www.rugby-foundation.org.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f2:8c:61:c0:82:43:ed:6d:ac:bc:11:e2:55:5d:7a:d2:07 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.rugby-foundation.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f2:8c:61:c0:82:43:ed:6d:ac:bc:11:e2:55:5d:7a:d2:07
Serial Number (int): 343871790066896341755471556499500376445447
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 01:b4:2e:09:e4:1d:74:e8:04:c9:aa:07:84:aa:67:6c:c9:e2:7f:6e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 36:df:a0:0e:4b:eb:eb:ab:8e:e2:2f:82:16:8f:fb:dd:c3:8d:27:e6
Fingerprint (sha256): 49:3c:3f:7c:70:8f:e4:58:1c:81:f3:8b:3e:4d:95:87:17:89:a0:b9:84:19:02:b9:e0:df:7e:74:03:91:96:69

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.rugby-foundation.org.nz

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.rugby-foundation.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bowlsnapier.co.nz
howicksoftball.co.nz
olympicwrestlingnz.com
starling.org.nz
swim.diocesan.school.nz
www.abundantlife.school.nz
www.ahiparagamefishclub.co.nz
www.ararimu.school.nz
www.ashleyforestrallysprint.co.nz
www.aucklandrugby.co.nz
www.aucklandsquashjuniors.nz
www.aucklandtouch.co.nz
www.boptouch.co.nz
www.bowlshawkesbay.org.nz
www.bowlsnapier.co.nz
www.bowlswaikanae.com
www.cometswimming.co.nz
www.csa.org.nz
www.eakfc.org
www.ecbsoftball.org.nz
www.feildinglawnmowerracing.org.nz
www.generatenetwork.org
www.hamiltoncanoepolo.org.nz
www.harbourhockey.org.nz
www.hawkesbaylandingpad.co.nz
www.hblp.co.nz
www.hbsfc.co.nz
www.hockeysouthcanterbury.co.nz
www.howicksoftball.co.nz
www.huttaikido.org.nz
www.hyc.org.nz
www.jcc.org.nz
www.juniorcricket.co.nz
www.jyf.co.nz
www.karakatennis.co.nz
www.kensingtonfitness.co.nz
www.kiwikidz.co.nz
www.lincolnbowlingclub.co.nz
www.manurewaswimmingclub.co.nz
www.marketground.co.nz
www.marlboroughparktennis.co.nz
www.marlboroughvolleyball.org.nz
www.mtbtauranga.co.nz
www.mtrbmx.co.nz
www.nelsonfarmersmarket.co.nz
www.nelsonfarmersmarket.org.nz
www.nelsonsoftball.org.nz
www.netballwairarapa.co.nz
www.northharboursoftball.co.nz
www.nskfc.org.nz
www.nzpowerlifting.co.nz
www.olympicwrestlingnz.com
www.otahuhuroversrugbyleague.co.nz
www.parafednorthland.co.nz
www.phcc.co.nz
www.playbowls.co.nz
www.playsoftball.co.nz
www.ponsonbybowls.nz
www.porritt.school.nz
www.prdf.co.nz
www.rangatiragolf.co.nz
www.ratec.org.nz
www.rbpc.nz
www.riverroad.co.nz
www.rugby-foundation.org.nz
www.schoolsportaoraki.co.nz
www.sissnetball.co.nz
www.southcanterburytouch.co.nz
www.sportotago.co.nz
www.squashauckland.org.nz
www.starling.org.nz
www.stewartalexander.co.nz
www.swim.diocesan.school.nz
www.taradale.co.nz
www.tasportscycling.co.nz
www.tgahockey.co.nz
www.torbaytennis.org.nz
www.totaltouch.org.nz
www.touchnorthharbour.co.nz
www.touchpapamoa.co.nz
www.tuki.co.nz
www.twyford.school.nz
www.volleyballhb.org.nz
www.waiopehu.ac.nz
www.waiukuponyclub.co.nz
www.whangareitri.co.nz
www.wmcc.net.nz
www.woodendrugby.co.nz

Other certificates including the domain name rugby-foundation.org.nz

(limited to 100 certificates)
belmontparkbowlingclub.co.nz
sporty.co.nz
belmontparkbowlingclub.co.nz
www.sporty.co.nz
sporty.co.nz
www.rugby-foundation.org.nz
squashauckland.org.nz
www.karakacricket.co.nz
www.rugby-foundation.org.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.hockeysouthcanterbury.co.nz
sporty.co.nz
www.sporty.co.nz
www.rugby-foundation.org.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
belmontparkbowlingclub.co.nz
sporty.co.nz
www.rugby-foundation.org.nz
www.sporty.co.nz
trfu.co.nz
sporty.co.nz

Certificate

The complete raw certificate details for www.rugby-foundation.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINujCCDKKgAwIBAgISA/KMYcCCQ+1trLwR4lVdetIHMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMjgwMjA2MDhaFw0y
