squashauckland.org.nz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:9d:15:55:80:35:6e:7f:60:d3:ac:54:b9:c4:27:62:6a:3a was issued on by Let's Encrypt.
With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=squashauckland.org.nz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:9d:15:55:80:35:6e:7f:60:d3:ac:54:b9:c4:27:62:6a:3aSerial Number (int): 314789547135394256619882043197373722815034
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 2a:5a:a0:a9:36:d8:b1:f2:74:d5:c9:a0:b0:5a:33:35:a5:7d:11:ea
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 6d:ff:25:3d:6f:14:08:32:b0:a0:b5:df:de:31:e1:5f:0d:7a:b1:2f
Fingerprint (sha256): 41:d8:aa:4b:47:36:76:e2:a5:e8:2d:f4:d1:e0:79:e3:a1:3c:f6:1b:8b:65:97:1e:e6:5b:92:86:07:c6:24:07
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate squashauckland.org.nz
89
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for squashauckland.org.nz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
amdg.org.nz
aucklandleague.co.nz
avalonrugby.co.nz
badminton.org.nz
bayofislandsdressagegroup.co.nz
blokarthb.co.nz
bluerovers.co.nz
bowlsbop.co.nz
brownsbaybowls.org.nz
burnsiderugby.co.nz
canterburycountrycricket.co.nz
canterburyunited.co.nz
capitalbaseball.co.nz
cathcollege.school.nz
chchfootballsquash.co.nz
christchurchmetrocricket.co.nz
christchurchmetrocricket.com
christchurchmetrocricket.nz
christchurchmetrocricket.org
christchurchmetrocricket.org.nz
clubsnzdarts.co.nz
darfieldcricket.co.nz
darfieldrugby.co.nz
dunedinnetball.co.nz
eastcoastexpo.co.nz
frasertechcricket.nz
havelockski.org.nz
hawkesbayfarmersmarket.co.nz
hawkesbaysquash.co.nz
hbbct.org.nz
hbbusinesshub.co.nz
hbbusinesshub.nz
hnhs.school.nz
hni.school.nz
hnwafc.org.nz
hockeywairarapa.org.nz
hsobburnside.co.nz
kapitigymsports.co.nz
kapitisoftball.co.nz
kaumatuatc.org.nz
kerikerimtbclub.co.nz
lincolnbowlingclub.co.nz
maristalbion.co.nz
maristinvercargill.co.nz
marlinsnetball.co.nz
mcobsquash.co.nz
mooloo.co.nz
mooloocommunityrugby.co.nz
moonshinetrail.co.nz
mpcricket.org.nz
netballwaitakere.co.nz
northharbourwaterpolo.co.nz
otta.org.nz
otumoetaifootball.co.nz
papakuranetball.nz
pauanuilifeguards.org.nz
pkjsports.co.nz
playsoftball.co.nz
prebbletonfootball.co.nz
primarysportscanterbury.org.nz
pukekohesoftball.co.nz
rowandale.school.nz
royaloakbowls.co.nz
rugby-foundation.org.nz
rugbyfoundation.co.nz
rugbyfoundation.com
rugbyfoundation.nz
sailhbc.org.nz
sharkssports.co.nz
silverdalerugby.co.nz
sporthb.co.nz
sporthb.net.nz
sporthbchb.co.nz
sporthbwairoa.co.nz
squashauckland.org.nz
storans.school.nz
sumnerbowls.co.nz
takapunarugby.co.nz
taupohockey.co.nz
ths.school.nz
touchnz.co.nz
touchnz.nz
trfu.co.nz
wahinetoamcc.nz
whangareibridgeclub.co.nz
whangareinetball.co.nz
worldpowerlifting.nz
wsra.nz
zephyr.org.nz
aucklandleague.co.nz
avalonrugby.co.nz
badminton.org.nz
bayofislandsdressagegroup.co.nz
blokarthb.co.nz
bluerovers.co.nz
bowlsbop.co.nz
brownsbaybowls.org.nz
burnsiderugby.co.nz
canterburycountrycricket.co.nz
canterburyunited.co.nz
capitalbaseball.co.nz
cathcollege.school.nz
chchfootballsquash.co.nz
christchurchmetrocricket.co.nz
christchurchmetrocricket.com
christchurchmetrocricket.nz
christchurchmetrocricket.org
christchurchmetrocricket.org.nz
clubsnzdarts.co.nz
darfieldcricket.co.nz
darfieldrugby.co.nz
dunedinnetball.co.nz
eastcoastexpo.co.nz
frasertechcricket.nz
havelockski.org.nz
hawkesbayfarmersmarket.co.nz
hawkesbaysquash.co.nz
hbbct.org.nz
hbbusinesshub.co.nz
hbbusinesshub.nz
hnhs.school.nz
hni.school.nz
hnwafc.org.nz
hockeywairarapa.org.nz
hsobburnside.co.nz
kapitigymsports.co.nz
kapitisoftball.co.nz
