www.manurewamets.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ab:9a:2e:70:f3:ed:0d:48:cc:7f:0f:32:6c:4e:fe:f0:78 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.manurewamets.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ab:9a:2e:70:f3:ed:0d:48:cc:7f:0f:32:6c:4e:fe:f0:78
Serial Number (int): 319730084786723269945706168506994470613112
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a9:59:d8:c3:d6:75:18:f0:69:f6:85:c0:86:ad:e5:4c:8f:37:a2:86
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1a:02:1a:86:23:50:f2:28:72:d1:8c:92:85:70:3b:45:4f:9d:9e:be
Fingerprint (sha256): 5c:ab:b1:29:e3:f4:07:2e:71:ea:01:6f:10:1a:bd:8f:91:eb:f3:0b:2e:0b:c0:6f:94:b2:f6:5c:f1:ec:f8:de

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.manurewamets.co.nz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.manurewamets.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.aff.org.nz
www.athleticswanganui.co.nz
www.aucklandbaseball.co.nz
www.aucklandfootball.org.nz
www.aucklandservicerifle.org.nz
www.baseballnewzealand.co.nz
www.baseballnewzealand.com
www.baseballnewzealand.org
www.baseballnz.com
www.bowlsdunedin.co.nz
www.bowlstaurangasouth.co.nz
www.bowlswestcoast.org.nz
www.cmsport.co.nz
www.collegerifles.co.nz
www.countiesbadminton.co.nz
www.dairyflattennis.co.nz
www.diamondblacks.co.nz
www.diamondblacks.org.nz
www.diamondsport.co.nz
www.diamondsportnz.co.nz
www.diamondsportnz.com
www.diamondsports.co.nz
www.diamondsportsnz.co.nz
www.diamondsportsnz.com
www.distanceridingnewzealand.co.nz
www.gameoftwohalfwits.com
www.ghryc.co.nz
www.hcwaterpolo.co.nz
www.hendersonsquash.co.nz
www.howicksailingclub.co.nz
www.hpbaseball.co.nz
www.hphawks.co.nz
www.hphawks.com
www.hrc.org.nz
www.keirungaartists.org.nz
www.kereru.school.nz
www.ladiessocialcycling.org.nz
www.linfield.co.nz
www.linwoodrugby.co.nz
www.linwoodrugby.com
www.lnissn.org.nz
www.lynnavon.org.nz
www.mahedrysdale.co.nz
www.mahedrysdale.com
www.makikihi.school.nz
www.manurewamets.co.nz
www.maoribasketball.co.nz
www.marlborough-touch.co.nz
www.meeanee.school.nz
www.mmcc.co.nz
www.motuekatouch.co.nz
www.mountfortwaterpolo.nz
www.myfootball.co.nz
www.myhockey.co.nz
www.mysoftball.co.nz
www.netballmanurewa.org.nz
www.newzealandbaseball.co.nz
www.nscbaseball.co.nz
www.nzsra.org.nz
www.opotikicol.school.nz
www.orokohangamusictrust.co.nz
www.poolburn.school.nz
www.ppnc.co.nz
www.rosegardenscroquetclub.org.nz
www.royaloakracquets.co.nz
www.rugbysouthland.co.nz
www.rugbysouthlandreferees.co.nz
www.saintjosmatata.school.nz
www.softballauckland.org.nz
www.southcanterburybasketball.co.nz
www.southernrugby.co.nz
www.southlandbmxclub.co.nz
www.southlandfestivalofrunning.co.nz
www.teeball.co.nz
www.tennismanawatu.org.nz
www.touchsouthland.co.nz
www.ulyssesnelson.org.nz
www.upperhuttrifleclub.co.nz
www.waihibeachtennisclub.co.nz
www.waikaregolfclub.co.nz
www.wairarapacarclub.org.nz
www.wellingtonbaseball.co.nz
www.wellingtonbaseballassociation.co.nz
www.westaucklandafc.co.nz
www.westcoastsoftball.co.nz
www.whangamatasurf.co.nz
www.whangareirowingclub.org.nz
www.whangaroasportfishingclub.co.nz
www.woolstonparkindoorbowls.org.nz

Other certificates including the domain name manurewamets.co.nz

(limited to 100 certificates)
oratiaunited.co.nz
sporty.co.nz
waibopfootball.co.nz
www.katikatifc.co.nz
pcbasketballclub.co.nz
pcbasketballclub.co.nz
www.turbotouch.org.nz
keirunga.org.nz
karakasportspark.co.nz
www.manurewamets.co.nz
www.waitakerecityfc.org.nz
whangareirowingclub.org.nz
sportsground.co.nz
sportsground.co.nz
www.aucklandsoftball.org.nz
sporty.co.nz
www.brooklyncroquetclub.org
manurewamets.co.nz
www.thesalmonrun.nz
www.schoolground.nz
whangareirowingclub.org.nz
keirunga.org.nz
www.greenhithefootball.org
sportsground.co.nz
www.bowlswestcoast.org.nz

