www.sportslink.org.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f3:06:ce:18:a9:92:80:6e:07:ad:75:68:6a:93:40:63:58 was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sportslink.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f3:06:ce:18:a9:92:80:6e:07:ad:75:68:6a:93:40:63:58
Serial Number (int): 344034518438409084257292157854059025425240
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: eb:85:aa:b4:37:36:ae:8e:4b:bc:39:22:8e:91:d0:4e:cc:59:3d:d3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7c:2b:60:8c:c4:04:a6:70:67:74:86:7d:a6:5c:7d:71:32:c3:59:79
Fingerprint (sha256): 37:0f:1d:8b:0f:03:68:4e:2b:32:b8:b8:cc:6f:cf:05:61:1b:e0:5d:0f:c1:b6:31:73:8e:57:67:a1:bd:3e:e4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sportslink.org.nz

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sportslink.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arts.diocesan.school.nz
bowlsnapier.co.nz
cjrs.co.nz
courtinthebay.co.nz
drysdale.kiwi
hawkesbaynetball.co.nz
howicksoftball.co.nz
kaiapoinetball.co.nz
kirweenetball.co.nz
mahe.kiwi
mahedrysdale.kiwi
ngaiwi.school.nz
olympicwrestlingnz.com
patumahoerugby.co.nz
prebbletonrugby.co.nz
pukekoherugby.co.nz
starling.org.nz
suburbsrfc.co.nz
tearohafootball.com
tepukesports.co.nz
waitematarugby.co.nz
warkworthnetballclub.com
www.belfastnetball.co.nz
www.belfastrugby.co.nz
www.bopgolf.co.nz
www.bowlsnapier.co.nz
www.burnsiderugby.co.nz
www.canterburycountrycricket.co.nz
www.cdcricket.co.nz
www.chchfootballsquash.co.nz
www.cjrs.co.nz
www.courtinthebay.co.nz
www.devonportsquash.org.nz
www.drysdale.kiwi
www.greenislandbadmintonclub.net.nz
www.greertonmaristnz.org.nz
www.hampsteadrugby.co.nz
www.havelocknorthbridgeclub.co.nz
www.havelockski.org.nz
www.hawkesbaylandingpad.co.nz
www.hawkesbaynetball.co.nz
www.hawkesbaysquash.co.nz
www.hbcricket.co.nz
www.hblp.co.nz
www.hnhs.school.nz
www.howicksoftball.co.nz
www.huttaikido.org.nz
www.invercargillnetball.co.nz
www.kaiapoinetball.co.nz
www.kaitaiacollege.school.nz
www.kapitigymsports.co.nz
www.kirweenetball.co.nz
www.lincolnbowlingclub.co.nz
www.mahe.kiwi
www.mahedrysdale.kiwi
www.mpcricket.org.nz
www.mtbtauranga.co.nz
www.ngaiwi.school.nz
www.nzpca.org
www.olympicwrestlingnz.com
www.otta.org.nz
www.papatoetoenorth.school.nz
www.patumahoerugby.co.nz
www.pointrugby.co.nz
www.prebbletonrugby.co.nz
www.pukekoherugby.co.nz
www.redcliffsbowls.co.nz
www.register4rugby.co.nz
www.sctrials.co.nz
www.silverdalerugby.co.nz
www.sissnetball.co.nz
www.sportauckland.co.nz
www.sportauckland.org.nz
www.sportslink.org.nz
www.squashauckland.org.nz
www.starling.org.nz
www.suburbsrfc.co.nz
www.supersixes.co.nz
www.tabletennissouth.org.nz
www.tearohafootball.com
www.tepukesports.co.nz
www.tgahockey.co.nz
www.waitematarugby.co.nz
www.warkworthnetballclub.com
www.zephyr.org.nz

