pcbasketballclub.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7d:f1:70:fc:fa:8a:e3:2d:05:c6:bb:75:81:25:df:8b:20 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pcbasketballclub.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7d:f1:70:fc:fa:8a:e3:2d:05:c6:bb:75:81:25:df:8b:20
Serial Number (int): 304193084275647612817774212345225721908000
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 85:c4:6d:29:86:00:de:1b:23:e7:d4:19:06:f7:66:04:e7:33:c5:6a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 74:55:87:ad:ba:94:e2:a8:47:09:c3:4a:c9:eb:03:18:46:73:f7:5f
Fingerprint (sha256): 46:96:a0:9a:cf:61:4e:94:bf:ba:97:b9:71:8a:72:2f:b1:03:8e:11:d5:e9:f1:4a:c3:6b:f0:b6:4e:8e:97:bf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pcbasketballclub.co.nz

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pcbasketballclub.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ardmoremarist.co.nz
aucklandbaseball.co.nz
aucklandfootball.org.nz
aucklandservicerifle.org.nz
bbafc.org.nz
bowlssouthland.co.nz
bowlswestcoast.org.nz
brooklyncroquetclub.org
burwoodafc.co.nz
capitalfootball.org.nz
centralfootball.co.nz
centralfootball.org.nz
clevedontennisclub.co.nz
cmsport.co.nz
cornwallcricket.co.nz
developyourlegacy.co.nz
ecbafc.co.nz
footballsouth.co.nz
gameoftwohalfwits.com
glenfieldbowls.co.nz
greenhithefootball.org
hbcc.org.nz
hendersonsquash.co.nz
hillseekers.co.nz
hillseekers4wd.co.nz
howicksailingclub.co.nz
hrc.org.nz
karakasportspark.co.nz
katikatifc.co.nz
keirunga.org.nz
ladiessocialcycling.org.nz
linfield.co.nz
linwoodrugby.co.nz
linwoodrugby.com
mainlandfootball.co.nz
makikihi.school.nz
manurewamets.co.nz
maoribasketball.co.nz
marlborough-touch.co.nz
marlboroughfootball.co.nz
mmcc.co.nz
mountfortwaterpolo.nz
myfootball.co.nz
nelsonbaysfootball.co.nz
nelsonnetball.co.nz
newplymouthcroquetclub.co.nz
nff.org.nz
nhbmx.org.nz
nzfootball.co.nz
nzsra.org.nz
oratiaunited.co.nz
papanuiredwoodafc.co.nz
pcbasketballclub.co.nz
ravensbourne.co.nz
redbeachsquashclub.co.nz
rivertongolf.co.nz
rosegardenscroquetclub.org.nz
royaloakracquets.co.nz
schoolground.co.nz
schoolground.nz
scpacers.co.nz
slalomnz.org.nz
southlandbmxclub.co.nz
sportcanterbury.org.nz
sportsground.co.nz
sportsportal.co.nz
sporttasman.org.nz
sportwaitakere.co.nz
sportwaitakere.nz
sportyapp.co.nz
takapunaafc.co.nz
tcafc.co.nz
teawamutuafc.co.nz
themightypclass.org.nz
ulyssesnelson.org.nz
upperhuttrifleclub.co.nz
waibopfootball.co.nz
waihekeunited.org.nz
waihibeachtennisclub.co.nz
waihoraclaytarget.co.nz
waikaregolfclub.co.nz
waitakerecityfc.org.nz
waitakererugby.co.nz
waitematarowing.org.nz
westernafc.com
whangaroasportfishingclub.co.nz
woolstonparkindoorbowls.org.nz

