ssl.circlesoft.net

Issued by R3

About this certificate

This digital certificate with serial number 04:b2:8b:34:00:b1:77:59:ee:82:bb:ba:d4:a5:07:59:7c:34 was issued on by Let's Encrypt.

With 53 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ssl.circlesoft.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b2:8b:34:00:b1:77:59:ee:82:bb:ba:d4:a5:07:59:7c:34
Serial Number (int): 409204437743879102402272891430199375789108
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8f:04:4b:5c:18:b0:9c:a5:89:2f:7c:ea:40:e6:e3:55:54:80:cb:58
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 36:b6:db:2b:e1:4d:b4:5f:38:4e:62:00:a8:d1:ff:2a:67:d1:85:88
Fingerprint (sha256): 3d:e7:7f:24:9f:d2:39:c3:fb:96:89:99:68:68:3d:df:fd:69:1f:95:f2:8a:b2:57:8f:41:a3:ef:3d:fc:11:e7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ssl.circlesoft.net

53

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl.circlesoft.net

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aesopsattic.com
aesopsattic.com.au
anotherchapter.co.nz
antipodesbookshop.com
bayhillbooks.co.nz
beachsidebookshop.com
beachsidebookshop.com.au
bestlittlebookshopintown.com
boobookonowen.com.au
boobooks.net.au
bookends.co.nz
bookgrove.com.au
booksnz.com
booktique.com.au
brunswickstreetbookstore.com.au
chickenandfrog.co.nz
constantreader.com.au
cookandyoung.com.au
havelocknorth.poppiesbooks.co.nz
marsdenbooks.co.nz
nzeb.co.nz
planetbooks.com.au
poppiesbooks.co.nz
shop.blarneybooks.com.au
ssl.circlesoft.net
store.ulyssesbookstore.com.au
thebooklover.co.nz
theclocksbookshop.co.nz
volumebooks.online
www.aesopsattic.com
www.almobooks.co.nz
www.anotherchapter.co.nz
www.antipodesbookshop.com
www.bayhillbooks.co.nz
www.beachsidebookshop.com
www.beachsidebookshop.com.au
www.bestlittlebookshopintown.com
www.bestlittlebookshopintown.com.au
www.boobookonowen.com.au
www.boobooks.net.au
www.bookends.co.nz
www.bookgrove.com.au
www.booksnz.com
www.brunswickstreetbookstore.com.au
www.chickenandfrog.co.nz
www.constantreader.com.au
www.cookandyoung.com.au
www.havelocknorth.poppiesbooks.co.nz
www.marsdenbooks.co.nz
www.nzeb.co.nz
www.planetbooks.com.au
www.poppiesbooks.co.nz
www.theclocksbookshop.co.nz

Other certificates including the domain name circlesoft.net

(limited to 100 certificates)
timeout.circlesoft.net
moransbooks.circlesoft.net
johnreedau.alpha.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
neighbourhoodbooks.circlesoft.net
abacus.beta.circlesoft.net
ssl.circlesoft.net
neighbourhoodbooks.circlesoft.net
booksatstones.circlesoft.net
aesopsattic.com
bookpassion.beta.circlesoft.net
www.teahousebooks.circlesoft.net
torquaybooks.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
childrensbookshop.beta.circlesoft.net
thebookroomatlennox.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
booksatstones.circlesoft.net
teahousebooks.beta.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
*.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
booksatstones.circlesoft.net
*.circlesoft.net
torquaybooks.circlesoft.net
moransbooks.circlesoft.net
pageblackmore.beta.circlesoft.net
ballaratonydiard.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
*.circlesoft.net
metropolis.beta.circlesoft.net
bookpassion.beta.circlesoft.net
boobookonowen.beta.circlesoft.net
*.beta.circlesoft.net
bookpassion.beta.circlesoft.net
timeout.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
wholesale.circlesoft.net
neighbourhoodbooks.circlesoft.net
*.alpha.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
childrensbookshop.beta.circlesoft.net
abacus.circlesoft.net
abacus.beta.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
ballaratbridge.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
circlesoft.net
ssl.circlesoft.net
vivabooks.beta.circlesoft.net
abacus.beta.circlesoft.net
moransbooks.circlesoft.net
childrensbookshop.beta.circlesoft.net
ironbirdbookshop.circlesoft.net
matildabookshop.beta.circlesoft.net
johnreedau.beta.circlesoft.net
abacus.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
paradoxbooks.beta.circlesoft.net
cookthebooks.beta.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
pottspoint.beta.circlesoft.net
cowlickbooks.beta.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
area52.circlesoft.net
abacus.circlesoft.net
jasonbooks.circlesoft.net
abacus.beta.circlesoft.net
retail.dev.circlesoft.net
booksatstones.circlesoft.net
moransbooks.circlesoft.net
pageblackmore.beta.circlesoft.net
abacus.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
abacus.circlesoft.net
ssl.circlesoft.net
*.circlesoft.net
ssl.circlesoft.net

Certificate

The complete raw certificate details for ssl.circlesoft.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEpupSWUEq5/u2pzppnqK4pDPzvqdQ
hGaMz7nW9LhRtbeWUWP941nefRJkQKNNePpPMTS8dPiWuaVETMfHiGMh0A==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 409204437743879102402272891430199375789108
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-09 05:38:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-07 05:38:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl.circlesoft.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004a6ea5259412ae7fbb6a73a699ea2b8a433f3bea75084668ccfb9d6f4b851b5b7965163fde359de7d126440a34d78fa4f3134bc74f896b9a5444cc7c7886321d0
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f044b5c18b09ca5892f7cea40e6e3555480cb58
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1259 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aesopsattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aesopsattic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anotherchapter.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antipodesbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayhillbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachsidebookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachsidebookshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestlittlebookshopintown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boobookonowen.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boobooks.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookends.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookgrove.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booksnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booktique.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brunswickstreetbookstore.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chickenandfrog.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constantreader.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookandyoung.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelocknorth.poppiesbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsdenbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzeb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planetbooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poppiesbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.blarneybooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.circlesoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.ulyssesbookstore.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebooklover.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theclocksbookshop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volumebooks.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aesopsattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.almobooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anotherchapter.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antipodesbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayhillbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beachsidebookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beachsidebookshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestlittlebookshopintown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestlittlebookshopintown.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boobookonowen.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boobooks.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookends.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookgrove.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brunswickstreetbookstore.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chickenandfrog.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.constantreader.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cookandyoung.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havelocknorth.poppiesbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marsdenbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzeb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planetbooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poppiesbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theclocksbookshop.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001889ee0e3a80000040300473045022100819802e000521671fb4195d162286c013848c11abe6952711128c41059ba4f5202200e22589dabdcc53f4889f871327a910be42897f2710a798aa3ce1ce83471ba8d007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001889ee0e3d500000403004730450220294db5ed91888db024d9c51a41007058009c517c44133c1a86f6ddfb427c8dbc022100bff4750e5592f9f115e9c1fb46de6829e5a0e31040e7b0a7ab069fd57c6521b2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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