karakasportspark.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1d:6c:e6:ca:95:04:1c:a5:9c:1f:d7:33:83:07:2f:c2:e5 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=karakasportspark.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1d:6c:e6:ca:95:04:1c:a5:9c:1f:d7:33:83:07:2f:c2:e5
Serial Number (int): 271349801396663198029233237936623034811109
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 80:18:ef:f1:67:bd:b9:29:e1:2f:fe:47:9b:db:83:f0:20:55:db:76
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 94:0a:11:bb:e9:62:6b:47:bf:26:02:e7:1e:70:fd:4a:5a:a3:1c:d9
Fingerprint (sha256): 5b:4e:d7:7d:34:1e:44:25:5b:f5:a3:c8:14:23:45:9e:6f:5c:07:3a:cf:43:83:7f:c6:c7:2d:6a:74:1b:56:a3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate karakasportspark.co.nz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for karakasportspark.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

athleticswanganui.co.nz
aucklandbaseball.co.nz
aucklandfootball.org.nz
aucklandservicerifle.org.nz
baseballnewzealand.co.nz
baseballnewzealand.com
baseballnewzealand.org
baseballnz.com
bowlstaurangasouth.co.nz
bowlswestcoast.org.nz
businesshawkesbay.co.nz
centralfootball.co.nz
centralfootball.org.nz
cmsport.co.nz
collegerifles.co.nz
dairyflattennis.co.nz
developyourlegacy.co.nz
diamondblacks.co.nz
diamondblacks.com
diamondblacks.org.nz
diamondsport.co.nz
diamondsportnz.co.nz
diamondsportnz.com
diamondsports.co.nz
diamondsportsnz.co.nz
diamondsportsnz.com
footballsouth.co.nz
gameoftwohalfwits.com
ghryc.co.nz
glenfieldbowls.co.nz
hbcc.org.nz
hcwaterpolo.co.nz
hendersonsquash.co.nz
howicksailingclub.co.nz
hpbaseball.co.nz
hphawks.com
hrc.org.nz
karakasportspark.co.nz
keirunga.org.nz
kereru.school.nz
ladiessocialcycling.org.nz
linfield.co.nz
linwoodrugby.co.nz
linwoodrugby.com
lynnavon.org.nz
makikihi.school.nz
manurewamets.co.nz
maoribasketball.co.nz
marlborough-touch.co.nz
mmcc.co.nz
motuekatouch.co.nz
mountfortwaterpolo.nz
myfootball.co.nz
mysoftball.co.nz
netballmanurewa.org.nz
newzealandbaseball.co.nz
nhbmx.org.nz
nscbaseball.co.nz
nzsra.org.nz
opotikicol.school.nz
osa.org.nz
rosegardenscroquetclub.org.nz
royaloakracquets.co.nz
rugbysouthland.co.nz
rugbysouthlandreferees.co.nz
runwalkseries.co.nz
softballauckland.org.nz
southcanterburybasketball.co.nz
southernrugby.co.nz
southlandbmxclub.co.nz
southlandfestivalofrunning.co.nz
sportsground.co.nz
tearohagolfclub.co.nz
teeball.co.nz
tennismanawatu.org.nz
touchsouthland.co.nz
ulyssesnelson.org.nz
upperhuttrifleclub.co.nz
waihibeachtennisclub.co.nz
waikaregolfclub.co.nz
wairarapacarclub.org.nz
waitematarowing.org.nz
wellingtonbaseball.co.nz
wellingtonbaseballassociation.co.nz
westaucklandafc.co.nz
whangamatasurf.co.nz
whangareirowingclub.org.nz
whangaroasportfishingclub.co.nz
woolstonparkindoorbowls.org.nz