MDA0MjcwMjA2MDhaMCYxJDAiBgNVBAMTG3d3dy5ydWdieS1mb3VuZGF0aW9uLm9y
Zy5uejCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKMOaVLag6Z3I5Ca
pBgITJxb/QzyFl4P2suNseXnzfKRBdGzcIFm20tiJrbfDi00vHHFxmHBwu1Qhv3p
rfZoBReprcF1kQchRSAPeYqWvegS0NHRVirpplYCerc+29vryPmg7qdkt+vr5EH3
DUIOX7m5THwcj9VNYxc3jhXW2cbXnWikEpXGRktBwx/2OE6Gt5yMDl4Xwp2YczWi
bYS977g2Z38gQBmsFQzpA0fZCxZGtOHaeyXe2+csdG8VhtiFaVJQvavJo60KPaR1
l2TXjy1EdaWjW+81VTYpf7UM9S6q2jZuHKasa8uTQOoaQvUTJs84jCG2vWcwp2vm
6U0RZnMCAwEAAaOCCrwwggq4MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUAbQuCeQd
dOgEyaoHhKpnbMnif24wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzCCCHEGA1UdEQSCCGgwgghkghFib3dsc25hcGllci5j
by5ueoIUaG93aWNrc29mdGJhbGwuY28ubnqCFm9seW1waWN3cmVzdGxpbmduei5j
b22CD3N0YXJsaW5nLm9yZy5ueoIXc3dpbS5kaW9jZXNhbi5zY2hvb2wubnqCGnd3
dy5hYnVuZGFudGxpZmUuc2Nob29sLm56gh13d3cuYWhpcGFyYWdhbWVmaXNoY2x1
Yi5jby5ueoIVd3d3LmFyYXJpbXUuc2Nob29sLm56giF3d3cuYXNobGV5Zm9yZXN0
cmFsbHlzcHJpbnQuY28ubnqCF3d3dy5hdWNrbGFuZHJ1Z2J5LmNvLm56ghx3d3cu
YXVja2xhbmRzcXVhc2hqdW5pb3JzLm56ghd3d3cuYXVja2xhbmR0b3VjaC5jby5u
eoISd3d3LmJvcHRvdWNoLmNvLm56ghl3d3cuYm93bHNoYXdrZXNiYXkub3JnLm56
ghV3d3cuYm93bHNuYXBpZXIuY28ubnqCFXd3dy5ib3dsc3dhaWthbmFlLmNvbYIX
d3d3LmNvbWV0c3dpbW1pbmcuY28ubnqCDnd3dy5jc2Eub3JnLm56gg13d3cuZWFr
ZmMub3JnghZ3d3cuZWNic29mdGJhbGwub3JnLm56giJ3d3cuZmVpbGRpbmdsYXdu
bW93ZXJyYWNpbmcub3JnLm56ghd3d3cuZ2VuZXJhdGVuZXR3b3JrLm9yZ4Icd3d3
LmhhbWlsdG9uY2Fub2Vwb2xvLm9yZy5ueoIYd3d3LmhhcmJvdXJob2NrZXkub3Jn
Lm56gh13d3cuaGF3a2VzYmF5bGFuZGluZ3BhZC5jby5ueoIOd3d3LmhibHAuY28u
bnqCD3d3dy5oYnNmYy5jby5ueoIfd3d3LmhvY2tleXNvdXRoY2FudGVyYnVyeS5j
by5ueoIYd3d3Lmhvd2lja3NvZnRiYWxsLmNvLm56ghV3d3cuaHV0dGFpa2lkby5v
cmcubnqCDnd3dy5oeWMub3JnLm56gg53d3cuamNjLm9yZy5ueoIXd3d3Lmp1bmlv
cmNyaWNrZXQuY28ubnqCDXd3dy5qeWYuY28ubnqCFnd3dy5rYXJha2F0ZW5uaXMu
Y28ubnqCG3d3dy5rZW5zaW5ndG9uZml0bmVzcy5jby5ueoISd3d3Lmtpd2lraWR6
LmNvLm56ghx3d3cubGluY29sbmJvd2xpbmdjbHViLmNvLm56gh53d3cubWFudXJl
d2Fzd2ltbWluZ2NsdWIuY28ubnqCFnd3dy5tYXJrZXRncm91bmQuY28ubnqCH3d3
dy5tYXJsYm9yb3VnaHBhcmt0ZW5uaXMuY28ubnqCIHd3dy5tYXJsYm9yb3VnaHZv
bGxleWJhbGwub3JnLm56ghV3d3cubXRidGF1cmFuZ2EuY28ubnqCEHd3dy5tdHJi
bXguY28ubnqCHXd3dy5uZWxzb25mYXJtZXJzbWFya2V0LmNvLm56gh53d3cubmVs
c29uZmFybWVyc21hcmtldC5vcmcubnqCGXd3dy5uZWxzb25zb2Z0YmFsbC5vcmcu
bnqCGnd3dy5uZXRiYWxsd2FpcmFyYXBhLmNvLm56gh53d3cubm9ydGhoYXJib3Vy
c29mdGJhbGwuY28ubnqCEHd3dy5uc2tmYy5vcmcubnqCGHd3dy5uenBvd2VybGlm
dGluZy5jby5ueoIad3d3Lm9seW1waWN3cmVzdGxpbmduei5jb22CInd3dy5vdGFo
dWh1cm92ZXJzcnVnYnlsZWFndWUuY28ubnqCGnd3dy5wYXJhZmVkbm9ydGhsYW5k
LmNvLm56gg53d3cucGhjYy5jby5ueoITd3d3LnBsYXlib3dscy5jby5ueoIWd3d3
LnBsYXlzb2Z0YmFsbC5jby5ueoIUd3d3LnBvbnNvbmJ5Ym93bHMubnqCFXd3dy5w
b3JyaXR0LnNjaG9vbC5ueoIOd3d3LnByZGYuY28ubnqCF3d3dy5yYW5nYXRpcmFn
b2xmLmNvLm56ghB3d3cucmF0ZWMub3JnLm56ggt3d3cucmJwYy5ueoITd3d3LnJp
dmVycm9hZC5jby5ueoIbd3d3LnJ1Z2J5LWZvdW5kYXRpb24ub3JnLm56ght3d3cu
c2Nob29sc3BvcnRhb3Jha2kuY28ubnqCFXd3dy5zaXNzbmV0YmFsbC5jby5ueoIe
d3d3LnNvdXRoY2FudGVyYnVyeXRvdWNoLmNvLm56ghR3d3cuc3BvcnRvdGFnby5j
by5ueoIZd3d3LnNxdWFzaGF1Y2tsYW5kLm9yZy5ueoITd3d3LnN0YXJsaW5nLm9y
Zy5ueoIad3d3LnN0ZXdhcnRhbGV4YW5kZXIuY28ubnqCG3d3dy5zd2ltLmRpb2Nl
c2FuLnNjaG9vbC5ueoISd3d3LnRhcmFkYWxlLmNvLm56ghl3d3cudGFzcG9ydHNj
eWNsaW5nLmNvLm56ghN3d3cudGdhaG9ja2V5LmNvLm56ghd3d3cudG9yYmF5dGVu
bmlzLm9yZy5ueoIVd3d3LnRvdGFsdG91Y2gub3JnLm56ght3d3cudG91Y2hub3J0
aGhhcmJvdXIuY28ubnqCFnd3dy50b3VjaHBhcGFtb2EuY28ubnqCDnd3dy50dWtp
LmNvLm56ghV3d3cudHd5Zm9yZC5zY2hvb2wubnqCF3d3dy52b2xsZXliYWxsaGIu
b3JnLm56ghJ3d3cud2Fpb3BlaHUuYWMubnqCGHd3dy53YWl1a3Vwb255Y2x1Yi5j
by5ueoIWd3d3LndoYW5nYXJlaXRyaS5jby5ueoIPd3d3LndtY2MubmV0Lm56ghZ3
d3cud29vZGVuZHJ1Z2J5LmNvLm56MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysG
AQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQu
b3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAXqdz+d9WwOe1Nkh90EngMnqR