kaumatuatc.org.nz
kerikerimtbclub.co.nz
lincolnbowlingclub.co.nz
maristalbion.co.nz
maristinvercargill.co.nz
marlinsnetball.co.nz
mcobsquash.co.nz
mooloo.co.nz
mooloocommunityrugby.co.nz
moonshinetrail.co.nz
mpcricket.org.nz
netballwaitakere.co.nz
northharbourwaterpolo.co.nz
otta.org.nz
otumoetaifootball.co.nz
papakuranetball.nz
pauanuilifeguards.org.nz
pkjsports.co.nz
playsoftball.co.nz
prebbletonfootball.co.nz
primarysportscanterbury.org.nz
pukekohesoftball.co.nz
rowandale.school.nz
royaloakbowls.co.nz
rugby-foundation.org.nz
rugbyfoundation.co.nz
rugbyfoundation.com
rugbyfoundation.nz
sailhbc.org.nz
sharkssports.co.nz
silverdalerugby.co.nz
sporthb.co.nz
sporthb.net.nz
sporthbchb.co.nz
sporthbwairoa.co.nz
squashauckland.org.nz
storans.school.nz
sumnerbowls.co.nz
takapunarugby.co.nz
taupohockey.co.nz
ths.school.nz
touchnz.co.nz
touchnz.nz
trfu.co.nz
wahinetoamcc.nz
whangareibridgeclub.co.nz
whangareinetball.co.nz
worldpowerlifting.nz
wsra.nz
zephyr.org.nz
Other certificates including the domain name squashauckland.org.nz
(limited to 100 certificates)
www.hblp.co.nz
belmontparkbowlingclub.co.nz
sporty.co.nz
belmontparkbowlingclub.co.nz
www.sporty.co.nz
www.mysporty.co.nz
sporty.co.nz
www.sportslink.org.nz
squashauckland.org.nz
www.rugby-foundation.org.nz
sporty.co.nz
sporty.co.nz
www.mysporty.co.nz
www.bowlsnapier.co.nz
www.lincolnbowlingclub.co.nz
sporty.co.nz
starling.org.nz
www.rugby-foundation.org.nz
www.hbcricket.co.nz
sporty.co.nz
www.mysporty.co.nz
sporty.co.nz
www.mysporty.co.nz
sporty.co.nz
belmontparkbowlingclub.co.nz
sporty.co.nz
www.rugby-foundation.org.nz
sporty.co.nz
belmontparkbowlingclub.co.nz
sporty.co.nz
belmontparkbowlingclub.co.nz
www.sporty.co.nz
www.mysporty.co.nz
sporty.co.nz
www.sportslink.org.nz
squashauckland.org.nz
www.rugby-foundation.org.nz
sporty.co.nz
sporty.co.nz
www.mysporty.co.nz
www.bowlsnapier.co.nz
www.lincolnbowlingclub.co.nz
sporty.co.nz
starling.org.nz
www.rugby-foundation.org.nz
www.hbcricket.co.nz
sporty.co.nz
www.mysporty.co.nz
sporty.co.nz
www.mysporty.co.nz
sporty.co.nz
belmontparkbowlingclub.co.nz
sporty.co.nz
www.rugby-foundation.org.nz
sporty.co.nz
Certificate
The complete raw certificate details for squashauckland.org.nz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIMtzCCC5+gAwIBAgISA50VVYA1bn9g06xUucQnYmo6MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMjUwMDMxMjlaFw0x OTA0MjUwMDMxMjlaMCAxHjAcBgNVBAMTFXNxdWFzaGF1Y2tsYW5kLm9yZy5uejCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIIl63gtD5dHmBiE0hMOmtVo lHfLVxgqUmMrV1HZppvk8cX/JNyT2YOXNlqnfxsWP+nJ+irsfgdhmfWmpWriJgoP aMiYd4smw6V3ZcfBX6h9c3xqyAj0+9PzSYvqMMUUIUNh7bQrid2D5kF2mfQADkVi xxf5CKde+TQJX0nW2k8AuJXKCAsKMWBlKHQanBIASzkKmgGKHEygqdcVwZmwAlVv qpkeDJvtUZVbvtlZF+ZUr0cIIDM5vdCZpNb2GVtVH4Xd+ggIzCKqgeZ7hk9W9Dpg L6N4crfi+PxU1lYIgnVrNFM1TQ1Xvv79+SiXpt6jVCAFfapWJpTD1Ci1OhJyHZkC AwEAAaOCCb8wggm7MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUKlqgqTbYsfJ01cmg sFozNaV9EeowHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnLzCCB3IGA1UdEQSCB2kwggdlggthbWRnLm9yZy5ueoIUYXVja2xh bmRsZWFndWUuY28ubnqCEWF2YWxvbnJ1Z2J5LmNvLm56ghBiYWRtaW50b24ub3Jn Lm56gh9iYXlvZmlzbGFuZHNkcmVzc2FnZWdyb3VwLmNvLm56gg9ibG9rYXJ0aGIu Y28ubnqCEGJsdWVyb3ZlcnMuY28ubnqCDmJvd2xzYm9wLmNvLm56ghVicm93bnNi YXlib3dscy5vcmcubnqCE2J1cm5zaWRlcnVnYnkuY28ubnqCHmNhbnRlcmJ1cnlj b3VudHJ5Y3JpY2tldC5jby5ueoIWY2FudGVyYnVyeXVuaXRlZC5jby5ueoIVY2Fw aXRhbGJhc2ViYWxsLmNvLm56ghVjYXRoY29sbGVnZS5zY2hvb2wubnqCGGNoY2hm b290YmFsbHNxdWFzaC5jby5ueoIeY2hyaXN0Y2h1cmNobWV0cm9jcmlja2V0LmNv Lm56ghxjaHJpc3RjaHVyY2htZXRyb2NyaWNrZXQuY29tghtjaHJpc3RjaHVyY2ht