sporty.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:ee:4c:e5:7b:b3:66:c3:0c:35:6f:6d:18:55:bd:86:93:a1 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ee:4c:e5:7b:b3:66:c3:0c:35:6f:6d:18:55:bd:86:93:a1
Serial Number (int): 342426273995074377934421962851864340239265
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a7:b8:f5:58:20:1b:0f:cf:d0:99:ab:c0:fc:d3:12:9a:6d:bb:0e:b7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 10:e9:91:0e:c4:20:3b:54:25:86:34:ed:c1:99:60:42:a6:f7:f3:1b
Fingerprint (sha256): 49:59:29:a9:e3:19:d7:ce:fa:f8:7b:ba:2a:a4:79:61:a3:d2:66:bf:ab:d2:1b:fd:72:27:8f:9d:be:68:47:59

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.co.nz

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

athleticswanganui.co.nz
aucklandservicerifle.org.nz
baseballnewzealand.co.nz
baseballnewzealand.com
baseballnz.com
bowlssouthland.co.nz
bowlstaurangasouth.co.nz
bowlswestcoast.org.nz
centralfootball.co.nz
centralfootball.org.nz
cmsport.co.nz
collegerifles.co.nz
diamondsportnz.co.nz
diamondsports.co.nz
diamondsportsnz.co.nz
footballsouth.co.nz
hbcc.org.nz
hcwaterpolo.co.nz
hendersonsquash.co.nz
howicksailingclub.co.nz
hpbaseball.co.nz
hrc.org.nz
karakasportspark.co.nz
linfield.co.nz
lynnavon.org.nz
maoribasketball.co.nz
marlborough-touch.co.nz
mmcc.co.nz
motuekatouch.co.nz
mountfortwaterpolo.nz
netballmanurewa.org.nz
newzealandbaseball.co.nz
nhbmx.org.nz
nscbaseball.co.nz
nzsra.org.nz
rosegardenscroquetclub.org.nz
royaloakracquets.co.nz
rugbysouthland.co.nz
rugbysouthlandreferees.co.nz
softballauckland.org.nz
southernrugby.co.nz
southlandbmxclub.co.nz
southlandfestivalofrunning.co.nz
sportsground.co.nz
sporty.co.nz
teeball.co.nz
touchsouthland.co.nz
ulyssesnelson.org.nz
upperhuttrifleclub.co.nz
whangareirowingclub.org.nz
whangaroasportfishingclub.co.nz

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
turbotouch.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
mtrbmx.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporthb.net.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
uat.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz

Certificate

The complete raw certificate details for sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDPDEAgxgICg6thPdLOB
5MLV+EC6kxQ4gOXjwzHvXanNI6494zDxLK3l8ueeYtC3AOCrAhFBGfbc9S2jZaph
mccuLG/xJaUdauBJfMNxVS7htLt2eTXdgCm/QGwJz/8W9O9q4t4tj4+Vw/ZF/zo0
qEm5owDNrzsT8P2sCWqp747tP+PS+PhDWsSynKMJEMYtSjC7DwL4K0eFFuuAxtym
/2F91bghm37rYvz4HDrDPKsavOh62wtw8FxCg6eNNo4N/6RpUAJmjnCdV/hEEVqA
MhZukQNZbZTR7AlL5pzn2NzgwtRYhEiKUZvQSvGmz82sf26kXyEwKxGPOEEBQM85
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342426273995074377934421962851864340239265
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 00:34:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 00:34:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21738513229625671356565931824360263114248934664808985490559524295419493677865574254639149761283701966933972877260056451078996873191405618378430212569185074528280913623232697294883908097350398916459112785435453615423887845041564730719431343875564283494941493335165361862113399445643560694513936668425166847024813885895884809434531751871092553730766539572608570617684593480183284316253564456345492719171257384898597449375888286179197690024060476160637585446548387616055598423709501256683159173863265258257257357869329553360330886996252510937397842876912388563856815251875805702776429198668389436897729309029883960047969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a7b8f558201b0fcfd099abc0fcd3129a6dbb0eb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athleticswanganui.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandservicerifle.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnewzealand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlssouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlstaurangasouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswestcoast.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegerifles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsportsnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footballsouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcwaterpolo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hendersonsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howicksailingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakasportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linfield.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lynnavon.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maoribasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlborough-touch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motuekatouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountfortwaterpolo.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballmanurewa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newzealandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhbmx.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nscbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosegardenscroquetclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaloakracquets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbysouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbysouthlandreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softballauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandbmxclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandfestivalofrunning.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teeball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulyssesnelson.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upperhuttrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareirowingclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangaroasportfishingclub.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cf6280afb000004030047304502206f964ce4b0edd72f6d90fe00b6d36143075a4405a596bb412696e29e2e2c4ada022100bf87a236d48b3e45e8ef7df2efda2cdaa0ac1059efa5001973db93a5cad1b68d007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cf6280b0b0000040300473045022100f54a6b3bad8178edd0ee7bb347fdc2d7040eca3728d9fcaa33857108370c446e022045818126b2d13a3f8e3459997f87f5043f7fd6ba18e89fb76a64e8b464391be7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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