hastings-central.school.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:85:0a:1c:ba:41:1f:fa:99:93:bc:35:55:47:f4:b3:08:b8 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hastings-central.school.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:85:0a:1c:ba:41:1f:fa:99:93:bc:35:55:47:f4:b3:08:b8
Serial Number (int): 306607854037723357549047709470227875170488
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 53:4a:95:6c:6d:79:4a:ad:02:ce:b3:c0:4d:79:d8:19:47:60:bc:32
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 74:67:09:3a:1c:67:da:e8:3b:7e:7b:9a:f2:21:cd:73:f7:43:ea:9b
Fingerprint (sha256): 3b:ea:69:4e:91:31:75:58:e9:8c:10:8f:2e:28:2a:c4:a5:8a:7e:23:9c:78:96:e5:c9:0a:61:ca:71:86:77:f4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hastings-central.school.nz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hastings-central.school.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aafl.co.nz
abundantlife.school.nz
actc.org.nz
ahiparagamefishclub.co.nz
ararimu.school.nz
ashleyforestrallysprint.co.nz
aucklandmarist.co.nz
aucklandrugby.co.nz
aucklandtouch.co.nz
basketballtaranaki.co.nz
beckenhamtennisclub.co.nz
boptouch.co.nz
bowlshawkesbay.org.nz
bsgevents.co.nz
bullernetball.co.nz
cometswimming.co.nz
cornwallparktouch.nz
csa.org.nz
eakfc.org
ecbsoftball.org.nz
feildinglawnmowerracing.org.nz
generatenetwork.org
hamiltoncanoepolo.org.nz
hastings-central.school.nz
hbcommunityfitness.co.nz
hbcommunityfitness.org.nz
hockeysouthcanterbury.co.nz
hyc.org.nz
jcc.org.nz
juniorcricket.co.nz
karakacricket.co.nz
karakatennis.co.nz
lucknow.school.nz
mandevillesports.co.nz
manurewaswimmingclub.co.nz
marketground.co.nz
marlboroughparktennis.co.nz
marlboroughvolleyball.org.nz
melrosetargetshooting.co.nz
morningtonbowlingclub.co.nz
mtrbmx.co.nz
nelsonfarmersmarket.co.nz
nelsonfarmersmarket.org.nz
nelsonsoftball.org.nz
netballmanawatu.org.nz
northcanterburyrugby.co.nz
northcoterugby.co.nz
northharbourtag.co.nz
nzpowerlifting.co.nz
nztua.com
osssa.org.nz
otahuhuroversrugbyleague.co.nz
parafednorthland.co.nz
playbowls.co.nz
ponekerugby.com
ponsonbybowls.nz
porritt.school.nz
prdf.co.nz
rbpc.nz
riverroad.co.nz
roosterssoftball.co.nz
schoolground.com
schoolsportaoraki.co.nz
scrfu.co.nz
shoreroversnetball.co.nz
southernlakesmultisportclub.co.nz
southerntack.co.nz
southlandolympicweightlifting.co.nz
sportotago.co.nz
sportsground.com
stewartalexander.co.nz
stheliersbowlingclub.co.nz
stjosephschb.school.nz
sunrisecottage.co.nz
tabletennis.org.nz
taradale.co.nz
tasportscycling.co.nz
temata.school.nz
terracechb.school.nz
torbaytennis.org.nz
touchnorthharbour.co.nz
tutangiora.nz
twyford.school.nz
waikatohockey.org.nz
wellingtonrnr.org.nz
whangareitri.co.nz
wmcc.net.nz
woodendrugby.co.nz
wops.co.nz

Other certificates including the domain name hastings-central.school.nz

(limited to 100 certificates)
www.nelsoncarclub.co.nz
willowpark.school.nz
www.blenheimgolfclub.co.nz
sporty.co.nz
www.tabletennis.org.nz
sporty.co.nz
meeanee.school.nz
sporty.co.nz
www.taranakihockey.org.nz
hastings-central.school.nz
ultrarunner.org.nz
southlandmtbclub.co.nz
www.oacnz.org
sporty.co.nz
sporty.co.nz
trenthamrifleclub.co.nz
sporty.co.nz
sporty.co.nz
www.wmsc.org.nz
uniss.co.nz
www.badmintonhb.co.nz
pioneerbasketballclub.co.nz
canterburybaseball.co.nz
www.mttauharagymnastics.co.nz
yes.stockx.co.nz
basketballtaranaki.co.nz
www.schoolground.com

