southlandmtbclub.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:88:98:43:a6:0b:62:bd:f8:e8:11:75:65:75:ca:ae:81:73 was issued on by Let's Encrypt.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=southlandmtbclub.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:88:98:43:a6:0b:62:bd:f8:e8:11:75:65:75:ca:ae:81:73
Serial Number (int): 307817653603559263204227522805157013127539
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 80:39:1c:e7:1e:c0:9a:53:60:f8:ad:74:01:8d:1a:5a:e6:fe:5b:64
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8d:7e:3e:24:09:dc:47:67:31:fc:f3:5b:6e:62:c4:fd:c2:95:52:64
Fingerprint (sha256): 47:72:2e:a0:7a:2e:44:6a:8c:db:ac:99:33:a6:2f:8e:94:9a:63:dc:15:84:45:6c:ab:39:33:fa:73:46:78:bd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate southlandmtbclub.co.nz

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for southlandmtbclub.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acwpa.co.nz
ashleyrugby.co.nz
aucklandmarist.co.nz
badmintonhb.co.nz
blenheimgolfclub.co.nz
bluffhillbowls.co.nz
bowlswanganui.org.nz
boxingnz.org.nz
bushmultisport.org.nz
cambridgenetball.org.nz
canamju.org
canoeslalombop.co.nz
clevedoncricketclub.co.nz
clevedonrifleclub.co.nz
cmih.co.nz
devonportsquash.org.nz
ellesmererugby.org.nz
gisborneharriers.co.nz
grammarcarlton.co.nz
grammartec.co.nz
halswellcricket.co.nz
hastings-central.school.nz
hastingsintermediate.school.nz
heet.net.nz
karakarugbyclub.co.nz
manurewarugby.co.nz
mariancollege.school.nz
maristfc.co.nz
maristnh.co.nz
marlboroughtennis.co.nz
martinboroughsquash.co.nz
martinboroughtennisclub.co.nz
mchockey.co.nz
midcanterburyrugby.co.nz
mttauharagymnastics.co.nz
mtwellingtonrugby.co.nz
mtwswim.co.nz
ncnc.org.nz
nelsoncarclub.co.nz
netballkapiti.org.nz
netballsouthcanterbury.co.nz
nhcc.co.nz
northharbourcycling.co.nz
nzpca.org
oacnz.org
ophc.co.nz
orfu.co.nz
otagotouch.co.nz
paparoa.school.nz
parkvale.school.nz
pioneerbasketballclub.co.nz
prebbletonnetball.org.nz
primarysportwellington.org.nz
puhoisports.org.nz
rotoruahockey.co.nz
smognetball.org.nz
southlandmtbclub.co.nz
stanthony.ac.nz
stjos.school.nz
suburbsrugby.co.nz
taierirugby.co.nz
taniwha.co.nz
tasmanrugbyreferees.co.nz
technicalharriers.co.nz
timarusquashclub.co.nz
touchcanterbury.co.nz
trenthamrifleclub.co.nz
tuakauponyclub.co.nz
ultrarunner.org.nz
valleyhockey.org.nz
volleyballbop.co.nz
wellingtontouch.org.nz
wellsfordsquashclub.co.nz
whtc.co.nz
wmsc.org.nz
wvcc.org.nz

Other certificates including the domain name southlandmtbclub.co.nz

(limited to 100 certificates)
willowpark.school.nz
www.diamondsportsnz.co.nz
meeanee.school.nz
sporty.co.nz
www.taranakihockey.org.nz
sporty.co.nz
www.canterburybaseball.co.nz
www.ophc.co.nz
southlandmtbclub.co.nz
www.opotikicol.school.nz
www.ophc.co.nz
distanceridingnewzealand.co.nz
www.rollestonrugby.co.nz
sporty.co.nz
sporty.co.nz
www.baseballnewzealand.org
canterburybaseball.co.nz
uniss.co.nz
sporty.co.nz
www.waihibeachtennisclub.co.nz
rosmini.school.nz
sporty.co.nz
sporty.co.nz
canterburybaseball.co.nz
www.westcoastsoftball.co.nz
meeanee.school.nz
mtwswim.co.nz

Certificate

The complete raw certificate details for southlandmtbclub.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu94nix5X/0+vsuARFkFg
dtX2LPnZX0ySDQGH+GV6bBDLGccvrK6DVpdYi4w3JppToHpeHHL+YcJpP2mmdoct
mcF3xJM/InWqzpBypjkPp96H/nkMCEwLMoYJ6yUfD8asveHg7TVg2v7yl7BRwX2B
kVubujdfmzOolk0GT1O2N/Z8vjaO2r5hTK2eHHFu9gIUe1zyYS6UWcHx2qS6JIoK
dQfP+Db3/d8A7HRmDTSpO8gFb/CYniRlUUuT3IQNHcbIlYz0+mhVwdyjOsmocbvf
8xyYGYq7Z/CvnAYK38+SI7GFh7ZX8Awmtzfx3aWPo/+KOWhoPOOysSvv0mwmFYJv
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307817653603559263204227522805157013127539
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-09 00:24:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-07 00:24:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'southlandmtbclub.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23716111479025716354011188604520774588760154664267463369372787857827642756930236742631147618613444283340498490852591879421392147218640225856391501342464693880321705317903071360005993633635984390118128336232340428378984312954010453593675785243040736759758728660595091707342346841752033536406795770273573233802581706291163994904386693159922968130766283803021063457596365994897123006041990610089023117652527434994008742414527521086779821948410632200997783246054224277156398054709620145288933512107895822606521746265369167661930133736906579731364410637921680606682064124375220248151226838346537539290991703253683452145489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							80391ce71ec09a5360f8ad74018d1a5ae6fe5b64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1593 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acwpa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashleyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandmarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badmintonhb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blenheimgolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluffhillbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxingnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bushmultisport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgenetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canamju.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canoeslalombop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedonrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmih.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devonportsquash.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellesmererugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisborneharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grammarcarlton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grammartec.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halswellcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastings-central.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastingsintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heet.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakarugbyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariancollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristnh.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughtennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martinboroughsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martinboroughtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mchockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mttauharagymnastics.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtwellingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtwswim.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsoncarclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballkapiti.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballsouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northharbourcycling.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzpca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oacnz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ophc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otagotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paparoa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkvale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneerbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primarysportwellington.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puhoisports.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotoruahockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smognetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandmtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanthony.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjos.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suburbsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taierirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taniwha.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasmanrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technicalharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timarusquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trenthamrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuakauponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultrarunner.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valleyhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volleyballbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtontouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellsfordsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whtc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmsc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wvcc.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166566d33f2000004030047304502210089dd55394ca3d6a33e7d61e7622bae682d4945cfc11efc244a9a662202cad7e40220709cd2754241fff5e71217eea038a2be40684f0af548a6fc574ffc4cb08ad1310075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000166566d342a00000403004630440220057449fab56ff544c86038ddc7701078932c5170cf41d2d6b9d734c02680cac50220582a5e042a65f87d2080484839273ab9d3f6858b0781a7d199403789d8d2a9f0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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