Other certificates including the domain name pcbasketballclub.co.nz

(limited to 100 certificates)
maristinvercargill.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sportnorthland.co.nz
sporty.co.nz
sporty.co.nz
pcbasketballclub.co.nz
pcbasketballclub.co.nz
sporty.co.nz
www.pkjsports.co.nz
sporty.co.nz
www.akaranacityrifleclub.co.nz
hockeymanawatu.org.nz
www.nzfootball.co.nz
hockeymanawatu.org.nz
sporty.co.nz
maristinvercargill.co.nz
hockeymanawatu.org.nz
maristinvercargill.co.nz
www.aucklandsoftball.org.nz
sporty.co.nz
www.brooklyncroquetclub.org
www.thesalmonrun.nz
maristinvercargill.co.nz
maristalbion.co.nz
www.mooloocommunityrugby.co.nz
sporty.co.nz
www.unimountafc.org.nz
www.christchurchmetrocricket.org
www.sportsground.com
sporty.co.nz
www.pauanuilifeguards.org.nz

Certificate

The complete raw certificate details for pcbasketballclub.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiedP6x5XFu/Z1fPMTPCO
94K+gBtEzEx2KNEmX/2ITvEHCZXTmcqE3rkGK861R9NkBin0zY4q/q44nWJGnA5s
5FyojTM6ws+JXwH7fiyfUnY2McIA0DTRWcPEvPfUEsTOh7rHmtTXiG/TWWe2VAYz
wdvTjzN5l5CP+45azWWcSw106S50I9T9C06GfbREi1lcs3GJGezZOT0bhxNt+nsL
OIKis96vg2hH3seww8uU5sarx4a0U1WJKc+dPcnuI1l7dV0v3K12pEHJccYg/SE3
ItHMIwIrS+/NODZZ5XsgCIX8dsXJ14iGaHCbsMmGpfnv37C/iBxY2YVNBVqQ5zSn
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304193084275647612817774212345225721908000
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-09 02:38:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-07 02:38:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pcbasketballclub.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17408712068219702563917927239601842282400772427682618343910061100498720843844328360658305957956663853427283187648443590037200410714291708823261354829339976081096532183502957168124928031902509273199113620907601887085233748539859004734870121622059590707700512490704782642340988971340262817856214646521017128934821080017403105480135055549247446748741476322374569922062690844097905593660014384390906384876535210775471690231927166853896809805272204166930342631260222515347982420566183598160103266758194882183497799425202188310947820154621940346928394397614479998533057548107283739784802047166269865864590845090055104800643
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85c46d298600de1b23e7d41906f76604e733c56a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1872 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ardmoremarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandservicerifle.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlssouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswestcoast.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooklyncroquetclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedontennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornwallcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developyourlegacy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecbafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footballsouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameoftwohalfwits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenfieldbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenhithefootball.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hendersonsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillseekers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillseekers4wd.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howicksailingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakasportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katikatifc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keirunga.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladiessocialcycling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linfield.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linwoodrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linwoodrugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainlandfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makikihi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewamets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maoribasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlborough-touch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountfortwaterpolo.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonbaysfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newplymouthcroquetclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhbmx.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oratiaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papanuiredwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ravensbourne.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redbeachsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivertongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosegardenscroquetclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaloakracquets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolground.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scpacers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slalomnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandbmxclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportcanterbury.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporttasman.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportwaitakere.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportwaitakere.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportyapp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takapunaafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teawamutuafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themightypclass.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulyssesnelson.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upperhuttrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waibopfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihekeunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihibeachtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihoraclaytarget.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikaregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitakerecityfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitakererugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitematarowing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westernafc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangaroasportfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woolstonparkindoorbowls.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016656e7718d000004030047304502207c812607bfbe0e82ea4e2450644d817ea2e74c6808a91a204d523c09e5410e23022100824b7e6b1b46e9561385e019cb248e8dfad814ee58011eecef3f274059be622c007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016656e771780000040300483046022100b3316d71033cc0d819c0b8164ee6bd354cd63a9bcd372ec32ce674e47764df08022100e38c0bdafbfc0a89fb85e04836b30849457ed6778bdb04cf836c269de0bf4bed
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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