www.sportsground.com

Issued by R3

About this certificate

This digital certificate with serial number 04:2b:7d:0f:67:eb:3c:a1:d4:6d:15:8d:be:a8:b1:f2:a2:7c was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.sportsground.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2b:7d:0f:67:eb:3c:a1:d4:6d:15:8d:be:a8:b1:f2:a2:7c
Serial Number (int): 363247518996292905129722464209624376713852
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c9:7a:bf:cd:49:61:e6:d7:12:0a:69:41:c6:df:3b:1c:ed:f8:92:9e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f5:e5:35:3c:70:e8:b0:63:84:58:40:8f:90:ef:0d:39:af:55:a0:03
Fingerprint (sha256): 4b:90:33:fe:9c:76:3b:8a:2d:4b:32:5c:d0:d9:31:44:4f:04:c5:d2:e1:e5:93:9c:4d:ff:ae:1f:9f:e9:58:8f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.sportsground.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sportsground.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sport.qmc.school.nz
www.akaranacityrifleclub.co.nz
www.bayofislandsdressagegroup.co.nz
www.baysathletics.co.nz
www.belfastnetball.co.nz
www.christchurchmetrocricket.co.nz
www.christchurchmetrocricket.com
www.christchurchmetrocricket.org.nz
www.crossrecreationcentre.co.nz
www.eden.rugby
www.fastpitch.co.nz
www.feildingfarmersmarket.co.nz
www.feildingfarmersmarket.org.nz
www.frasertechcricket.nz
www.glenfieldrugbyleague.co.nz
www.goodmanrural.co.nz
www.hampsteadclub.co.nz
www.hawkfootball.org.nz
www.hbbusinesshub.nz
www.hbreds.nz
www.healthyfamiliesinvercargill.org.nz
www.highlightcam.co.nz
www.hnwafc.org.nz
www.hockeymarlborough.org.nz
www.hockeywairarapa.org.nz
www.hsobburnside.co.nz
www.kapitisoftball.co.nz
www.kerikerimtbclub.co.nz
www.maristrugby.org.nz
www.marlinsnetball.co.nz
www.mcobsquash.co.nz
www.mooloo.co.nz
www.mooloocommunityrugby.co.nz
www.morningtonbowlingclub.co.nz
www.mtsquashclub.co.nz
www.nzblackpowder.nz
www.papakurarugbyleague.co.nz
www.photocard.co.nz
www.playsoftball.org.nz
www.prebbletonfootball.co.nz
www.pukekohesoftball.co.nz
www.schoolsport.nz
www.schoolsportnz.co.nz
www.schoolsportnz.org.nz
www.sharkssports.co.nz
www.sportsground.com
www.sumnerbowls.co.nz
www.trfu.co.nz
www.wahinetoamcc.nz
www.westlandmotorcycleclub.co.nz
www.whangareinetball.co.nz

Other certificates including the domain name sportsground.com

(limited to 100 certificates)
www.nelsoncarclub.co.nz
www.blenheimgolfclub.co.nz
www.sportsground.com
sporty.co.nz
support.sportsground.com
www.tabletennis.org.nz
sporty.co.nz
www.sportsground.com
support.sportsground.com
www.sportsground.com
support.sportsground.com
northcanterburyrugby.co.nz
support.sportsground.com
www.nztua.com
www.sportsground.com
www.schoolground.com
support.sportsground.com
support.sportsground.com
hastings-central.school.nz
ultrarunner.org.nz
www.sportsground.com
www.oacnz.org
www.sportsground.com
sporty.co.nz
aafl.co.nz
support.sportsground.com
sporty.co.nz
support.sportsground.com
sporty.co.nz
northharbourtag.co.nz
trenthamrifleclub.co.nz
www.sportsground.com
support.sportsground.com
support.sportsground.com
sporty.co.nz
aucklandmarist.co.nz
support.sportsground.com
www.wmsc.org.nz
support.sportsground.com
www.sportsground.com
support.sportsground.com
support.sportsground.com
lucknow.school.nz
www.badmintonhb.co.nz
pioneerbasketballclub.co.nz
www.melrosetargetshooting.co.nz
www.sportsground.com
basketballtaranaki.co.nz
sporty.co.nz
www.schoolground.com

