mangerekura.school.nz

Issued by R10

About this certificate

This digital certificate with serial number 03:a6:08:b2:91:e2:b0:3b:a9:27:1b:00:0c:c7:8c:c5:ed:2a was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mangerekura.school.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:a6:08:b2:91:e2:b0:3b:a9:27:1b:00:0c:c7:8c:c5:ed:2a
Serial Number (int): 317835291715873122145962162182744529300778
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f9:e5:df:8c:3b:8b:37:75:3f:53:96:ff:6b:de:83:83:9c:c2:65:8d
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): ee:ce:95:52:41:7b:14:6a:6a:fc:be:18:90:94:94:c7:f9:a6:7b:ff
Fingerprint (sha256): 52:8a:20:22:3c:2e:a9:53:92:d3:72:f2:dc:46:59:18:44:aa:f5:04:7e:cb:34:c7:fc:ba:09:cb:7c:c5:ee:a1

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate mangerekura.school.nz

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mangerekura.school.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allenton.school.skoolsites.co.nz
allentonschool.skoolsites.co.nz
bigrock.school.nz
cobden.school.nz
cpanel.skoolsites.co.nz
duntroon.school.nz
duvauchelle.school.nz
faircol.skoolsites.co.nz
hiwinuischool.skoolsites.co.nz
huntlycollege.school.nz
mangerekura.school.nz
maromaku.school.nz
mayfield.school.nz
mtbiggs.skoolsites.co.nz
northlandcollege.skoolsites.co.nz
nsc.school.nz
opotikicol.school.nz
otocoll.school.nz
parkvale.school.nz
pnacs.school.nz
pomare.school.nz
practiceschool.skoolsites.co.nz
rangi.school.nz
saintmarks.skoolsites.co.nz
skoolsites.co.nz
solwayprimary.skoolsites.co.nz
stjohnsgirls.school.nz
stjosephsdvke.school.nz
stleos.school.nz
taitacentral.school.nz
taitoko.school.nz
tehaukaretu.school.nz
templatetwo.skoolsites.co.nz
terangianiwaniwa.school.nz
tikorangi.school.nz
tokomaru.school.nz
totara.skoolsites.co.nz
waikaretu.school.nz
waiotahe.school.nz
waitakereprimary.school.nz
waitoki.skoolsites.co.nz
wakanui.school.nz
wakari.school.nz
walton.school.nz
ward.school.nz
waverlypark.school.skoolsites.co.nz
westendnp.school.nz
www.allenton.school.skoolsites.co.nz
www.allentonschool.skoolsites.co.nz
www.bigrock.school.nz
www.cobden.school.nz
www.duntroon.school.nz
www.duvauchelle.school.nz
www.faircol.skoolsites.co.nz
www.hiwinuischool.skoolsites.co.nz
www.huntlycollege.school.nz
www.mangerekura.school.nz
www.maromaku.school.nz
www.mayfield.school.nz
www.mtbiggs.skoolsites.co.nz
www.northlandcollege.skoolsites.co.nz
www.nsc.school.nz
www.opotikicol.school.nz
www.otocoll.school.nz
www.parkvale.school.nz
www.pnacs.school.nz
www.pomare.school.nz
www.practiceschool.skoolsites.co.nz
www.rangi.school.nz
www.saintmarks.skoolsites.co.nz
www.skoolsites.co.nz
www.solwayprimary.skoolsites.co.nz
www.stjohnsgirls.school.nz
www.stjosephsdvke.school.nz
www.stleos.school.nz
www.taitacentral.school.nz
www.taitoko.school.nz
www.tehaukaretu.school.nz
www.templatetwo.skoolsites.co.nz
www.terangianiwaniwa.school.nz
www.tikorangi.school.nz
www.tokomaru.school.nz
www.totara.skoolsites.co.nz
www.waikaretu.school.nz
www.waiotahe.school.nz
www.waitakereprimary.school.nz
www.waitoki.skoolsites.co.nz
www.wakanui.school.nz
www.wakari.school.nz
www.walton.school.nz
www.ward.school.nz
www.waverlypark.school.skoolsites.co.nz
www.westendnp.school.nz
www.zayedcollege.school.nz
zayedcollege.school.nz

Other certificates including the domain name mangerekura.school.nz

(limited to 100 certificates)
mangerekura.school.nz
templatetwo.skoolsites.co.nz
www.waitakereprimary.school.nz
www.cobdenprimary.skoolsites.co.nz
mangerekura.school.nz
mangerekura.school.nz
duntroon.school.nz
mangerekura.school.nz
terangianiwaniwa.school.nz

