz
www.ponsonbybowls.nz
www.porritt.school.nz
www.prdf.co.nz
www.rangatiragolf.co.nz
www.ratec.org.nz
www.rbpc.nz
www.riverroad.co.nz
www.roosterssoftball.co.nz
www.rugby-foundation.org.nz
www.schoolsportaoraki.co.nz
www.southcanterburytouch.co.nz
www.southernlakesmultisportclub.co.nz
www.sportotago.co.nz
www.stewartalexander.co.nz
www.swim.diocesan.school.nz
www.tabletennissc.org.nz
www.taradale.co.nz
www.tasportscycling.co.nz
www.timarucyclingclub.co.nz
www.torbaytennis.org.nz
www.totaltouch.org.nz
www.touchnorthharbour.co.nz
www.touchpapamoa.co.nz
www.tuki.co.nz
www.twyford.school.nz
www.volleyballhb.org.nz
www.waiopehu.ac.nz
www.waiukuponyclub.co.nz
www.whangareitri.co.nz
www.wmcc.net.nz
www.woodendrugby.co.nz

Other certificates including the domain name rugby-foundation.org.nz

(limited to 100 certificates)
belmontparkbowlingclub.co.nz
sporty.co.nz
belmontparkbowlingclub.co.nz
www.sporty.co.nz
sporty.co.nz
www.rugby-foundation.org.nz
squashauckland.org.nz
www.karakacricket.co.nz
www.rugby-foundation.org.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.hockeysouthcanterbury.co.nz
sporty.co.nz
www.sporty.co.nz
www.rugby-foundation.org.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
belmontparkbowlingclub.co.nz
sporty.co.nz
www.rugby-foundation.org.nz
www.sporty.co.nz
trfu.co.nz
sporty.co.nz

Certificate

The complete raw certificate details for www.rugby-foundation.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHbG7XM2TV3E/DPpunQa
CLyGZDzjtcqqMNwZb7EwRXNSyhMZOYwTDvwNBDSdRmCrFoWFKEzvMPNLH3igC21C
knc890OHMAHirWx8B/L7cimNotdBwW0elaOur6dOJvsoeFwCZrhsLXcKjSBsaoug
nxXBXckPvuwBCCfT3HyUTStNe8OgTN5gIRRK+YWeoAMdEixSRiazQMJqYj0kMwtW
9hWDusjXtci8xR69hzyo1hQ0+e64n9N3duyjayfoWPavoPKb+xoXI0USy/uyOlE/
/Tp+MYsNTqzYKMuRu8KHJ7fyWqsiwjB7LZYe8eJ5bINOgOE0yDCSvolSxVPN62BK
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274311904933126060731958581715868010968766
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-22 22:56:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-22 22:56:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rugby-foundation.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17731933846856183810191647688505944481311322855608095011140982093067520483263243199248479166807382263092632641846220558936894264314868116831033949723939618522908680403784319636531535360724776856106169210101252717123637491517836320028803051440899180315251148081730157752523521294633048760172845230909712136107787655656181411979848258617258523892932328314389777517360387307886693952207813937423156597998813299422024805319320492581673789938373526838102060099823517733779543292080449418523145646073580120862886293446330932732855885137993648945058260948841846356712438333756827871484050409189366492754883151949798951635587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c3ea1a6c2d80e53e6af8f592e5040644cef3e8d2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2248 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swim.diocesan.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abundantlife.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahiparagamefishclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ararimu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashleyforestrallysprint.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandsquashjuniors.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandtouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beckenhamtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boptouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlshawkesbay.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswaikanae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitaldarts.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cometswimming.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornwallparktouch.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eakfc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecbsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmpass.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feildinglawnmowerracing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.generatenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gisborneboardriders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenfieldsoftballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greertonponyclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hamiltoncanoepolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harbourhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbsfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeysouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hortpass.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hyc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juniorcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jyf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakacricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakatennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kensingtonfitness.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiwikidz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manurewaswimmingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marketground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlborough-car-club.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughparktennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughvolleyball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtrbmx.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballwairarapa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northharbourcycling.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northharboursoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nskfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzpowerlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otahuhuroversrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parafednorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playsoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ponsonbybowls.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.porritt.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prdf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rangatiragolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ratec.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rbpc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverroad.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roosterssoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugby-foundation.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsportaoraki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcanterburytouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southernlakesmultisportclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportotago.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stewartalexander.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swim.diocesan.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tabletennissc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taradale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasportscycling.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timarucyclingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.torbaytennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.totaltouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchnorthharbour.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchpapamoa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twyford.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volleyballhb.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiopehu.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiukuponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareitri.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wmcc.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodendrugby.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016877fe13540000040300483046022100bf51131974c940f2f71d4560ed6935740bf98e686f06728e1747099625eba8650221009e6eba7054e31b0818a7d1e205b46d9077910cf6c0706f4188b08dd5515aab05007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016877fe13a60000040300463044022037ed7199722b276c48b33a200a45ed1106076023a3921680a46bff2493dcd213022069685e219133b1720dd35a896c479d1af2f62f80dca2541e9d65da23bf893657
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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