Certificate

The complete raw certificate details for www.sportsground.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKJjCCCQ6gAwIBAgISBCt9D2frPKHUbRWNvqix8qJ8MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMDkwMTE4MzJaFw0yNDA0MDgwMTE4MzFaMB8xHTAbBgNVBAMT
FHd3dy5zcG9ydHNncm91bmQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt/3DAU0EpINGPokhDJboX2QG+0NDLIDTlwW02ilCKKK973iuIVqLGrsr
H6SrH54ATtcYBmt3G8NOlhF+7rifSazADIhZ5yHgahsxku70lTlZwMNzR5R7H/6q
xwp/25gnsRHlsb2FNcvpFj2vssKHWRikPagSB5bOx5Ho5l3EDTo2tTLvXqzIg6TL
UsW0LqdnQZL1Ihs0Rzb4TkN/r7xV1PIX0RmtdM2PGavvDF1Ue0sE/H2G1CIpPBMD
eoqSfpUs+rivRKT4jDDl219kjFbrYvrUBp8gcqS+EOLIA0+HuxwegG0Ve3upzBff
ovUhrnOes3FkaN9kqHBh5jan2nA/9QIDAQABo4IHRzCCB0MwDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA
MB0GA1UdDgQWBBTJer/NSWHm1xIKaUHG3zsc7fiSnjAfBgNVHSMEGDAWgBQULrMX
t1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0
dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVu
Y3Iub3JnLzCCBVAGA1UdEQSCBUcwggVDghNzcG9ydC5xbWMuc2Nob29sLm56gh53
d3cuYWthcmFuYWNpdHlyaWZsZWNsdWIuY28ubnqCI3d3dy5iYXlvZmlzbGFuZHNk
cmVzc2FnZWdyb3VwLmNvLm56ghd3d3cuYmF5c2F0aGxldGljcy5jby5ueoIYd3d3
LmJlbGZhc3RuZXRiYWxsLmNvLm56giJ3d3cuY2hyaXN0Y2h1cmNobWV0cm9jcmlj
a2V0LmNvLm56giB3d3cuY2hyaXN0Y2h1cmNobWV0cm9jcmlja2V0LmNvbYIjd3d3
LmNocmlzdGNodXJjaG1ldHJvY3JpY2tldC5vcmcubnqCH3d3dy5jcm9zc3JlY3Jl
YXRpb25jZW50cmUuY28ubnqCDnd3dy5lZGVuLnJ1Z2J5ghN3d3cuZmFzdHBpdGNo
LmNvLm56gh93d3cuZmVpbGRpbmdmYXJtZXJzbWFya2V0LmNvLm56giB3d3cuZmVp
bGRpbmdmYXJtZXJzbWFya2V0Lm9yZy5ueoIYd3d3LmZyYXNlcnRlY2hjcmlja2V0
Lm56gh53d3cuZ2xlbmZpZWxkcnVnYnlsZWFndWUuY28ubnqCFnd3dy5nb29kbWFu
cnVyYWwuY28ubnqCF3d3dy5oYW1wc3RlYWRjbHViLmNvLm56ghd3d3cuaGF3a2Zv
b3RiYWxsLm9yZy5ueoIUd3d3LmhiYnVzaW5lc3NodWIubnqCDXd3dy5oYnJlZHMu
bnqCJnd3dy5oZWFsdGh5ZmFtaWxpZXNpbnZlcmNhcmdpbGwub3JnLm56ghZ3d3cu
aGlnaGxpZ2h0Y2FtLmNvLm56ghF3d3cuaG53YWZjLm9yZy5ueoIcd3d3LmhvY2tl
eW1hcmxib3JvdWdoLm9yZy5ueoIad3d3LmhvY2tleXdhaXJhcmFwYS5vcmcubnqC
Fnd3dy5oc29iYnVybnNpZGUuY28ubnqCGHd3dy5rYXBpdGlzb2Z0YmFsbC5jby5u
eoIZd3d3LmtlcmlrZXJpbXRiY2x1Yi5jby5ueoIWd3d3Lm1hcmlzdHJ1Z2J5Lm9y
Zy5ueoIYd3d3Lm1hcmxpbnNuZXRiYWxsLmNvLm56ghR3d3cubWNvYnNxdWFzaC5j
by5ueoIQd3d3Lm1vb2xvby5jby5ueoIed3d3Lm1vb2xvb2NvbW11bml0eXJ1Z2J5
LmNvLm56gh93d3cubW9ybmluZ3RvbmJvd2xpbmdjbHViLmNvLm56ghZ3d3cubXRz
cXVhc2hjbHViLmNvLm56ghR3d3cubnpibGFja3Bvd2Rlci5ueoIdd3d3LnBhcGFr
dXJhcnVnYnlsZWFndWUuY28ubnqCE3d3dy5waG90b2NhcmQuY28ubnqCF3d3dy5w
bGF5c29mdGJhbGwub3JnLm56ghx3d3cucHJlYmJsZXRvbmZvb3RiYWxsLmNvLm56
ghp3d3cucHVrZWtvaGVzb2Z0YmFsbC5jby5ueoISd3d3LnNjaG9vbHNwb3J0Lm56
ghd3d3cuc2Nob29sc3BvcnRuei5jby5ueoIYd3d3LnNjaG9vbHNwb3J0bnoub3Jn
Lm56ghZ3d3cuc2hhcmtzc3BvcnRzLmNvLm56ghR3d3cuc3BvcnRzZ3JvdW5kLmNv
bYIVd3d3LnN1bW5lcmJvd2xzLmNvLm56gg53d3cudHJmdS5jby5ueoITd3d3Lndh
aGluZXRvYW1jYy5ueoIgd3d3Lndlc3RsYW5kbW90b3JjeWNsZWNsdWIuY28ubnqC
Gnd3dy53aGFuZ2FyZWluZXRiYWxsLmNvLm56MBMGA1UdIAQMMAowCAYGZ4EMAQIB
MIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADuAHUAO1N3dT4tuYBOizBbBv5AO2fYT8P0
x70ADS1yb+H61BcAAAGM7AOtXwAABAMARjBEAiAX1CeeMlgwjfZVNPqZe3G9jDmM
mG4jg52eMIiOHRLbWQIgWtRB9qiE7BT1NLJ/4ipgn+8UXjTYxM+E3cmwUxtzQRgA
dQCi4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3iviabfUX2AAAAYzsA61uAAAEAwBG
MEQCICv0hewUtP8dmierAYfFb3nmxlXM6DFw3l0O0hXZGDt1AiABZsEfFs+azhim
oBeInrCgOeGZklIgWhh2bk71RJfiNzANBgkqhkiG9w0BAQsFAAOCAQEAPuCLi3Yr
3hkIye5BbKmwEEsjQRbZE8JCcU578w12Ouo81EqSupaoHeoHfDjtMlgnUMeDiqnQ
0fifN6mkBYXW7pYBzQYW5CpkqOemmFHsdGDuVL52ncn5auDK56+E2w0NBtO7RHKD
CbAaVLRWZ1P0dZzPuDGd76AAboQNoQErqXi2R8NS3uqB5HpYBNe2t4GWcsFuTs1X
BJCbaLbdyZp/hadVV3T6E2bl7qJBddvRu9h3Sg2A0NXGMBRNLWGzuR7zJlIvWsTN
ZOvnAx6kg9OSRKbSyWq22zZaET5NBRiiOPP+XdK0TboINdyJlytVtKE3xdvTkUPl
OihpfRML0j7NMg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/3DAU0EpINGPokhDJbo
X2QG+0NDLIDTlwW02ilCKKK973iuIVqLGrsrH6SrH54ATtcYBmt3G8NOlhF+7rif
SazADIhZ5yHgahsxku70lTlZwMNzR5R7H/6qxwp/25gnsRHlsb2FNcvpFj2vssKH
WRikPagSB5bOx5Ho5l3EDTo2tTLvXqzIg6TLUsW0LqdnQZL1Ihs0Rzb4TkN/r7xV
1PIX0RmtdM2PGavvDF1Ue0sE/H2G1CIpPBMDeoqSfpUs+rivRKT4jDDl219kjFbr
YvrUBp8gcqS+EOLIA0+HuxwegG0Ve3upzBffovUhrnOes3FkaN9kqHBh5jan2nA/
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 363247518996292905129722464209624376713852