Certificate

The complete raw certificate details for mangerekura.school.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0m+o7GgDSG9gAAeyDzMx
vQvegGhuhTCP6UVTbOkMiOhcWaTWMcX/5s1YTf4I03qh4RQ+0GcFjM8w2Y8a+EVR
I/FZQRMdIFuiHPz7FHkWR7JgMR6OiPcp2hypNg1bTjsMqiWyV9uRC2gv5gYHsCnq
NiVd2lKEqLpUA6i4Frnugp1dTq8kR4L+nzgbYG5mWwcbxJrUBcpkYVFDxRUtCn32
yYsP+aScCQvW45SwgP0ktkUIt6DM9Fq7t0DURc6aHV75nfcyKAMYa/x1OIpq74/l
Sf00uhqNL6gsa78xdwdyio9H55o/Uraz0S6y4J3uBCYes1fRFmchJSQ6DfU7jr28
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317835291715873122145962162182744529300778
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-23 22:42:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-21 22:42:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mangerekura.school.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26565105570665298558002067286035033813225702752889980098495136247812347420148944359884773623616155083355661163239305368376545015753430402660678657098022150779555826996684324040311916559759734643680823938499672109077536747259288632163918822658718858846696747381721320119282694546260805274996583326659990445329052701213621200251392751592366398788108727630915146035534218626172668919139602639469133408512163700641983149827332555469317329284612203286153224334878508814238791791754376983267750027732101510103149619515586048657173836737893276819563844656516735658310936974302073111957147479990651824003014836438133962030221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f9e5df8c3b8b37753f5396ff6bde83839cc2658d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2415 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allenton.school.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allentonschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigrock.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cobden.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duntroon.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duvauchelle.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faircol.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiwinuischool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntlycollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mangerekura.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maromaku.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayfield.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtbiggs.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northlandcollege.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opotikicol.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otocoll.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkvale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnacs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pomare.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practiceschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintmarks.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solwayprimary.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnsgirls.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephsdvke.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stleos.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taitacentral.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taitoko.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tehaukaretu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'templatetwo.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terangianiwaniwa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tikorangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokomaru.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totara.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikaretu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waiotahe.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitakereprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitoki.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wakanui.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wakari.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walton.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ward.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waverlypark.school.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westendnp.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allenton.school.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allentonschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigrock.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cobden.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duntroon.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duvauchelle.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faircol.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hiwinuischool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huntlycollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mangerekura.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maromaku.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mayfield.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtbiggs.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northlandcollege.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opotikicol.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otocoll.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkvale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pnacs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pomare.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.practiceschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintmarks.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solwayprimary.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnsgirls.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephsdvke.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stleos.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taitacentral.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taitoko.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tehaukaretu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.templatetwo.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terangianiwaniwa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tikorangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokomaru.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.totara.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikaretu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiotahe.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitakereprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitoki.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wakanui.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wakari.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walton.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ward.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waverlypark.school.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westendnp.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zayedcollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zayedcollege.school.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000190477a96a00000040300473045022005ab8886eaee67789b39de8e2934f5476c0c3d80c891b58582deb5586b2822a4022100d9b65be6c181896644e27ea98d9ff4ff1302fe9a450232143bb7e35783786a910076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca00000190477a96af0000040300473045022100f9e844a80cfd74f55b24300ffd2ea9096e1fd2b8edf7f6a2981b532ace6929e002204a0fb22d8a0cee0d6ecf9be31ced6b00211217a569fe9947fa7b7bb09e468525
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00571f7a3ffda18a97f1be9733951b9dae16cd378ddd93a2bc2894ecee684ebacadb7ae17acb4780ba1173ee9eeedaa88648b600256a3cd0310153c86924207eae85370cf8fab53d86af629c16065c2dd83b7d01aaf0b8e55c9c6c30f04fd8857ad4a49bd42d90e1c904e684c6fcd9a21d25793fab2929cf9a049e5b38be08c2d21e62c9961f4da8003e5ec7ef82442ff37525cee5a72689f4403fc042b24463de157082b4d8618a13c81520b623a526a1ada0f2b34ba2dea4c2aa98a67200c66865011dfea8ce1a5ecc903a3a868e2c55c04c3be02dd1f043ff24fffb708f504fec58a35e938d31131006d05bebd91d65471a2b39ff278d1d42ab81d56ed1befd