chamber.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:b3:d9:f4:ce:49:c4:d2:ed:12:fa:70:6a:c0:57:1b:4a:52 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=chamber.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b3:d9:f4:ce:49:c4:d2:ed:12:fa:70:6a:c0:57:1b:4a:52
Serial Number (int): 322537115053668482413860691368642768226898
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 54:61:a6:1d:b6:9a:a9:8b:f8:05:fa:61:14:94:90:65:50:59:f6:e4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 95:4b:cb:52:8f:a7:d0:9c:76:47:2a:42:27:a8:ce:d6:46:b2:04:a5
Fingerprint (sha256): 37:a1:c3:17:bc:e1:91:49:3c:5b:4a:64:2a:31:c6:3b:34:09:0d:f9:92:e2:d2:34:16:dc:46:32:d8:9b:23:4a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate chamber.co.nz

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chamber.co.nz

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

airportchamber.co.nz
aucklandbusinessawards.co.nz
aucklandbusinessforum.co.nz
ccnzexcellenceawards.nz
ccnzhyndsconstructionawards.co.nz
chamber.co.nz
ebopchamber.co.nz
events.queenstownchamber.org.nz
gisborne.org.nz
hawkesbaychamber.co.nz
hbchamber.co.nz
hbchamber.nz
iccarbitrationnz.co.nz
ignitewanaka.co.nz
newzealandchambers.co.nz
performingunderpressure.co.nz
rotchamber.co.nz
rotoruabusinessawards.co.nz
rotoruachamber.co.nz
rotoruachamber.nz
scchamber.co.nz
scchamber.org.nz
taranakichamber.co.nz
taupochamber.co.nz
wanakachamber.co.nz
www.airportchamber.co.nz
www.aucklandbusinessawards.co.nz
www.aucklandbusinessforum.co.nz
www.ccnzexcellenceawards.nz
www.ccnzhyndsconstructionawards.co.nz
www.chamber.co.nz
www.ebopchamber.co.nz
www.gisborne.org.nz
www.hawkesbaychamber.co.nz
www.hbchamber.co.nz
www.hbchamber.nz
www.iccarbitrationnz.co.nz
www.ignitewanaka.co.nz
www.localgovtforum.org.nz
www.newzealandchambers.co.nz
www.performingunderpressure.co.nz
www.prod.events.queenstownchamber.dev-sites.co.nz
www.rotchamber.co.nz
www.rotoruabusinessawards.co.nz
www.rotoruachamber.co.nz
www.rotoruachamber.nz
www.scchamber.co.nz
www.scchamber.org.nz
www.taranakichamber.co.nz
www.taupochamber.co.nz
www.wanakachamber.co.nz

Other certificates including the domain name chamber.co.nz

(limited to 100 certificates)
www.oyp.cloud
chamber.co.nz
www.oyp.cloud
chamber.co.nz
chamber.co.nz
chamber.co.nz
*.chamber.co.nz
chamber.co.nz
ned.smallbiztrends.com
www.oyp.cloud
chamber.co.nz
www.oyp.cloud
testdoamin.creatortesting.com
mbms.missionpharmacal.com
chamber.co.nz
chamber.co.nz
www.oyp.cloud
chamber.co.nz
chamber.co.nz
chamber.co.nz
portal.energyadvance.com.au
app.serprojobs.com
stspro.sts-certified.com
www.oyp.cloud
member.romobros.net
www.oyp.cloud
pivotal.chamber.co.nz
tfish.remotedatabackups.com
chamber.co.nz
sb1383.recyclist.co
chamber.co.nz
chamber.co.nz
www.oyp.cloud
portal.cccdigital.io
timesheet.mrowhistle.com
*.chamber.co.nz
chamber.co.nz
www.oyp.cloud
chamber.co.nz
ueesportal.unplug.studio
www.oyp.cloud
www.oyp.cloud
chamber.co.nz
www.oyp.cloud
propertymanager.papaerp.com
mail.chamber.co.nz
pivotaldev.chamber.co.nz
www.oyp.cloud
recologypt.briotix.works
sandcube.brent-energy.com
*.chamber.co.nz
intrum-mro.mrowhistle.com
mail.chamber.co.nz
chamber.co.nz
www.oyp.cloud
chamber.co.nz
my.haccphub.com
tfish.remotedatabackups.com
www.oyp.cloud
portal.garden-view.com
champ.cchd.care
*.chamber.co.nz
www.oyp.cloud
www.metrommpsupport.com
chamber.co.nz
chamber.co.nz
chamber.co.nz
mail.chamber.co.nz
employment.chamber.co.nz
chamber.co.nz
portal.brandefined.com
chamber.co.nz
chamber.co.nz

