www.karakacricket.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:90:ac:6f:57:47:6a:0f:22:da:f1:0f:ba:e2:8f:f4:51:a6 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.karakacricket.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:90:ac:6f:57:47:6a:0f:22:da:f1:0f:ba:e2:8f:f4:51:a6
Serial Number (int): 310566723962349840340339536259914952626598
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0f:b9:63:15:db:76:fc:ed:af:ec:4c:5a:e4:65:7a:8e:90:c4:d3:ac
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): db:01:4f:ae:43:51:b7:64:c8:83:4b:d0:71:fe:ca:39:5f:8c:4c:ed
Fingerprint (sha256): 42:f5:34:31:4b:9a:5b:3f:16:78:e0:35:a5:91:63:8e:fc:2f:f6:25:bc:44:c1:22:64:fa:9d:af:e2:e9:a6:5f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.karakacricket.co.nz

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.karakacricket.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

swim.diocesan.school.nz
www.abundantlife.school.nz
www.ahiparagamefishclub.co.nz
www.ararimu.school.nz
www.ashleyforestrallysprint.co.nz
www.aucklandrugby.co.nz
www.aucklandsquashjuniors.nz
www.aucklandtouch.co.nz
www.beckenhamtennisclub.co.nz
www.boptouch.co.nz
www.bowlshawkesbay.org.nz
www.bowlswaikanae.com
www.capitaldarts.co.nz
www.cometswimming.co.nz
www.cornwallparktouch.nz
www.csa.org.nz
www.eakfc.org
www.ecbsoftball.org.nz
www.farmpass.co.nz
www.feildinglawnmowerracing.org.nz
www.generatenetwork.org
www.gisborneboardriders.com
www.glenfieldsoftballclub.co.nz
www.greertonponyclub.com
www.hamiltoncanoepolo.org.nz
www.harbourhockey.org.nz
www.hbcfc.co.nz
www.hbcfc.org.nz
www.hbsfc.co.nz
www.hockeysouthcanterbury.co.nz
www.hortpass.co.nz
www.hyc.org.nz
www.jcc.org.nz
www.juniorcricket.co.nz
www.jyf.co.nz
www.karakacricket.co.nz
www.karakatennis.co.nz
www.kensingtonfitness.co.nz
www.kiwikidz.co.nz
www.manurewaswimmingclub.co.nz
www.marketground.co.nz
www.marlborough-car-club.co.nz
www.marlboroughparktennis.co.nz
www.marlboroughvolleyball.org.nz
www.mtrbmx.co.nz
www.nelsonfarmersmarket.co.nz
www.nelsonfarmersmarket.org.nz
www.nelsonsoftball.org.nz
www.netballwairarapa.co.nz
www.nhcc.co.nz
www.northharbourcycling.co.nz
www.northharboursoftball.co.nz
www.nskfc.org.nz
www.nzpowerlifting.co.nz
www.otahuhuroversrugbyleague.co.nz
www.parafednorthland.co.nz
www.phcc.co.nz
www.playbowls.co.nz
www.playsoftball.co.nz
www.ponsonbybowls.nz
www.porritt.school.nz
www.prdf.co.nz
www.rangatiragolf.co.nz
www.ratec.org.nz
www.rbpc.nz
www.riverroad.co.nz
www.roosterssoftball.co.nz
www.rugby-foundation.org.nz
www.schoolsportaoraki.co.nz
www.southcanterburytouch.co.nz
www.southernlakesmultisportclub.co.nz
www.sportotago.co.nz
www.stewartalexander.co.nz
www.swim.diocesan.school.nz
www.tabletennissc.org.nz
www.taradale.co.nz
www.tasportscycling.co.nz
www.timarucyclingclub.co.nz
www.torbaytennis.org.nz
www.totaltouch.org.nz
www.touchnorthharbour.co.nz
www.touchpapamoa.co.nz
www.tuki.co.nz
www.twyford.school.nz
www.volleyballhb.org.nz
www.waiopehu.ac.nz
www.waiukuponyclub.co.nz
www.whangareitri.co.nz
www.wmcc.net.nz
www.woodendrugby.co.nz

