www.opotikicol.school.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:58:86:06:e5:d4:2f:a6:9d:22:91:bb:98:e6:94:8e:13:50 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.opotikicol.school.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:58:86:06:e5:d4:2f:a6:9d:22:91:bb:98:e6:94:8e:13:50
Serial Number (int): 291459858451022571569036999455186728391504
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 41:7b:39:ce:d7:d3:d7:f0:44:dd:14:70:5a:26:08:e3:c9:82:e1:bd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 50:fd:2e:93:9a:e5:50:99:00:6f:c0:46:32:9d:79:93:0a:a6:1f:35
Fingerprint (sha256): 49:fe:dd:9e:1b:9f:f0:a7:a6:d8:9f:bc:d1:2c:66:e1:4d:7e:74:fa:8d:a1:f7:6c:b5:00:13:34:a5:f4:3e:51

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.opotikicol.school.nz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.opotikicol.school.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.acwpa.co.nz
www.ashleyrugby.co.nz
www.avondaleint.school.nz
www.badmintonhb.co.nz
www.belmontparkbowlingclub.co.nz
www.bowlsdunedin.co.nz
www.bowlswanganui.org.nz
www.boxingnz.org.nz
www.bushmultisport.org.nz
www.cambridgenetball.org.nz
www.canamju.org
www.canterburybaseball.co.nz
www.canterburycommunityrugby.co.nz
www.canterburyrugby.co.nz
www.clevedoncricketclub.co.nz
www.clevedonrifleclub.co.nz
www.cmih.co.nz
www.countiesbadminton.co.nz
www.crfu.co.nz
www.dairyflattennis.co.nz
www.distanceridingnewzealand.co.nz
www.edenrugby.co.nz
www.ellesmererugby.org.nz
www.gisborneharriers.co.nz
www.glenburniceskatingclub.co.nz
www.grammarcarlton.co.nz
www.grammartec.co.nz
www.halswellcricket.co.nz
www.hastingsintermediate.school.nz
www.karakarugbyclub.co.nz
www.lnissn.org.nz
www.mahedrysdale.co.nz
www.mahedrysdale.com
www.manukaumasters.co.nz
www.manurewarugby.co.nz
www.maorirugby.co.nz
www.marewa.school.nz
www.mariancollege.school.nz
www.maristfc.co.nz
www.maristnh.co.nz
www.marlboroughtennis.co.nz
www.mchockey.co.nz
www.meeanee.school.nz
www.midcanterburyrugby.co.nz
www.mttauharagymnastics.co.nz
www.mtwswim.co.nz
www.myhockey.co.nz
www.ncnc.org.nz
www.netballkapiti.org.nz
www.netballmanurewa.org.nz
www.netballsouthcanterbury.co.nz
www.netballtaranaki.org.nz
www.oacnz.org
www.opotikicol.school.nz
www.orfu.co.nz
www.orokohangamusictrust.co.nz
www.papakurarugby.co.nz
www.paparoa.school.nz
www.parkvale.school.nz
www.photosnap.co.nz
www.pickleball.org.nz
www.poolburn.school.nz
www.primarysportwellington.org.nz
www.rangi.school.nz
www.rollestonrugby.co.nz
www.rosmini.school.nz
www.smognetball.org.nz
www.southbridgerugby.com
www.southlandmtbclub.co.nz
www.southlandtriclub.co.nz
www.sportsouthland.co.nz
www.stanthony.ac.nz
www.stjos.school.nz
www.suburbsrugby.co.nz
www.taierirugby.co.nz
www.taniwha.co.nz
www.taranakihockey.org.nz
www.tasmanrugbyreferees.co.nz
www.technicalharriers.co.nz
www.timarusquashclub.co.nz
www.touchcanterbury.co.nz
www.trenthamrifleclub.co.nz
www.uniss.co.nz
www.valleyhockey.org.nz
www.wellingtontouch.org.nz
www.westaucklandafc.co.nz
www.whtc.co.nz
www.willowpark.school.nz
www.wmsc.org.nz