Certificate

The complete raw certificate details for chamber.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKkzCCCXugAwIBAgISA7PZ9M5JxNLtEvpwasBXG0pSMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAyMTMwMjAxNDVaFw0yMzA1MTQwMjAxNDRaMBgxFjAUBgNVBAMT
DWNoYW1iZXIuY28ubnowggGiMA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQDW
DZ+mG9uOntTPxKFoJX7w7TuWoTWP+FIg5Wl7936MBKCE9fFfHqxvPDHAoSSHjpMH
f0eyUfz2iOG/iMgYXvusuI5p8MsbkDCxDt+IBfHkGzjSdBoHsnxqQqGGqUTa3bs1
YdZvfuvE0VKQ3XOCNli+HuoiR7Zn3HkAL37mD6bQ4ORC1x0PJYiEX2Az22jVpYTK
nHhUJwElvdBzkK/Sqgzwk754nndqatGY2gG6zjtStKleUMbDyogUdyPvTm3pE0L0
18qw90phmT+44FtXfCM6rg5SVWSEv5WvVeABCk9+kUL+iWmb4ix7p4Jwfo8+bJsD
5FU5DEz3SYceTc1kk+arw5Yx/L41T2XcjmDsUzUN4cj+7LWOQhwplN9xcj4od3h0
Mym5+DmajqmAsVRvo1bTiIad3o9j73L6zfjutg3tfxC00ARCfQ5xWM4sOkumPwCO
vbEsbhFP9fQLmGcv1csnyNkGSYYzCbG1OM32s1gYOVHq2E1PztKo7r8oG9xF5YEC
AwEAAaOCBzswggc3MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUVGGmHbaaqYv4Bfph
FJSQZVBZ9uQwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYB
BQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYI
KwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggUKBgNVHREEggUBMIIE
/YIUYWlycG9ydGNoYW1iZXIuY28ubnqCHGF1Y2tsYW5kYnVzaW5lc3Nhd2FyZHMu
Y28ubnqCG2F1Y2tsYW5kYnVzaW5lc3Nmb3J1bS5jby5ueoIXY2NuemV4Y2VsbGVu
Y2Vhd2FyZHMubnqCIWNjbnpoeW5kc2NvbnN0cnVjdGlvbmF3YXJkcy5jby5ueoIN
Y2hhbWJlci5jby5ueoIRZWJvcGNoYW1iZXIuY28ubnqCH2V2ZW50cy5xdWVlbnN0
b3duY2hhbWJlci5vcmcubnqCD2dpc2Jvcm5lLm9yZy5ueoIWaGF3a2VzYmF5Y2hh
bWJlci5jby5ueoIPaGJjaGFtYmVyLmNvLm56ggxoYmNoYW1iZXIubnqCFmljY2Fy
Yml0cmF0aW9ubnouY28ubnqCEmlnbml0ZXdhbmFrYS5jby5ueoIYbmV3emVhbGFu
ZGNoYW1iZXJzLmNvLm56gh1wZXJmb3JtaW5ndW5kZXJwcmVzc3VyZS5jby5ueoIQ
cm90Y2hhbWJlci5jby5ueoIbcm90b3J1YWJ1c2luZXNzYXdhcmRzLmNvLm56ghRy
b3RvcnVhY2hhbWJlci5jby5ueoIRcm90b3J1YWNoYW1iZXIubnqCD3NjY2hhbWJl
ci5jby5ueoIQc2NjaGFtYmVyLm9yZy5ueoIVdGFyYW5ha2ljaGFtYmVyLmNvLm56
ghJ0YXVwb2NoYW1iZXIuY28ubnqCE3dhbmFrYWNoYW1iZXIuY28ubnqCGHd3dy5h
aXJwb3J0Y2hhbWJlci5jby5ueoIgd3d3LmF1Y2tsYW5kYnVzaW5lc3Nhd2FyZHMu
Y28ubnqCH3d3dy5hdWNrbGFuZGJ1c2luZXNzZm9ydW0uY28ubnqCG3d3dy5jY256
ZXhjZWxsZW5jZWF3YXJkcy5ueoIld3d3LmNjbnpoeW5kc2NvbnN0cnVjdGlvbmF3
YXJkcy5jby5ueoIRd3d3LmNoYW1iZXIuY28ubnqCFXd3dy5lYm9wY2hhbWJlci5j
by5ueoITd3d3Lmdpc2Jvcm5lLm9yZy5ueoIad3d3Lmhhd2tlc2JheWNoYW1iZXIu
Y28ubnqCE3d3dy5oYmNoYW1iZXIuY28ubnqCEHd3dy5oYmNoYW1iZXIubnqCGnd3
dy5pY2NhcmJpdHJhdGlvbm56LmNvLm56ghZ3d3cuaWduaXRld2FuYWthLmNvLm56
ghl3d3cubG9jYWxnb3Z0Zm9ydW0ub3JnLm56ghx3d3cubmV3emVhbGFuZGNoYW1i
ZXJzLmNvLm56giF3d3cucGVyZm9ybWluZ3VuZGVycHJlc3N1cmUuY28ubnqCMXd3
dy5wcm9kLmV2ZW50cy5xdWVlbnN0b3duY2hhbWJlci5kZXYtc2l0ZXMuY28ubnqC
FHd3dy5yb3RjaGFtYmVyLmNvLm56gh93d3cucm90b3J1YWJ1c2luZXNzYXdhcmRz
LmNvLm56ghh3d3cucm90b3J1YWNoYW1iZXIuY28ubnqCFXd3dy5yb3RvcnVhY2hh
bWJlci5ueoITd3d3LnNjY2hhbWJlci5jby5ueoIUd3d3LnNjY2hhbWJlci5vcmcu
bnqCGXd3dy50YXJhbmFraWNoYW1iZXIuY28ubnqCFnd3dy50YXVwb2NoYW1iZXIu
Y28ubnqCF3d3dy53YW5ha2FjaGFtYmVyLmNvLm56MEwGA1UdIARFMEMwCAYGZ4EM
AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0
c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAejKMVNi3LbYg
6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGGSLik4AAABAMARzBFAiBPOurC3YU8
VFt9jotW6/5MHyekip+Oa19oxCNBbRgMdQIhAMY/KYnwvSd0ArlH/gDKW6T/t3/f
SfwPUUC2EA8xb+ETAHUA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4A
AAGGSLikyAAABAMARjBEAiBP8R8adIvgHYwNxYcqwvVNa3GdxqQiYUwueUoZ0dwg
OAIgXw5bufCZ7c5kZVkdrnVGG58hv2k5RRnC0DJTm+b4Yz8wDQYJKoZIhvcNAQEL
BQADggEBAHsZp6b2Z6yMgWTjjeEWGfFRrPTS0FXvqcA/ITc1tOWr6dhK9TZnWN9X
TEih1ZcXlUs5tFsR3fhXwbgBQ3MgsRbEiwnKRlb4a5aPJbwj0zBu3Lt5GZqIPmcr
DP+eQdsN2s3FQMTYLJWAq9Qg0eCYAjtKCJuOrXaALLc0aW4Df7W/FFSdEDw+u+hy
1VXjpXzOoDWnp1/HwtUmajnqzrewfa4/MnzS37K/kBzqPrlEqv5jhKLP/kQ8Bi26
tdxUEVlXM6RP37JVB65uJ6uPgS9rpqlagOISXZTJM7CkTEdRWBLrxi8VfcrQcJ1K
ZMpS/Ov9ht+7SCkjMnmtfL6doP/3OC8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322537115053668482413860691368642768226898
