www.ophc.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:79:14:c8:53:ac:54:f8:70:1d:87:d3:d1:54:a5:73:f1:a7 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ophc.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:79:14:c8:53:ac:54:f8:70:1d:87:d3:d1:54:a5:73:f1:a7
Serial Number (int): 302538648909095237441343965970947546280359
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 98:6d:47:2f:33:ef:fd:cb:52:27:38:c1:62:93:d3:d6:f1:f4:e7:ea
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ce:cc:0b:1e:81:c5:cc:ac:c7:49:e2:1c:e7:0c:75:04:67:13:38:d3
Fingerprint (sha256): 57:60:28:13:cf:7a:19:e9:86:63:b1:d9:2f:22:09:e3:50:d9:99:00:06:c3:c9:4e:d7:1b:3a:a0:43:92:2c:5c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ophc.co.nz

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ophc.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ashleyrugby.co.nz
www.avondaleint.school.nz
www.badmintonhb.co.nz
www.belmontparkbowlingclub.co.nz
www.bowlsdunedin.co.nz
www.bowlswanganui.org.nz
www.boxingnz.org.nz
www.c33sports.kiwi
www.cambridgenetball.org.nz
www.canamju.org
www.canterburybaseball.co.nz
www.canterburycommunityrugby.co.nz
www.canterburyrugby.co.nz
www.clevedoncricketclub.co.nz
www.cmih.co.nz
www.countiesbadminton.co.nz
www.crfu.co.nz
www.cyclingtimaru.com
www.distanceridingnewzealand.co.nz
www.edenrugby.co.nz
www.ellesmererugby.org.nz
www.forcepass.co.nz
www.gisborneharriers.co.nz
www.glenburniceskatingclub.co.nz
www.grammarcarlton.co.nz
www.grammartec.co.nz
www.halswellcricket.co.nz
www.hastingsintermediate.school.nz
www.karakarugbyclub.co.nz
www.lnissn.org.nz
www.mahedrysdale.co.nz
www.mahedrysdale.com
www.manukaumasters.co.nz
www.manurewarugby.co.nz
www.maorirugby.co.nz
www.marewa.school.nz
www.mariancollege.school.nz
www.maristalbionnetball.co.nz
www.maristfc.co.nz
www.maristnh.co.nz
www.marlboroughtennis.co.nz
www.martinboroughsquash.co.nz
www.martinboroughtennisclub.co.nz
www.mchockey.co.nz
www.meeanee.school.nz
www.midcanterburyrugby.co.nz
www.mttauharagymnastics.co.nz
www.myhockey.co.nz
www.ncnc.org.nz
www.netballkapiti.org.nz
www.netballmanurewa.org.nz
www.netballsouthcanterbury.co.nz
www.netballtaranaki.org.nz
www.nzteachersgames.co.nz
www.ophc.co.nz
www.orfu.co.nz
www.orokohangamusictrust.co.nz
www.otagoindoorbowls.co.nz
www.papakurarugby.co.nz
www.paparoa.school.nz
www.photosnap.co.nz
www.pickleball.org.nz
www.poolburn.school.nz
www.primarysportwellington.org.nz
www.rangi.school.nz
www.rollestonrugby.co.nz
www.rosmini.school.nz
www.safepass.co.nz
www.smognetball.org.nz
www.southbridgerugby.com
www.southlandmtbclub.co.nz
www.southlandtriclub.co.nz
www.sportsouthland.co.nz
www.stanthony.ac.nz
www.stjos.school.nz
www.suburbsrugby.co.nz
www.taniwha.co.nz
www.taranakihockey.org.nz
www.tasmanrugbyreferees.co.nz
www.technicalharriers.co.nz
www.timarusquashclub.co.nz
www.touchcanterbury.co.nz
www.uniss.co.nz
www.valleyhockey.org.nz
www.wellingtontouch.org.nz
www.westaucklandafc.co.nz
www.whtc.co.nz
www.willowpark.school.nz
www.wmsc.org.nz
yes.stockx.co.nz