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 01:18:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-08 01:18:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sportsground.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23226744385921664587138705701704410995805974277467493031186177618321513466936728370828725506877755328220424921908005424265319824021352512437686110098232862019862992069595823397404389185066349733425155057780579469208410947217063838902644554762475314483123052652013541542410261065853616457363791625338695626110722473341855417851690535274120292591524155261140934469951084006804993521759283119530061177367444463188002757470445511818090221960394104178149461648263951030949895402672075266199122165615874833985901815654571920250462567765716016820231716955294701493169454872306588407373272175892136407044754565500611477913589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c97abfcd4961e6d7120a6941c6df3b1cedf8929e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1351 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport.qmc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akaranacityrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayofislandsdressagegroup.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baysathletics.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belfastnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crossrecreationcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eden.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fastpitch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feildingfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feildingfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frasertechcricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenfieldrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodmanrural.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hampsteadclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbbusinesshub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbreds.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthyfamiliesinvercargill.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highlightcam.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hnwafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeymarlborough.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeywairarapa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsobburnside.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kapitisoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kerikerimtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristrugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlinsnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcobsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mooloo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mooloocommunityrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morningtonbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzblackpowder.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakurarugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photocard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prebbletonfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pukekohesoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsport.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsportnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharkssports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sumnerbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wahinetoamcc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westlandmotorcycleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareinetball.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cec03ad5f0000040300463044022017d4279e3258308df65534fa997b71bd8c398c986e23839d9e30888e1d12db5902205ad441f6a884ec14f534b27fe22a609fef145e34d8c4cf84ddc9b0531b734118007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cec03ad6e000004030046304402202bf485ec14b4ff1d9a27ab0187c56f79e6c655cce83170de5d0ed215d9183b7502200166c11f16cf9ace18a6a017889eb0a039e1999252205a18766e4ef54497e237
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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