www.turbotouch.org.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1f:d0:19:70:b2:a8:f4:2b:af:5f:54:7d:d9:56:ac:db:d0 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.turbotouch.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1f:d0:19:70:b2:a8:f4:2b:af:5f:54:7d:d9:56:ac:db:d0
Serial Number (int): 272162222686159335381863936213734679960528
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7a:2b:ae:63:f4:cc:ed:a8:01:a1:26:29:c8:e2:66:c4:df:69:6a:df
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ae:de:63:e1:74:8f:72:fe:94:f1:a7:cc:ec:1f:61:9c:c6:2d:03:4b
Fingerprint (sha256): 4d:8a:6a:8c:78:da:52:7b:07:8d:2a:75:a6:d0:20:08:ad:06:e3:56:24:47:18:29:ad:da:70:f5:0b:c1:4f:3c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.turbotouch.org.nz

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.turbotouch.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.aff.org.nz
www.athleticswanganui.co.nz
www.aucklandbaseball.co.nz
www.aucklandfootball.org.nz
www.aucklandservicerifle.org.nz
www.baseballnewzealand.co.nz
www.baseballnewzealand.com
www.baseballnewzealand.org
www.baseballnz.com
www.bowlstaurangasouth.co.nz
www.bowlswestcoast.org.nz
www.cmsport.co.nz
www.collegerifles.co.nz
www.dairyflattennis.co.nz
www.diamondblacks.co.nz
www.diamondblacks.com
www.diamondblacks.org.nz
www.diamondsport.co.nz
www.diamondsportnz.co.nz
www.diamondsportnz.com
www.diamondsports.co.nz
www.diamondsportsnz.co.nz
www.diamondsportsnz.com
www.gameoftwohalfwits.com
www.ghryc.co.nz
www.glenfieldbowls.co.nz
www.hcwaterpolo.co.nz
www.hendersonsquash.co.nz
www.howicksailingclub.co.nz
www.hpbaseball.co.nz
www.hphawks.co.nz
www.hphawks.com
www.hrc.org.nz
www.keirungaartists.org.nz
www.kereru.school.nz
www.kiwiball.co.nz
www.ladiessocialcycling.org.nz
www.linfield.co.nz
www.linwoodrugby.co.nz
www.linwoodrugby.com
www.lynnavon.org.nz
www.makikihi.school.nz
www.manurewamets.co.nz
www.maoribasketball.co.nz
www.marlborough-touch.co.nz
www.mmcc.co.nz
www.motuekatouch.co.nz
www.mountfortwaterpolo.nz
www.myfootball.co.nz
www.mysoftball.co.nz
www.nelsonnetball.co.nz
www.newzealandbaseball.co.nz
www.nhbmx.org.nz
www.nscbaseball.co.nz
www.nzsra.org.nz
www.opotikicol.school.nz
www.osa.org.nz
www.ppnc.co.nz
www.rosegardenscroquetclub.org.nz
www.royaloakracquets.co.nz
www.rugbysouthland.co.nz
www.rugbysouthlandreferees.co.nz
www.runwalkseries.co.nz
www.saintjosmatata.school.nz
www.softballauckland.org.nz
www.southcanterburybasketball.co.nz
www.southernrugby.co.nz
www.southlandbmxclub.co.nz
www.southlandfestivalofrunning.co.nz
www.tearohagolfclub.co.nz
www.teeball.co.nz
www.tennismanawatu.org.nz
www.touchsouthland.co.nz
www.turbotouch.org.nz
www.ulyssesnelson.org.nz
www.upperhuttrifleclub.co.nz
www.waihibeachtennisclub.co.nz
www.waikaregolfclub.co.nz
www.wairarapacarclub.org.nz
www.waitematarowing.org.nz
www.wellingtonbaseball.co.nz
www.wellingtonbaseballassociation.co.nz
www.westcoastsoftball.co.nz
www.whangamatasurf.co.nz
www.whangareirowingclub.org.nz
www.whangaroasportfishingclub.co.nz
www.woolstonparkindoorbowls.org.nz