ZXRyb2NyaWNrZXQubnqCHGNocmlzdGNodXJjaG1ldHJvY3JpY2tldC5vcmeCH2No cmlzdGNodXJjaG1ldHJvY3JpY2tldC5vcmcubnqCEmNsdWJzbnpkYXJ0cy5jby5u eoIVZGFyZmllbGRjcmlja2V0LmNvLm56ghNkYXJmaWVsZHJ1Z2J5LmNvLm56ghRk dW5lZGlubmV0YmFsbC5jby5ueoITZWFzdGNvYXN0ZXhwby5jby5ueoIUZnJhc2Vy dGVjaGNyaWNrZXQubnqCEmhhdmVsb2Nrc2tpLm9yZy5ueoIcaGF3a2VzYmF5ZmFy bWVyc21hcmtldC5jby5ueoIVaGF3a2VzYmF5c3F1YXNoLmNvLm56ggxoYmJjdC5v cmcubnqCE2hiYnVzaW5lc3NodWIuY28ubnqCEGhiYnVzaW5lc3NodWIubnqCDmhu aHMuc2Nob29sLm56gg1obmkuc2Nob29sLm56gg1obndhZmMub3JnLm56ghZob2Nr ZXl3YWlyYXJhcGEub3JnLm56ghJoc29iYnVybnNpZGUuY28ubnqCFWthcGl0aWd5 bXNwb3J0cy5jby5ueoIUa2FwaXRpc29mdGJhbGwuY28ubnqCEWthdW1hdHVhdGMu b3JnLm56ghVrZXJpa2VyaW10YmNsdWIuY28ubnqCGGxpbmNvbG5ib3dsaW5nY2x1 Yi5jby5ueoISbWFyaXN0YWxiaW9uLmNvLm56ghhtYXJpc3RpbnZlcmNhcmdpbGwu Y28ubnqCFG1hcmxpbnNuZXRiYWxsLmNvLm56ghBtY29ic3F1YXNoLmNvLm56ggxt b29sb28uY28ubnqCGm1vb2xvb2NvbW11bml0eXJ1Z2J5LmNvLm56ghRtb29uc2hp bmV0cmFpbC5jby5ueoIQbXBjcmlja2V0Lm9yZy5ueoIWbmV0YmFsbHdhaXRha2Vy ZS5jby5ueoIbbm9ydGhoYXJib3Vyd2F0ZXJwb2xvLmNvLm56ggtvdHRhLm9yZy5u eoIXb3R1bW9ldGFpZm9vdGJhbGwuY28ubnqCEnBhcGFrdXJhbmV0YmFsbC5ueoIY cGF1YW51aWxpZmVndWFyZHMub3JnLm56gg9wa2pzcG9ydHMuY28ubnqCEnBsYXlz b2Z0YmFsbC5jby5ueoIYcHJlYmJsZXRvbmZvb3RiYWxsLmNvLm56gh5wcmltYXJ5 c3BvcnRzY2FudGVyYnVyeS5vcmcubnqCFnB1a2Vrb2hlc29mdGJhbGwuY28ubnqC E3Jvd2FuZGFsZS5zY2hvb2wubnqCE3JveWFsb2FrYm93bHMuY28ubnqCF3J1Z2J5 LWZvdW5kYXRpb24ub3JnLm56ghVydWdieWZvdW5kYXRpb24uY28ubnqCE3J1Z2J5 Zm91bmRhdGlvbi5jb22CEnJ1Z2J5Zm91bmRhdGlvbi5ueoIOc2FpbGhiYy5vcmcu bnqCEnNoYXJrc3Nwb3J0cy5jby5ueoIVc2lsdmVyZGFsZXJ1Z2J5LmNvLm56gg1z cG9ydGhiLmNvLm56gg5zcG9ydGhiLm5ldC5ueoIQc3BvcnRoYmNoYi5jby5ueoIT c3BvcnRoYndhaXJvYS5jby5ueoIVc3F1YXNoYXVja2xhbmQub3JnLm56ghFzdG9y YW5zLnNjaG9vbC5ueoIRc3VtbmVyYm93bHMuY28ubnqCE3Rha2FwdW5hcnVnYnku Y28ubnqCEXRhdXBvaG9ja2V5LmNvLm56gg10aHMuc2Nob29sLm56gg10b3VjaG56 LmNvLm56ggp0b3VjaG56Lm56ggp0cmZ1LmNvLm56gg93YWhpbmV0b2FtY2MubnqC GXdoYW5nYXJlaWJyaWRnZWNsdWIuY28ubnqCFndoYW5nYXJlaW5ldGJhbGwuY28u bnqCFHdvcmxkcG93ZXJsaWZ0aW5nLm56ggd3c3JhLm56gg16ZXBoeXIub3JnLm56 MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB 9gSB8wDxAHcA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFogqIf 7wAABAMASDBGAiEAw52XqqZQsTmm6/IoSCKL1ZubfKhx0/571yM5Jfi+K70CIQDB X1wNJmsc6Y9TAKb/3zT1YHh10oWuXzSPXm2Xx1O8pQB2AGPy283oO8wszwtyhCdX azOkjWF3j711pjixx2hUS9iNAAABaIKiIgYAAAQDAEcwRQIhAJpKopVs3xSwwB4W 20LAFwEi7PRRwjO3jkPWSU7m2h84AiAXV7XIUi3xBNxhbloXb9sPhmaNdO0AhtR0 w6DeKpWn1jANBgkqhkiG9w0BAQsFAAOCAQEARfnrxCadVlX38VD9Nh62EX/cWsza pgoVErXzgnH05/dG3SLg4i3lU1OHUf+OKSzhWOnYpK/HZzkiwJx2oQQTUdZRvY31 TG5nDIH5R5QMHl/Ef33mjI+4kRxmSw5pOUeUrxJsylZ5ytvVofD98FQwe0XGu9hW VArJeiCDOtP6VWaRy3SD5YLXC0KKnNWhAdiEiObLwOcvxMKtWutB5jWfK3dPIZcc GrmUJKycSQmRPD5LRP911y1uPSWZtfA4inVnH5zgRkbc0rolQMMnPS0NEkAQmGDF JCszjE8HbhDxBD4e3hKLufskXdbMTlVs6ljvcxp2W+K7lEaqB7arWWQnUg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiXreC0Pl0eYGITSEw6a 1WiUd8tXGCpSYytXUdmmm+Txxf8k3JPZg5c2Wqd/GxY/6cn6Kux+B2GZ9aalauIm Cg9oyJh3iybDpXdlx8FfqH1zfGrICPT70/NJi+owxRQhQ2HttCuJ3YPmQXaZ9AAO RWLHF/kIp175NAlfSdbaTwC4lcoICwoxYGUodBqcEgBLOQqaAYocTKCp1xXBmbAC VW+qmR4Mm+1RlVu+2VkX5lSvRwggMzm90Jmk1vYZW1Ufhd36CAjMIqqB5nuGT1b0 OmAvo3hyt+L4/FTWVgiCdWs0UzVNDVe+/v35KJem3qNUIAV9qlYmlMPUKLU6EnId mQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 314789547135394256619882043197373722815034 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-25 00:31:29 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-25 00:31:29 