pcbasketballclub.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:43:cf:3c:10:8c:ad:84:98:94:ab:28:6d:7d:6a:d8:5c:3d was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pcbasketballclub.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:43:cf:3c:10:8c:ad:84:98:94:ab:28:6d:7d:6a:d8:5c:3d
Serial Number (int): 284411238447586804283139769718036934188093
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 56:ba:7e:44:8a:6e:1f:fe:c5:2c:a6:bf:39:ba:08:30:ac:fc:30:4b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a6:a5:cb:3e:0e:15:43:74:01:11:29:c6:0d:9e:4b:7f:78:26:47:b1
Fingerprint (sha256): 3e:36:65:0e:6a:a5:23:8d:16:13:a9:48:0a:e2:15:fa:c4:a9:0d:7c:fb:a6:99:60:0e:9e:e7:41:ba:3e:f9:a9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pcbasketballclub.co.nz

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pcbasketballclub.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ardmoremarist.co.nz
aucklandbaseball.co.nz
aucklandfootball.org.nz
aucklandservicerifle.org.nz
bbafc.org.nz
bowlssouthland.co.nz
bowlswestcoast.org.nz
brooklyncroquetclub.org
burwoodafc.co.nz
capitalfootball.org.nz
centralfootball.co.nz
centralfootball.org.nz
clevedontennisclub.co.nz
cmsport.co.nz
cornwallcricket.co.nz
developyourlegacy.co.nz
ecbafc.co.nz
footballsouth.co.nz
gameoftwohalfwits.com
glenfieldbowls.co.nz
greenhithefootball.org
hbcc.org.nz
hendersonsquash.co.nz
hillseekers.co.nz
hillseekers4wd.co.nz
howicksailingclub.co.nz
hrc.org.nz
karakasportspark.co.nz
katikatifc.co.nz
keirunga.org.nz
ladiessocialcycling.org.nz
linfield.co.nz
linwoodrugby.co.nz
linwoodrugby.com
mainlandfootball.co.nz
makikihi.school.nz
manurewamets.co.nz
maoribasketball.co.nz
marlborough-touch.co.nz
marlboroughfootball.co.nz
mmcc.co.nz
mountfortwaterpolo.nz
myfootball.co.nz
nelsonbaysfootball.co.nz
nelsonnetball.co.nz
newplymouthcroquetclub.co.nz
nff.org.nz
nhbmx.org.nz
nzfootball.co.nz
nzsra.org.nz
oratiaunited.co.nz
papanuiredwoodafc.co.nz
pcbasketballclub.co.nz
ravensbourne.co.nz
redbeachsquashclub.co.nz
rivertongolf.co.nz
rosegardenscroquetclub.org.nz
royaloakracquets.co.nz
schoolground.co.nz
schoolground.nz
scpacers.co.nz
slalomnz.org.nz
southlandbmxclub.co.nz
sportcanterbury.org.nz
sportsground.co.nz
sportsportal.co.nz
sporttasman.org.nz
sportwaitakere.co.nz
sportwaitakere.nz
sportyapp.co.nz
takapunaafc.co.nz
tcafc.co.nz
teawamutuafc.co.nz
themightypclass.org.nz
ulyssesnelson.org.nz
upperhuttrifleclub.co.nz
waibopfootball.co.nz
waihekeunited.org.nz
waihibeachtennisclub.co.nz
waihoraclaytarget.co.nz
waikaregolfclub.co.nz
waitakerecityfc.org.nz
waitakererugby.co.nz
waitematarowing.org.nz
westernafc.com
whangaroasportfishingclub.co.nz
woolstonparkindoorbowls.org.nz