Other certificates including the domain name sportslink.org.nz

(limited to 100 certificates)
supersixes.co.nz
eden.rugby
www.hbcricket.co.nz
www.mysporty.co.nz
hbcricket.co.nz
www.sportslink.org.nz
maristrugby.org.nz
hbnetball.co.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
ctfc.co.nz
sporty.org.nz
www.hbcricket.co.nz
www.bowlsnapier.co.nz
www.lincolnbowlingclub.co.nz
turbotouch.co.nz
kjcc.org.nz
starling.org.nz
bowlsnapier.co.nz
eden.rugby
cdcricket.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
sporty.org.nz
www.devonportsquash.org.nz
bowlsnapier.co.nz
sporty.org.nz

Certificate

The complete raw certificate details for www.sportslink.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PsEi8homWpjTvSZxCpI
UzS7PFwqt/YwgfwSqL85DPqZU2xOOYcgaVxEuK7x7xCxM9zljUIlviELx6aruvbd
VvqUxiG73B1/2Ebn+ReGlwxMREZA6c3IlRkvaXiYk2hOwOHk873grTdXN2fBT9wd
68jGabsK+I3M82lHGA56AguKrBeUR+SqojPJDkQPZTAwtlGnhHFv6eSdta/8ss7C
/ZvlX3ak5A5rVPtmwEMGCyy1zJy89tlniUBy66dGE6HiFeOMzrXDPxFsNSURcbwV
qI9+9qPiOuvreoMGuMGH1YuZttpob2jcyRPD/iZCfmQMPb6T92ta2keqRLsgDw7g
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344034518438409084257292157854059025425240
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-23 02:18:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-23 02:18:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sportslink.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26381348902767606696697818172271646220367835734907482791928546086079362296045721631822813703868729046471725185356232215047126610472082630491005230564182879058388136244989043139126249883419085405266743498266559043263929235844156970606912770883398411067571229082705581069292857476860931578341648210789561066826770099468988393246865864380484999591089143308751497779601687794883908919267707184945723968115792261848100868232952725616980622121879156322756124908129046851857273278688409395556926377564519626952761688156674985410708587176899293758565172622500381620631346668470412549180327336096949860808952269615687346872493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb85aab43736ae8e4bbc39228e91d04ecc593dd3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2009 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arts.diocesan.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlsnapier.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjrs.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courtinthebay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drysdale.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbaynetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howicksoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaiapoinetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirweenetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahe.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahedrysdale.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngaiwi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olympicwrestlingnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patumahoerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pukekoherugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suburbsrfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tearohafootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tepukesports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitematarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warkworthnetballclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belfastnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belfastrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bopgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsnapier.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burnsiderugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburycountrycricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chchfootballsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cjrs.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courtinthebay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devonportsquash.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drysdale.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenislandbadmintonclub.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greertonmaristnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hampsteadrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havelocknorthbridgeclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havelockski.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbaylandingpad.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbaynetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbaysquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hblp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hnhs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicksoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huttaikido.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invercargillnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaiapoinetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaitaiacollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kapitigymsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirweenetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lincolnbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahe.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahedrysdale.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mpcricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtbtauranga.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ngaiwi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzpca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olympicwrestlingnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otta.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papatoetoenorth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patumahoerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pointrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prebbletonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pukekoherugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redcliffsbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.register4rugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sctrials.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.silverdalerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sissnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportauckland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportslink.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.squashauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suburbsrfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supersixes.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tabletennissouth.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tearohafootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tepukesports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tgahockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitematarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warkworthnetballclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zephyr.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016878b70a500000040300483046022100ed8ba09a54e4a51e13cfe01b3f75b007500c627c5821db6eda06e64436a44f24022100a95931a8e8623e2453182c59b1a5e57cc344b4236283efec92f69e70ad4d919e00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016878b70c5a00000403004630440220387740ac838e93cbe711cfb6161e1266b0dfa461e434faef05043a04d26ef74d0220668d9ab7220ea4a3adc1be541d3751f6aaf6e9d1ab4cf2a3289b21f096a873f6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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