mgyEoRIShBh1loFxRVgAAAFv6h0G1QAABAMARzBFAiBeZ7ZazMQ1WtYKTW3a2XTj
8h5O1xcNzelxgK+NEi1xkwIhANJaw/B487NNCOpQd7AczhLh1iJWHAGBixApF/MY
WoLeAHUAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFv6h0GvgAA
BAMARjBEAiB+Z5RYsTRVFkVzMqQVQotpM5M1UWMh5zjA6hLvRsgk8wIgT4spOzvC
4sz+xx5/k/07SeW9m6PLrT+VU5k0hWYrgg4wDQYJKoZIhvcNAQELBQADggEBAF7u
YVWStWSym9QiSS97aoEsCJe7RmTqMchZvUDpkpnPMJoR3FYkNDiomSlEprmaexXf
vvEVAmxgkQ6GeOs0BAxz+u6yULv06MYjnC9nkTGbXay4z+YiORvtOSPAfIjcRi/0
/U8aj0o0lqM/P5KITeTiWt6hf3QrJAAI9mg9S3cwuewb/0lx1AWTBnszr517Rhaz
x6IFFhrRf7ljQtqRyitwvGD/0ITliS770FJ0bmO6+haWs3Yh1ZJ8HoOvm3XtBOF4
mTYU9kagBiVzb/u1bEPh+QKsMGuVdAz++zlom26+/P047PTZQgf94TmrVgKkUIfR
yS+U8HSOhfeC8baTZTU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow5pUtqDpncjkJqkGAhM
nFv9DPIWXg/ay42x5efN8pEF0bNwgWbbS2Imtt8OLTS8ccXGYcHC7VCG/emt9mgF
F6mtwXWRByFFIA95ipa96BLQ0dFWKummVgJ6tz7b2+vI+aDup2S36+vkQfcNQg5f
ublMfByP1U1jFzeOFdbZxtedaKQSlcZGS0HDH/Y4Toa3nIwOXhfCnZhzNaJthL3v
uDZnfyBAGawVDOkDR9kLFka04dp7Jd7b5yx0bxWG2IVpUlC9q8mjrQo9pHWXZNeP
LUR1paNb7zVVNil/tQz1LqraNm4cpqxry5NA6hpC9RMmzziMIba9ZzCna+bpTRFm
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343871790066896341755471556499500376445447
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-28 02:06:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-27 02:06:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rugby-foundation.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20583950245777958214466944796315894090640172211478915838508414543164243282701351803375802608666203521307187678392679150331402805393128896793434166075114575173068811456720235259082216554309309231237911629442875094127637049855622976147654887624478363030490737973203692622022051902439222645189641504847361464598484355808059993546184055972136000635698607977609200601769623589658564048428140788568422709472296501806547081227044689172075788063190987154529846462825887744959095337409973655400433431288949748111426695858874780801577097902469379901262319427881162344133040495414829177508350248130871037373922958950597930346099
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							01b42e09e41d74e804c9aa0784aa676cc9e27f6e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2152 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlsnapier.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howicksoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olympicwrestlingnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swim.diocesan.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abundantlife.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahiparagamefishclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ararimu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashleyforestrallysprint.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandsquashjuniors.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandtouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boptouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlshawkesbay.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsnapier.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswaikanae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cometswimming.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eakfc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecbsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feildinglawnmowerracing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.generatenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hamiltoncanoepolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harbourhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbaylandingpad.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hblp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbsfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeysouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicksoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huttaikido.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hyc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juniorcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jyf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakatennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kensingtonfitness.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiwikidz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lincolnbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manurewaswimmingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marketground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughparktennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughvolleyball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtbtauranga.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtrbmx.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballwairarapa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northharboursoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nskfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzpowerlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olympicwrestlingnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otahuhuroversrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parafednorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playsoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ponsonbybowls.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.porritt.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prdf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rangatiragolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ratec.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rbpc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverroad.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugby-foundation.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsportaoraki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sissnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcanterburytouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportotago.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.squashauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stewartalexander.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swim.diocesan.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taradale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasportscycling.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tgahockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.torbaytennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.totaltouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchnorthharbour.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchpapamoa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twyford.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volleyballhb.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiopehu.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiukuponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareitri.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wmcc.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodendrugby.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fea1d06d5000004030047304502205e67b65accc4355ad60a4d6ddad974e3f21e4ed7170dcde97180af8d122d7193022100d25ac3f078f3b34d08ea5077b01cce12e1d622561c01818b102917f3185a82de007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fea1d06be000004030046304402207e679458b1345516457332a415428b69339335516321e738c0ea12ef46c824f302204f8b293b3bc2e2ccfec71e7f93fd3b49e5bd9ba3cbad3f9553993485662b820e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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