Other certificates including the domain name turbotouch.org.nz

(limited to 100 certificates)
www.glenfieldrugbyleague.co.nz
supersixes.co.nz
www.katikatifc.co.nz
eden.rugby
sporty.org.nz
sporty.org.nz
hbnetball.co.nz
www.turbotouch.org.nz
sporty.org.nz
www.waitakerecityfc.org.nz
sporty.org.nz
ctfc.co.nz
sporty.org.nz
www.sportsground.com
turbotouch.co.nz
sporty.org.nz
sporty.org.nz
www.aucklandsoftball.org.nz
www.brooklyncroquetclub.org
eden.rugby
www.schoolground.nz
sked.co.nz
golfnorthland.co.nz
www.unimountafc.org.nz
www.greenhithefootball.org
cfc.co.nz
www.bowlswestcoast.org.nz

Certificate

The complete raw certificate details for www.turbotouch.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZu9b0Beax+4BSswTjDe
TQ4xtq0aA9DuTF3uRZKdIWbeWwtA6NyVa8hfzIlid6W2fiAZuuUy6vVRda4Uip/+
Te+Vw8wDSCNVQTivlQwFeSHv1IHdrWNIhAzEdABAR1Cf/axpkZoUCiSdR+N15CC9
Xms63OE9ZKCkdNzCbl/keD+kCIlxzQ/ef/ATafIwW+ysUgykSqHOuG5SNhp73kRE
n+l4RXWreZCltocd0SE5fIVDV1YDI8u8Tos9ACJPmp7gLGH0g7U3KrJdn0IQyxcv
pVbkNrjjUddjNnCq6URH/pj00hUlXePbVjMQHIWSfrYJYa2K3ZWvxQKd47EMpv0c
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272162222686159335381863936213734679960528
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-27 22:14:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-25 22:14:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.turbotouch.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16866492806347946892611713707303072263360646010660737892392733616325833000129435962791845431888273473298742003496655010198541449707749947632030457933883670037348543273130567969540260564534434509494769628419632275269042869357462160171778352054773951832365348632263430208260582760971514592060215178247695598800820846136237008905451342738727353489782760036773820592692463982258913690479719001181092869600836448713313309679145709361074250418525351850938046021163905556896482139739590465521518493647454893739641104854120789180436171301620786233966724311164361409166472190416291161623830354787007090299842215746727283858557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a2bae63f4cceda801a12629c8e266c4df696adf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2257 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athleticswanganui.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandservicerifle.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnewzealand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnewzealand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlstaurangasouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswestcoast.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegerifles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dairyflattennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondblacks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondblacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondblacks.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportsnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportsnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gameoftwohalfwits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghryc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenfieldbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcwaterpolo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hendersonsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicksailingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hphawks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hphawks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hrc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keirungaartists.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kereru.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiwiball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ladiessocialcycling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linfield.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linwoodrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linwoodrugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lynnavon.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makikihi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manurewamets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maoribasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlborough-touch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motuekatouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountfortwaterpolo.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newzealandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhbmx.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nscbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzsra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opotikicol.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ppnc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosegardenscroquetclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaloakracquets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbysouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbysouthlandreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runwalkseries.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintjosmatata.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softballauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcanterburybasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southernrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandbmxclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandfestivalofrunning.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tearohagolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teeball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tennismanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turbotouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ulyssesnelson.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upperhuttrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihibeachtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikaregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wairarapacarclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitematarowing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonbaseballassociation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westcoastsoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangamatasurf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareirowingclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangaroasportfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woolstonparkindoorbowls.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000167577414440000040300483046022100e98f47af9468e280ded99396f2a360d8768397b7f9f2ec76f66c8441b0c65c1b02210083e6d601bae5712317eb8e2620a4f95d825a3534483ef3c4e43f2379d33bcfb200760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001675774149900000403004730450220232513091232c57d512bd28fbf66d7168de383e5ced5996ade4d09e8e49c9c5a0221009eefa1e4ce842a2acfce629cebfc7b214bf522f4da8fa0db79ac93b6a6224543
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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