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-13 02:01:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-14 02:01:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chamber.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4857675213064598264266421625328568057888449125242653137573806994494686397433948587021642197497881309302725488024598450362107756512937087926339635389080598383059848261309799843624069347593089975870360521130905614374776730572668651141711755518860649797740970448729474888059255822773023326585187572687909910901237689496711954354096036346684469067048745817404738083684993138366164873790241703498959716361869811531542277847594189952183221150006883332190461423190806088515738696880666410522365351003935309042676100019717362911203483454805174980725353665225593402643972789548513105998364497248260516359448889022333135934317576526752977322364725225776598585029272924152392769725037264693719612640114462453422569130346222087524488551470639058068146756780609566498602823812594110452303566710001246013159379970610425730115182560180225645335195460829602639771113742241572081770522144249144728718810663034725210223890174689657636077823361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5461a61db69aa98bf805fa61149490655059f6e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1281 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airportchamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandbusinessawards.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandbusinessforum.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccnzexcellenceawards.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccnzhyndsconstructionawards.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebopchamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.queenstownchamber.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisborne.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbaychamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbchamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbchamber.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iccarbitrationnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ignitewanaka.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newzealandchambers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performingunderpressure.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotchamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotoruabusinessawards.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotoruachamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotoruachamber.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scchamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scchamber.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taranakichamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taupochamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanakachamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airportchamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandbusinessawards.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandbusinessforum.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccnzexcellenceawards.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccnzhyndsconstructionawards.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebopchamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gisborne.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbaychamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbchamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbchamber.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iccarbitrationnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ignitewanaka.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.localgovtforum.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newzealandchambers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.performingunderpressure.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod.events.queenstownchamber.dev-sites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rotchamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rotoruabusinessawards.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rotoruachamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rotoruachamber.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scchamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scchamber.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taranakichamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taupochamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wanakachamber.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018648b8a4e0000004030047304502204f3aeac2dd853c545b7d8e8b56ebfe4c1f27a48a9f8e6b5f68c423416d180c75022100c63f2989f0bd277402b947fe00ca5ba4ffb77fdf49fc0f5140b6100f316fe113007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018648b8a4c8000004030046304402204ff11f1a748be01d8c0dc5872ac2f54d6b719dc6a422614c2e794a19d1dc203802205f0e5bb9f099edce6465591dae75461b9f21bf69394519c2d032539be6f8633f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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