Certificate

The complete raw certificate details for hastings-central.school.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjlAhj/xPuTWldlVNpcz
nmyzQTiGhTX3a4u0gK1Krbsii6jmd0xi5XNsYqLre3x/kkn7antuSw4bCO7z84zW
pRni4LqJQfK15wXS0yjrOoWhSTIwSUU5MEPrNaF3pGoZrRirFJVw3lg9GDw+sbTy
vTEcuknqTJ0md0lDMlOM25xcApd87Vd/j26u9s3NaR2lGc/iQqmrMLMaRaVP/u+E
GReg9wlYAs3LKpJsIh+hBdyYliwEXWaxZsz8qPPP/Akr8n47fS02HB4ifuThgxsT
+NytCWWsHoQOwmVW92MOMeQ2oleDngCrPBP/L1JQev7pgJu71mU3Gno6zdm7k6C0
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306607854037723357549047709470227875170488
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-30 05:18:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-28 05:18:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hastings-central.school.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19468931002105393067975863119300853858447651664642726028706342546947602943615878828063884884539334747957059355474206145473356407170667328093794504244046229528685977595134996923585939969470343764071268807990691984064126563942798590076728425530725429388208128978039480060114800589838144718817822046265369320626336248339277310930490079284338611100910465334117851632644362134404185393937804228575070340679843279188063175520365621175319317248229767115558248663395625886068388784333750281425000999506150435430467404439676230189963402133329360027876557623901648595626866114370044767968643199634690628871262203249625168655419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							534a956c6d794aad02ceb3c04d79d8194760bc32
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1914 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aafl.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abundantlife.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahiparagamefishclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ararimu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashleyforestrallysprint.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandmarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandtouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketballtaranaki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beckenhamtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boptouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlshawkesbay.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsgevents.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullernetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cometswimming.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornwallparktouch.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eakfc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecbsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildinglawnmowerracing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generatenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamiltoncanoepolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastings-central.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcommunityfitness.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcommunityfitness.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeysouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juniorcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakacricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakatennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucknow.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandevillesports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewaswimmingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughparktennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughvolleyball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melrosetargetshooting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morningtonbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtrbmx.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballmanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcoterugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northharbourtag.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzpowerlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nztua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osssa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otahuhuroversrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parafednorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponekerugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponsonbybowls.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porritt.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prdf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbpc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverroad.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roosterssoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportaoraki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoreroversnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernlakesmultisportclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southerntack.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandolympicweightlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportotago.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stewartalexander.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stheliersbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephschb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunrisecottage.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabletennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taradale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasportscycling.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temata.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terracechb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torbaytennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchnorthharbour.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutangiora.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twyford.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikatohockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonrnr.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareitri.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmcc.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodendrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wops.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c41878b2b0000040300483046022100d53ad3e503fca2234fc29ed962910b191e9d430e4200c08f3d8dd38622d7119302210082594dd7e5407adc1054372b04b82171ea0d8c86891bca4d0f52d9038f570fc4007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c41878c4f000004030048304602210085c5a715da4c141f60f35fba8ec74fa893ee63282de500533f44c92a0a51519f0221009980fe2564a0fa371e58387b2d362c694f98f73993ec4c4a76af23c314689e5d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007c4424228aabd71cb4aa2653201da4c6b47253a4e8dfc16162116d3a2b88b1deaee9ec7d7a1d7d27ec7fafc2619c9caff370ff58e6dbea683927ff527fa63f200607a12956856476b55ebcbb3986bd07ec425f30b769a717a9394f421070d4dac20a4f85cd79e8cc24834d2bca29353724cb8b835005093774571f2c360b0985e0b39953303e7a6f6f4892edd85ae5b7856b1cd09f1af599553b2f005d30e7c9bf50ef307bf04f836aa6af194e99cc0a1be270ce5ed3f160a6ed1a2ceca91eb2d83258dbe7d9915c95e5e09b9f84fe189c5f5f377b5fa5147a6abbb41faa9907ac0172442dcbc4fdf29b2783e1f8330ef2b242fa8f8f42bcf4777a29481becd9