Other certificates including the domain name pcbasketballclub.co.nz

(limited to 100 certificates)
maristinvercargill.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sportnorthland.co.nz
sporty.co.nz
sporty.co.nz
pcbasketballclub.co.nz
pcbasketballclub.co.nz
sporty.co.nz
www.pkjsports.co.nz
sporty.co.nz
www.akaranacityrifleclub.co.nz
hockeymanawatu.org.nz
www.nzfootball.co.nz
hockeymanawatu.org.nz
sporty.co.nz
maristinvercargill.co.nz
hockeymanawatu.org.nz
maristinvercargill.co.nz
www.aucklandsoftball.org.nz
sporty.co.nz
www.brooklyncroquetclub.org
www.thesalmonrun.nz
maristinvercargill.co.nz
maristalbion.co.nz
www.mooloocommunityrugby.co.nz
sporty.co.nz
www.unimountafc.org.nz
www.christchurchmetrocricket.org
www.sportsground.com
sporty.co.nz
www.pauanuilifeguards.org.nz

Certificate

The complete raw certificate details for pcbasketballclub.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iMXI2A3kYibzC2jW3G4
OX+gNAozCw7qwz4aNCGQkmZeqTxZCigNAIaXatIAa1PaXUjA30sdUxsMukrRWM8d
S5Al4GCx9JT9mdCbna0QUnFsK+pWZZ2p3lmSp/b2Y1N5tP92g40qm/Fthd48JNgp
8ia3bnnXs4YbSq9TWQHMgFLgSjk61apBHW76sKe5tt2zkXm3H1+CfH9kfFXq1gOd
Pzyo1tBjq48fZa4ujnpgoktMhvpX3/i6MU291XLbtBQq4MqCMbhzHI7QfyHaqour
0VjorI6U2JhZbegrmERVzj0F+G3iouCo/uzCuSsKxMzKEauzBdXm7YPD7LmOmXg8
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284411238447586804283139769718036934188093
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-21 02:27:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-20 02:27:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pcbasketballclub.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27537254195643853273300585728976505422230633963486199806632245885372677726505419727542152159907613771003462708768494988481305252556769795367147478880084465520320599488760585229038892026492902814858864414013291723083059912691744645705451614845797310529394823728963841106902709317236091645189565164876624918384794017513111098842903964500979664804309977012686608153173605613709251690313313269512861402432421651442019236350021282865304991611613305139392871734724792305855531206476543128985267979567215340315508340910496183405752464751761095997976944227185677653857235144241774403523977808786924385477152439144559280667783
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							56ba7e448a6e1ffec52ca6bf39ba0830acfc304b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1872 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ardmoremarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandservicerifle.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlssouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswestcoast.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooklyncroquetclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedontennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornwallcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developyourlegacy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecbafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footballsouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameoftwohalfwits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenfieldbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenhithefootball.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hendersonsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillseekers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillseekers4wd.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howicksailingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakasportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katikatifc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keirunga.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladiessocialcycling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linfield.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linwoodrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linwoodrugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainlandfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makikihi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewamets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maoribasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlborough-touch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountfortwaterpolo.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonbaysfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newplymouthcroquetclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhbmx.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oratiaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papanuiredwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ravensbourne.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redbeachsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivertongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosegardenscroquetclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaloakracquets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolground.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scpacers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slalomnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandbmxclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportcanterbury.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporttasman.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportwaitakere.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportwaitakere.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportyapp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takapunaafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teawamutuafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themightypclass.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulyssesnelson.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upperhuttrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waibopfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihekeunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihibeachtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihoraclaytarget.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikaregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitakerecityfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitakererugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitematarowing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westernafc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangaroasportfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woolstonparkindoorbowls.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165fa2aa836000004030047304502210090d749856b7cf3f49e17967bbf8273bbc0aa08fe1d027fb4412a4f2cd50a3696022018e931d8ebc3e53b64555ba4236fdceaf0ee2548b9895edffdd65738801c9e61007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000165fa2aaa110000040300473045022017622b914e7d9ef42583563aafa674cc94287b4376ebaba20d4d203da8e47dbe022100ab9ccd326b537e13f87c63d9527e698b7e88be335534b239fabe052f11191e07
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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