Other certificates including the domain name ophc.co.nz

(limited to 100 certificates)
willowpark.school.nz
www.diamondsportsnz.co.nz
meeanee.school.nz
www.taranakihockey.org.nz
www.canterburybaseball.co.nz
www.ophc.co.nz
southlandmtbclub.co.nz
www.ophc.co.nz
distanceridingnewzealand.co.nz
www.rollestonrugby.co.nz
www.baseballnewzealand.org
canterburybaseball.co.nz
rosmini.school.nz
canterburybaseball.co.nz
www.westcoastsoftball.co.nz
meeanee.school.nz
www.mttauharagymnastics.co.nz
ophc.co.nz
mtwswim.co.nz

Certificate

The complete raw certificate details for www.ophc.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/UE8jqFUB4wFkumDF5A
XKyLXTHraOVBJb7VA4P91E408dgmahqx81BpGBI3LMtTi7GhRnVDfl454fAABIek
aWYlAogEvCTun4FRC+R1j1P4PuUh+oVgbvysxfobLcWOz256E3Qo9d4+3wgBC3d5
iTwWJ1MPr1BuOZkjc4xOrt+3z4QWE02aCAmKmrRce/ssK/px2idB/mNHC9hxYrUt
FaW0jHJ0qQWEX7r5pM+qSzzhQvm+OtkoEVDa0OG8t5VVV8aHVmLFPGPw7ENmrPvJ
3izR+n9KVThylMRGux/s5jsxAb5Vn08KXu0+bRQW3u6wLMPF7MVVBFGZIFECS5PS
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302538648909095237441343965970947546280359
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-28 00:10:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-26 00:10:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ophc.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19687760800135570148491184773327451106395763139116498960964325390345165503405454852058167847890230996023532376534944362766851178393577041757830575955407645134437456317803810053430025677262704213977553891153157813693480944321212065566251245431671065565311237309882580182757204884227427676498695998055890037805940993612516203519241356168599528387486943705623669540677611078034234090919903223553870943065048290364703202818178925062652639853943875869336542980837476651671896358203040417210815117257738851398548598556787847525756396639394461926089730463746770200624955095607366882352567195358621261544045694779530857927329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							986d472f33effdcb522738c16293d3d6f1f4e7ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2266 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashleyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avondaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badmintonhb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belmontparkbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsdunedin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boxingnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.c33sports.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambridgenetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canamju.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburybaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburycommunityrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clevedoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmih.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countiesbadminton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cyclingtimaru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.distanceridingnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edenrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ellesmererugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forcepass.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gisborneharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenburniceskatingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grammarcarlton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grammartec.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halswellcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastingsintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakarugbyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lnissn.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahedrysdale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahedrysdale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manukaumasters.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manurewarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maorirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marewa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mariancollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristalbionnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristnh.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughtennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martinboroughsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martinboroughtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mchockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meeanee.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mttauharagymnastics.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myhockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballkapiti.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballmanurewa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballsouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballtaranaki.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzteachersgames.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ophc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orokohangamusictrust.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otagoindoorbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakurarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paparoa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photosnap.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pickleball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poolburn.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primarysportwellington.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rollestonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safepass.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smognetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southbridgerugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandmtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandtriclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanthony.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjos.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suburbsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taniwha.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taranakihockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasmanrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.technicalharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timarusquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uniss.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valleyhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtontouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westaucklandafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whtc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.willowpark.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wmsc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yes.stockx.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016757ddcea50000040300483046022100e9631934996fa10a3cfcbbf091fbc622d7bd53e8e9ca7b6e49a325f19f88c384022100df40869b571a4e1ca34a0783539c0e5f75445867d482be49eb9f78970cfa2f6000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016757ddccb4000004030047304502200e160e98636d580ed7cb6899db2a8a1ca3f868cf6311fd2670ca293f1659fa2c022100b75b2e46780d3eb5047b49644a46d70e1d19b30e9926a266751afac40be103e4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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