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'squashauckland.org.nz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16429678597115166994426932068331658313002704310937394833715107338277045133683175372167231949458072046441653373996484577389248981844010864680752750521188467093956858302351022488287860503444827814110449225915660060357418491343392609513732189515894229032180958191041544776866854780767208444357765241032329578670748023636559367126299435428595375317136931208736680524411600361596533101583803339747809074390385237166580448659066499325983634710089293364236619778156422966296691220719208211317620003896939904307270581881763045867198399526114750221624534981982143131836534248403048588587276244329602301729130453041207724613017 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2a5aa0a936d8b1f274d5c9a0b05a3335a57d11ea . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1897 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amdg.org.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandleague.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avalonrugby.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badminton.org.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayofislandsdressagegroup.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blokarthb.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluerovers.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlsbop.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brownsbaybowls.org.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burnsiderugby.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburycountrycricket.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburyunited.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalbaseball.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathcollege.school.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chchfootballsquash.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchmetrocricket.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchmetrocricket.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchmetrocricket.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchmetrocricket.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchmetrocricket.org.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubsnzdarts.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darfieldcricket.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darfieldrugby.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunedinnetball.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastcoastexpo.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frasertechcricket.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelockski.org.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbayfarmersmarket.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbaysquash.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbbct.org.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbbusinesshub.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbbusinesshub.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hnhs.school.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hni.school.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hnwafc.org.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeywairarapa.org.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsobburnside.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapitigymsports.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapitisoftball.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaumatuatc.org.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kerikerimtbclub.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolnbowlingclub.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristalbion.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristinvercargill.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlinsnetball.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcobsquash.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mooloo.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mooloocommunityrugby.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moonshinetrail.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpcricket.org.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballwaitakere.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northharbourwaterpolo.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otta.org.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otumoetaifootball.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakuranetball.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pauanuilifeguards.org.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pkjsports.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playsoftball.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonfootball.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primarysportscanterbury.org.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pukekohesoftball.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rowandale.school.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaloakbowls.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugby-foundation.org.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbyfoundation.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbyfoundation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbyfoundation.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sailhbc.org.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharkssports.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverdalerugby.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporthb.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporthb.net.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporthbchb.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporthbwairoa.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squashauckland.org.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storans.school.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumnerbowls.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takapunarugby.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taupohockey.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ths.school.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchnz.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchnz.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trfu.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wahinetoamcc.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareibridgeclub.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareinetball.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldpowerlifting.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsra.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zephyr.org.nz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016882a21fef0000040300483046022100c39d97aaa650b139a6ebf22848228bd59b9b7ca871d3fe7bd7233925f8be2bbd022100c15f5c0d266b1ce98f5300a6ffdf34f5607875d285ae5f348f5e6d97c753bca500760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016882a2220600000403004730450221009a4aa2956cdf14b0c01e16db42c0170122ecf451c233b78e43d6494ee6da1f3802201757b5c8522df104dc616e5a176fdb0f86668d74ed0086d474c3a0de2a95a7d6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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