Certificate

The complete raw certificate details for www.manurewamets.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4u4dvtpH76lTpFHit6X8
HJhoSnK3+TBBq5onpaqkT6Oh9Xe3A21cMxGfUof4gAY/XMvYzcaYRBBeRx3GF1Nt
2A/KJDXjiDMEa4o6s10rUYQt4xItpwK+uPxB+e97aCFCQsT+WM5m/YC/QCTbSZ5T
o9cxr1tvqpc2Y1VYImRLQUYEReXWtgMqt1QeC9X2FHHolSFbAFvdU5DaI3DLjJr8
qKOEW9mXo+oVxeYXS/6igjWsJfb/hgxIRO1H8xnhJsR+wIJ5Pea0ns+RE5QGCR3o
16sKuZImroaes2ePBKP6uxSsnL71Ucl08oYKf+xRMJnePZXpaW+t5nNFLNR76jSl
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319730084786723269945706168506994470613112
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-28 13:21:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-27 13:21:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.manurewamets.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28647276393593445374369355193881663919580949980681252042585725675233879597001109912698744234690597692573747301168078215628330260647778916893853831761605827300469963094415903958260489713788592698397101611302605406268574684368251244542804251646049594107635779822345791334523188010085346230736667465338727815141374904139393793735133314525693401562162546188220598079597561812001222238527021965898663691041442728669874461635284500144965643429108528451717986447514023760288932509301531514609615772341125348321332361091198823461566103663507591624762914931003138603784021946894264630382386389969083465861296122001697298228559
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a959d8c3d67518f069f685c086ade54c8f37a286
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2334 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athleticswanganui.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandservicerifle.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnewzealand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnewzealand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsdunedin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlstaurangasouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswestcoast.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegerifles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countiesbadminton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dairyflattennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondblacks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondblacks.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportsnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportsnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.distanceridingnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gameoftwohalfwits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghryc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcwaterpolo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hendersonsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicksailingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hphawks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hphawks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hrc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keirungaartists.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kereru.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ladiessocialcycling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linfield.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linwoodrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linwoodrugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lnissn.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lynnavon.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahedrysdale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahedrysdale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makikihi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manurewamets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maoribasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlborough-touch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meeanee.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motuekatouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountfortwaterpolo.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myhockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballmanurewa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newzealandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nscbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzsra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opotikicol.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orokohangamusictrust.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poolburn.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ppnc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosegardenscroquetclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaloakracquets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbysouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbysouthlandreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintjosmatata.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softballauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcanterburybasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southernrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandbmxclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandfestivalofrunning.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teeball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tennismanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ulyssesnelson.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upperhuttrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihibeachtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikaregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wairarapacarclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonbaseballassociation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westaucklandafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westcoastsoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangamatasurf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareirowingclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangaroasportfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woolstonparkindoorbowls.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fec8792930000040300473045022100d45ce3065127ae88243f94eeb943733a915332b7d0ca88b4eaa9e9d802f9104802204377fb2d03ec318ea427ec420356daddc3988da94c90ca83fa11c109bf621675007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fec87927a0000040300473045022100f499bd0a55bc2ea1dc3690621953c7396a8005f884ce8259e36d198ccad1ec5a02203d1ca3587f10b56facfdc663adfbc382a5f03931290f2656b000f2c7e1bb46cb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007d5c6001915cf7a3e2097e02a3b388247857661f5e894430f1269cd9645f35427d3a686d8cc9ffa663f0f0f67962b066a7d72556c64b8f5a387c9381a31707ba01b3d117b9d65c813b4b06c024bddee8421348bdc2ee12703a5dd9ae8288d1c9b0fc6ca12667caab9b3a68db9417d3c96ad0815e79d281ca5c2a07b6143ead874b3c65b0655b6323c3a87e92eb9b746ef92ee8bd77c285ad97431ef6f1fa83b73520d0f1752d7eec529ef8fbc2c2b4404c0357e2b8b789a8c855fbf57553a86063b2cb9a38b8d94e2bb818a2a09c706d25e918c48588369781075524f39e775746a128b68ea6dfca5adbc2b8d67865b6e6748d903f89e0870d4f33f42ca77b7f