sporty.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:28:f2:30:a8:7a:ed:db:0e:36:2a:33:b5:86:9c:45:8f:08 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:28:f2:30:a8:7a:ed:db:0e:36:2a:33:b5:86:9c:45:8f:08
Serial Number (int): 275270078294531699800790904285826478608136
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1d:65:22:3f:61:7a:3b:48:b0:a6:ef:5a:22:06:64:ae:f5:33:52:dd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 69:1f:f5:95:47:2a:4b:48:39:77:e2:86:b4:78:d3:e5:1a:74:b0:9a
Fingerprint (sha256): 41:d3:29:d7:2a:a3:fc:4f:79:de:36:d6:8f:f5:98:14:36:9d:15:0c:a3:34:f5:57:7b:72:9b:5a:f6:a9:66:5f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.co.nz

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

baybowler.co.nz
baysrugby.com
bledisloe.school.nz
bmxnz.co.nz
bowlsorewa.co.nz
cartertonnetball.club
centralmotorspeedway.co.nz
collegesport.org.nz
easterclassic.co.nz
ebymbc.org.nz
flaxmerecollege.co.nz
hphawks.co.nz
kartsporthamilton.nz
kartsportmarlborough.co.nz
kiwirandonneurs.org.nz
korugames.nz
mahurangirugbyclub.co.nz
melvilleunited.co.nz
mymotorsportnz.co.nz
mynetball.co.nz
mytouch.nz
nelsonbasketball.co.nz
nightowlsportsadmin.co.nz
northernroversfc.org.nz
northlandrugby.co.nz
nzparkour.co.nz
oranz.co.nz
papertiger.org.nz
parafedcanterbury.co.nz
paremataboatingclub.org.nz
parnelllawntennisclub.co.nz
pcc.org.nz
purakaunui.school.nz
qcyc.org.nz
raglanfootball.nz
rasnz.org.nz
riverracingnz.com
selwynsportstrust.org.nz
sporty.co.nz
sportyapp.co.nz
stkevins.school.nz
stokerugby.co.nz
swimsouthland.org.nz
takapunacricket.co.nz
tmcc.co.nz
touchtoolbox.nz
tuhoeahurei.com
waihinetball.co.nz
waimairisurf.org.nz
whakatipurowingclub.co.nz
youthtown.org.nz

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
turbotouch.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
mtrbmx.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporthb.net.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
uat.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
www.sporty.co.nz

Certificate

The complete raw certificate details for sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48kMRTaLGNtYCxeSMnUJ
822btld4ecvYxhvAqccGwwV2PjhIs9gs5R4PYxzRm7BuT05j4HBp9zqFhHALwXb3
FUfXQcTtIW1boPoYHjunUveRQtVxs3WZrSWOV3I1fNHzREWPN3lFYAYFfu5d6A/a
OMfGYK2fz5+eegFxJuwEDJ2sXkxOsI2An3+Jrs3iMLZq0vQfPW4t9qzhAI5eBcS8
mbL1GxtSg/f7IQLMgOq0cAE4J34pAUwUK8/RWkk0YSe3NC9XP5pVNwHLhWBLuIku
iiM2BoEG8/nkYz5gWGTZRh1LdMjqT/uieVabLQc48tsI0Shapd6CzZCbro/aqDG4
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275270078294531699800790904285826478608136
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 06:27:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 06:27:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28755235657138828667400700726059745688389569263089361706983579350134420735788397820956371938360308262201381137141559915319348799196839234921873754563069586178179941956006150964604055705609376618920878744454276498898804765635399491282119377846451296108368534597254562557316609745777555558127989637360972555900467300138638672689652299123928894727264598079241148467106119462049509570642170085466657226702531447506771096994025791394572023920176036731714887697185960210379430856461254637230453614042145062953671339173312015530497993665314210485985093923800599496502069799600957849252775877821887759429673979339920725096577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1d65223f617a3b48b0a6ef5a220664aef53352dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1021 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baybowler.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baysrugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bledisloe.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmxnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlsorewa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartertonnetball.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralmotorspeedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegesport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easterclassic.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebymbc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaxmerecollege.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hphawks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartsporthamilton.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartsportmarlborough.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwirandonneurs.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'korugames.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahurangirugbyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melvilleunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymotorsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mynetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytouch.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonbasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nightowlsportsadmin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernroversfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northlandrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzparkour.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oranz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papertiger.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parafedcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paremataboatingclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parnelllawntennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purakaunui.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qcyc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raglanfootball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rasnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverracingnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selwynsportstrust.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportyapp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stkevins.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stokerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swimsouthland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takapunacricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchtoolbox.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuhoeahurei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihinetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waimairisurf.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whakatipurowingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youthtown.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cf244ca880000040300483046022100aaf6e96f3e6112a2dbabd41308d3c514d55fd1173937a52553bea53c26b93c6d022100bd81af3b57bc37f05ab3df2128f8df2f27372c717fbc87dbc9e722f3cc86b85e0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cf244ca9000000403004630440220546218ba81d90edafde0d31978a7cd27216ad926dd78aaa419c86b5b2a26febd0220748e50e00c4d161e2b9a4b0c6a1e57320062924cfbe9f67d913780d1719cb75a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004c3b9d85c17692d2ce8e31db7f048e2bd1058eb6037a14e1b05dc62abb66d25d4b549c5f7be669762bd7d7437b36480f0da5871e0c6cdecadbc01eb7a4d17fcc6be2b37f0eb50a06ccb3a24cd2cae8ee145cc492bf4fcf18b8b79b08c569832158f12fc82a3a37c28d6f4c770e20867f3db5cd048ab059a6e1550aecb55b8660aa47bf9618203b967a80c8733a84269782dd3bd1929c46ca14c8f95e795cec86cc7951d3ac665e0f72a03610a248f3e37a83de83ccf2b4ec11c0899cc9601144d09a2ca64a3e73d4c4740d581e9539418bd288e76811ccea20b78d87147ff8a7035c357187274dfc1fca1874ca717a8fadf61cf7e1d94e69090d93bb6912bda0