Other certificates including the domain name karakasportspark.co.nz

(limited to 100 certificates)
oratiaunited.co.nz
maristinvercargill.co.nz
sporty.co.nz
sporty.co.nz
waibopfootball.co.nz
sporty.co.nz
sportnorthland.co.nz
www.katikatifc.co.nz
pcbasketballclub.co.nz
pcbasketballclub.co.nz
www.pkjsports.co.nz
sporty.co.nz
karakasportspark.co.nz
www.waitakerecityfc.org.nz
sporty.co.nz
sporty.co.nz
hockeymanawatu.org.nz
sporty.co.nz
www.sportsground.com
maristinvercargill.co.nz
hockeymanawatu.org.nz
maristinvercargill.co.nz
www.aucklandsoftball.org.nz
sporty.co.nz
sporty.co.nz
www.brooklyncroquetclub.org
www.thesalmonrun.nz
sporty.co.nz
www.schoolground.nz
maristinvercargill.co.nz
maristalbion.co.nz
sporty.co.nz
sporty.co.nz
www.unimountafc.org.nz
www.greenhithefootball.org
www.bowlswestcoast.org.nz

Certificate

The complete raw certificate details for karakasportspark.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KDuYRuZLYw0jQImqjBG
3tm3H92pC2/a1pRWZ2VtjgZ7c2g4IuCbNEeNoDPPV2iISYqyBhsDgx53MRrguyYA
NbUj0xxr9pfxiYweqyBiYeKGpdCcbgJvoIUpV0bVkytQSCdaSpLYWpw1qDvUXITZ
E9K+4ESXhExe+lR0k8ujEY/By2IByTR3BxOC865yR4UqersqIAP35ZyR29/SQL85
1M8lKYXTPSPnWIsFIYzzx9aMoEVKdMMWPLtP2dpts7ZveFDYVJ6VJ4MekkUqqukg
uUjqORSXy2ip65D1TIWZ3SH4nLs99ja5R/aYQ+RuUK7iUmcoaw/rJYJX3Ss0RV4t
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271349801396663198029233237936623034811109
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-25 03:12:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-25 03:12:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'karakasportspark.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27851785209806388926147861940834821960590815410489728306299277639583455423932919495699367334238881184329974405226885786768561879988993507853256352413271840158556393561838739954617687285161147108116754521112989916959257853574478815727325144794661106498611268244308386270759172372972696358257744047218583607237345672501263998334378442403310840759877548768637694809889141026704765847442551415815099007116773391090754591329441331582390408523614536773272027445010119960916383439545853799062126353541590039473749808179692585807992268956319595869861990015705071636619653215275790629676910240985196038625289919442237721030027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8018eff167bdb929e12ffe479bdb83f02055db76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1978 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athleticswanganui.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandservicerifle.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnewzealand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnewzealand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlstaurangasouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswestcoast.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesshawkesbay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegerifles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dairyflattennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developyourlegacy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondblacks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondblacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondblacks.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsportnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsportsnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsportsnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footballsouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameoftwohalfwits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghryc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenfieldbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcwaterpolo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hendersonsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howicksailingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hphawks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakasportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keirunga.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kereru.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladiessocialcycling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linfield.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linwoodrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linwoodrugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lynnavon.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makikihi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewamets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maoribasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlborough-touch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motuekatouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountfortwaterpolo.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballmanurewa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newzealandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhbmx.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nscbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opotikicol.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosegardenscroquetclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaloakracquets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbysouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbysouthlandreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runwalkseries.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softballauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southcanterburybasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandbmxclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandfestivalofrunning.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tearohagolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teeball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tennismanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulyssesnelson.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upperhuttrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihibeachtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikaregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wairarapacarclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitematarowing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonbaseballassociation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westaucklandafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangamatasurf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareirowingclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangaroasportfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woolstonparkindoorbowls.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001688335750600000403004730450220446086c73f2753ec218f94e6dc7021997e0b973621c9cde68d3f16ae8fe51bfa0221008093d4adb21abef755ac82aa0f8798e9e4dc31b12866c18ab3a1cb753aa1a6eb007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168833576ab0000040300483046022100aab5a15f04f710b7a9ea894775e154886c417acf9c88e770067dba81f1f5f247022100efa6a1a46db6ecc9accb06d597dcb8c2f9fbf586b8eda9ede85a70c7480c9b72
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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