hbnetball.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fc:17:fe:72:76:c6:ca:c5:6a:da:f8:b8:80:03:b7:c0:f9 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hbnetball.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fc:17:fe:72:76:c6:ca:c5:6a:da:f8:b8:80:03:b7:c0:f9
Serial Number (int): 347119907668267494804147673094871045357817
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f6:0a:90:7f:9d:bb:ef:20:f4:d4:cb:c3:16:a2:a7:8d:d7:9c:30:dc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a3:2c:45:5c:47:a9:06:50:e8:17:82:21:c6:cc:7a:53:7e:fc:ec:b3
Fingerprint (sha256): 3d:e1:b9:c2:c0:2b:9b:55:0b:29:75:43:5c:0c:c9:02:9e:4b:70:d9:6e:ac:2c:ac:5d:86:6b:8e:c9:a4:fe:58

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hbnetball.co.nz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hbnetball.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akaranacityrifleclub.co.nz
aurfc.co.nz
basketballhawkesbay.co.nz
belfastrugby.co.nz
bopgolf.co.nz
bowlswaikato.co.nz
canterburywaterpolo.org.nz
cdcricket.co.nz
centralcitybaseball.org.nz
crossrecreationcentre.co.nz
ctfc.co.nz
cyclingsc.co.nz
eden.rugby
edenrugby.co.nz
fastpitch.co.nz
feildingfarmersmarket.co.nz
feildingfarmersmarket.net.nz
feildingfarmersmarket.org.nz
flaxmillbaymotel.co.nz
glenfieldrugbyleague.co.nz
goodmanrural.co.nz
greenacrescountry.org.nz
greenislandbadmintonclub.net.nz
halswellunitedfc.co.nz
hampsteadclub.co.nz
havelocknorth.rugby
havelocknorthbridgeclub.co.nz
hawkesbay.basketball
hawkesbaynetball.co.nz
hawkesbayrugbyreferees.co.nz
hawkfootball.org.nz
hbcricket.co.nz
hbmagpies.co.nz
hbnetball.co.nz
hbreds.nz
hbrfu.co.nz
hbru.co.nz
healthyfamiliesinvercargill.org.nz
highlightcam.co.nz
hillseekers.co.nz
hillseekers4wd.co.nz
hockeymarlborough.org.nz
hokowhitubridge.org.nz
hpnc.org.nz
huttaikido.org.nz
invercargillnetball.co.nz
karakarugbyclub.co.nz
kjcc.org.nz
magpies.co.nz
maristrugby.org.nz
marsdensport.school.nz
merivalepap.co.nz
mesoball.co.nz
mountsports.co.nz
mtbtauranga.co.nz
mtsquashclub.co.nz
nelsonnetball.co.nz
netballsouthcanterbury.co.nz
northshorerugby.co.nz
nzblackpowder.nz
nzssfootball.co.nz
nzsssc.co.nz
nzsssc.org.nz
otakisportsclub.co.nz
papakurarugbyleague.co.nz
photocard.co.nz
pngolf.co.nz
pointrugby.co.nz
ponsonbyrugby.co.nz
rangatiragolf.co.nz
referees.co.nz
register4rugby.co.nz
schoolsport.nz
schoolsportnz.co.nz
schoolsportnz.org.nz
sctrials.co.nz
southcanterbury.basketball
sportauckland.co.nz
sportauckland.nz
sportauckland.org.nz
sportslink.org.nz
supersixes.co.nz
tasmanvolley.org.nz
totaltouch.org.nz
turbotouch.co.nz
turbotouch.org.nz
waimakunited.org.nz
wellingtonsoftball.org.nz
westcoastsoftball.co.nz

Other certificates including the domain name hbnetball.co.nz

(limited to 100 certificates)
www.sportycrm.com
sportycrm.com
hbnetball.co.nz
arrowtownrugby.co.nz
www.sportsground.com
hbnetball.co.nz
www.hbnetball.co.nz
hbnetball.co.nz
www.sportsground.com
hbnetball.co.nz
sporty.org.nz
www.marlboroughtrampingclub.co.nz
hbnetball.co.nz
www.membermanager.co.nz
www.membermanager.co.nz
hbnetball.co.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sked.co.nz
golfnorthland.co.nz
freyberg.ac.nz
sporty.org.nz
hbnetball.co.nz
hbnetball.co.nz
sporty.org.nz
www.sporty.org.nz
hbnetball.co.nz
www.ams.school.nz
hbnetball.co.nz
www.skeggsfoundation.nz
cfc.co.nz
www.cfc.co.nz

Certificate

The complete raw certificate details for hbnetball.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwFzQREmxcVvWVH/o4bS
NwYsr7V33VMA5W5LpYR37PyGE5Sw1ZNjsEOzD48Ou15Ms34NkVwGMONq51b6dy4u
ou8u10ouhD51Z8ffGcK+f4EVzHevMc/wxUV7IoD0O/et+ag5xfwhgYlm91mNcJmw
JOM8ZM/cCB5d0Pk34oassaXV9v8JA+4kWVmz2Ig0HeWV85ZmC+eceV43rWa9drNP
XWyD4Sg5aBrcq7ZZOikFCOad8Q0BqHH5K0WzwtzwkkQjWk3exK0eUh2EY3tSGeWE
tkF9W25i5Zkzq+DKB1vjSJi309mx2yd2gb8Yvg9EOhYuglmzrzkbWA+Kd+o4SqNv
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347119907668267494804147673094871045357817
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 12:12:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 12:12:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hbnetball.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23607278154642874932748622138812767228474569543302753364902747081215585933362435031955047072967498793203854541080160252332084160476010012735899873760200146103217385696149410104559111970175958321556860598371306214805584018502213401396063930566678646240068565710799455030747877779621756526181586840596680785475935233682920808615733800176418174743487076767756115430064339736275537549034618272422797792693714382736904045721665192074360992902855498916789938487589710365088220732182598405639330442971496783771181846557834254252549763794266153442169584253389759022584002995711405702125735857941662020006445942962351908286417
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f60a907f9dbbef20f4d4cbc316a2a78dd79c30dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1870 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akaranacityrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketballhawkesbay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belfastrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bopgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswaikato.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburywaterpolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralcitybaseball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossrecreationcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyclingsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eden.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edenrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastpitch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaxmillbaymotel.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenfieldrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodmanrural.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenacrescountry.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenislandbadmintonclub.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halswellunitedfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hampsteadclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelocknorth.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelocknorthbridgeclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbay.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbaynetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbayrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbmagpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbreds.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbru.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyfamiliesinvercargill.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlightcam.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillseekers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillseekers4wd.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeymarlborough.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hokowhitubridge.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huttaikido.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invercargillnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakarugbyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristrugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsdensport.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merivalepap.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesoball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtbtauranga.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballsouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northshorerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzblackpowder.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzssfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsssc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsssc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otakisportsclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakurarugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photocard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pngolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pointrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponsonbyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangatiragolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'referees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register4rugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsport.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sctrials.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southcanterbury.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportslink.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supersixes.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasmanvolley.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totaltouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waimakunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westcoastsoftball.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a5ad5377000004030047304502207437c8d537994f7a7de898c5b7f988a4c6d3b6e6cef5ce35c20c8c116aa92e04022100b1a1be57cafe6b0f479650ce3bd253ad9296be109ced821106b0f6caa08c78d10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170a5ad54800000040300483046022100f63add99ae6fa2138fbfe351f350f5a9924172423bd7157bdb5053f0e55b75420221009d35af6df77d3b2c8baf19d36307ba812b13179d0705be3c5628eba04df7d227
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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