Other certificates including the domain name opotikicol.school.nz

(limited to 100 certificates)
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
skoolsites.co.nz
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
skoolsites.co.nz
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
skoolsites.co.nz
sni173286.cloudflaressl.com
www.diamondsportsnz.co.nz
sni173286.cloudflaressl.com
skoolsites.co.nz
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
bowlsdunedin.co.nz
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
portal.opotikicol.school.nz
skoolsites.co.nz
www.opotikicol.school.nz
*.opotikicol.school.nz
sporty.co.nz
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
www.opotikicol.school.nz
www.bowlswestcoast.org.nz
skoolsites.co.nz
portal.opotikicol.school.nz
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
www.ophc.co.nz
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
skoolsites.co.nz
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
www.opotikicol.school.nz
www.turbotouch.org.nz
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
keirunga.org.nz
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
skoolsites.co.nz
karakasportspark.co.nz
www.manurewamets.co.nz
sni173286.cloudflaressl.com
skoolsites.co.nz
whangareirowingclub.org.nz
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
sportsground.co.nz
skoolsites.co.nz
sni173286.cloudflaressl.com
skoolsites.co.nz
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
sportsground.co.nz
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
sni.cloudflaressl.com
skoolsites.co.nz
skoolsites.co.nz
taitoko.skoolsites.co.nz
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
skoolsites.co.nz
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com
skoolsites.co.nz
skoolsites.co.nz
sporty.co.nz
sni173286.cloudflaressl.com
skoolsites.co.nz
sni173286.cloudflaressl.com
manurewamets.co.nz
sni173286.cloudflaressl.com
skoolsites.co.nz
sni173286.cloudflaressl.com
www.baseballnewzealand.org
sni173286.cloudflaressl.com
sni173286.cloudflaressl.com

Certificate

The complete raw certificate details for www.opotikicol.school.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uLO63MD7CcuGVpS4tY3
YR+HteRTrN4oOqS2LfVjQS6Jv9NtlDaMFG6Ij0h63ZGor3uWeKjXnixDroP6e5/Y
1FZrForphlDaJcrlJLU1kF/o4xmB/Qyi7yOgZSzux7L6XLamiQOtCKlx6eMSsnbJ
0jGGcPGjYwvoRXdSEV7SvnK8uqgvw2PGbJbqgxTWFtcKoWWB2Nsvr1cTmw+U+k5Z
g9a0C2u5pbYK0p2QmS4iX0Q0dF/LI9ejE5QbZat4+TPParNqX1P91gTUZJDSwzXo
kZerl1yiW5VVWzFqUWOD0hVx1m/tEeyCCC1MhZCH1Lppw3P1LfKLnmGmrPvK2N/S
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291459858451022571569036999455186728391504
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 07:44:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 07:44:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.opotikicol.school.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28136747033875320592948950979694024587696830803639220414131485055665503627445511300403682857116853332915422454726440337945982585967000642919594193233208079489717638259076353411512441810882334437689624942573525584151086659660700973471004808625604226448064231991446994664489219964826036490928948460537330922786126260110717913524456992622704470954963747647770096873719200257091772180797920129606074154419541954582944552478560573103866908121906445195026832465806466843900510968759878075964079470153767357801619556354513398670641776075621646225617682039978692766965493111373742908217706993935138911810733040008906340815389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							417b39ced7d3d7f044dd14705a2608e3c982e1bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2232 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acwpa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashleyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avondaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badmintonhb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belmontparkbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsdunedin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boxingnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bushmultisport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambridgenetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canamju.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburybaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburycommunityrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clevedoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clevedonrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmih.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countiesbadminton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dairyflattennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.distanceridingnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edenrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ellesmererugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gisborneharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenburniceskatingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grammarcarlton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grammartec.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halswellcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastingsintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakarugbyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lnissn.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahedrysdale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahedrysdale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manukaumasters.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manurewarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maorirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marewa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mariancollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristnh.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughtennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mchockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meeanee.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mttauharagymnastics.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtwswim.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myhockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballkapiti.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballmanurewa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballsouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballtaranaki.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oacnz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opotikicol.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orokohangamusictrust.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakurarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paparoa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkvale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photosnap.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pickleball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poolburn.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primarysportwellington.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rollestonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smognetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southbridgerugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandmtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandtriclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanthony.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjos.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suburbsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taierirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taniwha.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taranakihockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasmanrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.technicalharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timarusquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trenthamrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uniss.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valleyhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtontouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westaucklandafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whtc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.willowpark.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wmsc.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170a4b813b30000040300483046022100d6b54d777ad3295173b2f7a5fdc1b38c31196e6a6dfdaf77c1cc75e7aedecd13022100c3d48371cf9af05f7c5893fcab1c3b1744371234c6cd3e417e6776f078794b00007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a4b813b0000004030047304502201611ef9d358a37a7f540bbf5680a141e4065c91ce3de92dda4091c37769e3119022100f320562cd3cf13033e454964c97a302a02b612c67103ae40cb54738e5d9e9e55
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000898add5168121af6fe586108e9340d57bba08a8489d689826f07e41414e54146bc6962558ca7195d582da047df1313b06de377271d39a6e907a94895bde051ac7148b5394c373af657c615ef1d353a2aa9e7ba264ff6bce5d65431dd5797ba0ebb44f182071550fd0dca1e97a1cdc0435eeb318ee73e397d7d7c277222fa55cc91fe3bd731d93e400f0653595d8401213713f387de2f7b107701571a409158df892ef8b292efba8f14119796713f4b22739c4be90ef88031934c852e49d75e30d21ce2028b14d86a0cf1a60acf638399f300bd0bb0b6d3d1bc33e48b438be5b49344d875caf03105736c19abc7f34ab260ac914b1625c1bb58e1a60fcc89db8