Other certificates including the domain name karakacricket.co.nz

(limited to 100 certificates)
sporty.co.nz
turbotouch.co.nz
northcanterburyrugby.co.nz
www.rugby-foundation.org.nz
hastings-central.school.nz
www.karakacricket.co.nz
ultrarunner.org.nz
mtrbmx.co.nz
aafl.co.nz
www.sporty.co.nz
aucklandmarist.co.nz
lucknow.school.nz
prdf.co.nz
www.whangareitri.co.nz

Certificate

The complete raw certificate details for www.karakacricket.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/6q/A+zRFuc1XCskA78
GBBoX8zr9Ei6Ixq5N3IEdjar4Jvhubt7KMQggOZ4OVIVtS40tVeBZ1uSa+aD3bGF
yjeE4Sxi49/yy86Szc0NGzH+Eh71uG/OajubdPWtlA3CARiEiy1feoREl5eBxj4E
4rgEwhTtg2lBnWKwL3dbVXx2DxH3g25tnzm/koQPh+cBpSheyNTE0nh9715Hi/C5
9Jy3geTZcCyIEI//0VNBxDQoRazFpeNF1D6wc7bqXTig5y3feYIdljuk09HkQNxd
cZUe/ch9QQuqLJN2rWihSx+yi0Qcme3/79xo6h1YBJVqEutdJ36kdNfgZA+G+81t
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310566723962349840340339536259914952626598
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-26 22:05:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-24 22:05:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.karakacricket.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18682612256250107321231558264666573352642796484411230900260009097776750049372351268243395143096253664166411244092436931863114163168579994305113115123180542343924733603168638404704752942197400335442616593497415746344346566447364000986927709640422374032516673703388307488127955532035860971981883579024213108477333401813495409363279412474295379604625300279574585253005699401488138125367380513140720211149701413019241560100589754285500201785064899854124031111950533770225660146685376551434168328312482675088010632892445621099004386653480529592497064875292660822433795746238153497101891560839619801787179701981051572022577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0fb96315db76fcedafec4c5ae4657a8e90c4d3ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2248 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swim.diocesan.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abundantlife.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahiparagamefishclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ararimu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashleyforestrallysprint.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandsquashjuniors.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandtouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beckenhamtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boptouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlshawkesbay.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswaikanae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitaldarts.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cometswimming.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornwallparktouch.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eakfc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecbsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmpass.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feildinglawnmowerracing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.generatenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gisborneboardriders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenfieldsoftballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greertonponyclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hamiltoncanoepolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harbourhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbsfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeysouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hortpass.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hyc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juniorcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jyf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakacricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakatennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kensingtonfitness.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiwikidz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manurewaswimmingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marketground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlborough-car-club.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughparktennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughvolleyball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtrbmx.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballwairarapa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northharbourcycling.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northharboursoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nskfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzpowerlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otahuhuroversrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parafednorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playsoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ponsonbybowls.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.porritt.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prdf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rangatiragolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ratec.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rbpc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverroad.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roosterssoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugby-foundation.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsportaoraki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcanterburytouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southernlakesmultisportclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportotago.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stewartalexander.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swim.diocesan.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tabletennissc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taradale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasportscycling.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timarucyclingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.torbaytennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.totaltouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchnorthharbour.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchpapamoa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twyford.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volleyballhb.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiopehu.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiukuponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareitri.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wmcc.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodendrugby.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000167524539ad000004030047304502201fcfe59dc47eb9b6162e210b7998cadbaafb480b5487a4f1aea25d5e5e6320ac022100ef7b4fa1c6f24fdf1ee6040213ce69a83113c949f10729f15ee0e987bf23b81d00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001675245385b0000040300473045022100ebef25a880a050d78a9545b3495b0c04c13e20cbee770dfbaa9c0cca7bdb6be50220610793b1554a2fa40d7e4a763789d61020c052b18b30abe3b06de2da9c4f13a3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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