www.waitakerecityfc.org.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ad:b4:d9:b3:9e:50:ac:9c:06:eb:f1:74:94:b1:62:a0:ce was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.waitakerecityfc.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ad:b4:d9:b3:9e:50:ac:9c:06:eb:f1:74:94:b1:62:a0:ce
Serial Number (int): 320446098683357017237499887820258937053390
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 05:3b:e9:5e:1e:06:41:eb:f8:f4:90:b3:ba:af:09:19:18:1e:5b:b1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 18:3e:b6:3a:ab:45:01:fc:6e:91:9b:63:b4:5e:c5:21:92:ab:0f:24
Fingerprint (sha256): 5d:70:f3:91:f1:da:0d:c6:b7:c2:18:19:e0:cd:d2:93:a8:dc:73:04:62:af:65:99:db:92:b1:30:f6:a5:fc:09

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.waitakerecityfc.org.nz

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.waitakerecityfc.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.aff.org.nz
www.ardmoremarist.co.nz
www.aucklandbaseball.co.nz
www.aucklandfootball.org.nz
www.aucklandservicerifle.org.nz
www.bbafc.org.nz
www.bowlssouthland.co.nz
www.bowlswestcoast.org.nz
www.brooklyncroquetclub.org
www.capitalfootball.org.nz
www.centralfootball.co.nz
www.centralfootball.org.nz
www.clevedontennisclub.co.nz
www.cmsport.co.nz
www.collegerifles.co.nz
www.developyourlegacy.co.nz
www.diamondblacks.co.nz
www.diamondblacks.com
www.diamondblacks.org.nz
www.diamondsport.co.nz
www.diamondsportnz.co.nz
www.diamondsportnz.com
www.diamondsports.co.nz
www.diamondsportsnz.co.nz
www.diamondsportsnz.com
www.footballsouth.co.nz
www.gameoftwohalfwits.com
www.glenfieldbowls.co.nz
www.hbcc.org.nz
www.hendersonsquash.co.nz
www.howicksailingclub.co.nz
www.hrc.org.nz
www.karakasportspark.co.nz
www.keirunga.org.nz
www.keirungaartists.org.nz
www.ladiessocialcycling.org.nz
www.linfield.co.nz
www.linwoodrugby.co.nz
www.linwoodrugby.com
www.makikihi.school.nz
www.manurewamets.co.nz
www.maoribasketball.co.nz
www.marlborough-touch.co.nz
www.mmcc.co.nz
www.motuekatouch.co.nz
www.mountfortwaterpolo.nz
www.myfootball.co.nz
www.nelsonnetball.co.nz
www.newplymouthcroquetclub.co.nz
www.newzealandbaseball.co.nz
www.nff.org.nz
www.nhbmx.org.nz
www.nzsra.org.nz
www.oratiaunited.co.nz
www.osssa.org.nz
www.ravensbourne.co.nz
www.redbeachsquashclub.co.nz
www.rosegardenscroquetclub.org.nz
www.royaloakracquets.co.nz
www.rugbysouthland.co.nz
www.rugbysouthlandreferees.co.nz
www.schoolground.co.nz
www.schoolground.nz
www.scpacers.co.nz
www.southcanterburybasketball.co.nz
www.southlandbmxclub.co.nz
www.sportsground.co.nz
www.sportsportal.co.nz
www.sportwaitakere.co.nz
www.sportwaitakere.nz
www.sportyapp.co.nz
www.takapunaafc.co.nz
www.teeball.co.nz
www.turbotouch.org.nz
www.ulyssesnelson.org.nz
www.upperhuttrifleclub.co.nz
www.waibopfootball.co.nz
www.waihekeunited.org.nz
www.waihibeachtennisclub.co.nz
www.waihoraclaytarget.co.nz
www.waikaregolfclub.co.nz
www.wairarapacarclub.org.nz
www.waitakerecityfc.org.nz
www.waitakererugby.co.nz
www.waitematarowing.org.nz
www.whangaroasportfishingclub.co.nz
www.woolstonparkindoorbowls.org.nz

Other certificates including the domain name waitakerecityfc.org.nz

(limited to 100 certificates)
westcoastrangers.co.nz
maristinvercargill.co.nz
westcoastrangers.co.nz
sportnorthland.co.nz
www.katikatifc.co.nz
westcoastrangers.co.nz
pcbasketballclub.co.nz
pcbasketballclub.co.nz
www.pkjsports.co.nz
www.waitakerecityfc.org.nz
hockeymanawatu.org.nz
www.nzfootball.co.nz
hockeymanawatu.org.nz
westcoastrangers.co.nz
maristinvercargill.co.nz
hockeymanawatu.org.nz
maristinvercargill.co.nz
www.aucklandsoftball.org.nz
www.brooklyncroquetclub.org
www.thesalmonrun.nz
maristinvercargill.co.nz
westcoastrangers.co.nz
waitakerecityfc.org.nz
maristalbion.co.nz
www.unimountafc.org.nz
www.greenhithefootball.org
www.pauanuilifeguards.org.nz

Certificate

The complete raw certificate details for www.waitakerecityfc.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlp3H+9L3qR4vKFdTlfrl
aTLyaYwaUd1Z27Jtqs+Nq4GLoeQJPTfWZxxuRSHspSrTXkneJeipyaMFsgt6mwEo
nWQTUgl3LLd3XWa27GrCf/AOOj8wNH6Tb1Q4+RyzNRzIuWhATwYrCFgBuPd7FkjH
JGaC8HHDpiwm29fSkJU50g/ZKa76VsTGokZGaDCm45+yjhwoIDIoNcCZnDXm29z9
Oozb62uKl3Myu7euXV0nuGBDx86z7rv2yfx9NBHrO+0u82QizfnHYdHSC6nfLSXT
XduUoczs35d0o0NCrPvEWGbMUoeFuGroaIEB3N74rrcYdtmTURTcImHUFKsYnZI4
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320446098683357017237499887820258937053390
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-26 02:49:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-24 02:49:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.waitakerecityfc.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19013550547688514577314811094226923537554691434202167425110406697627036564138704201042811171995461429792386518684976609160954216283564680538805636391757808943098227799305626782758671787997223257876695330409713684132230973821322661089016874849336772162828798014302006854466458727131507764197406757041568560031258481256662179554402677786385370996951358286661777981217081627955927826174051668699350787022705319427396431568847138403059212255239551264704888014152743402496157822017115219663482688361356355266748773768491993036781521126146762805351743710103922986975250351416474502777980698125645404893527168519044454299767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							053be95e1e0641ebf8f490b3baaf0919181e5bb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2234 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ardmoremarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandservicerifle.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlssouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswestcoast.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooklyncroquetclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitalfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clevedontennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegerifles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.developyourlegacy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondblacks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondblacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondblacks.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportsnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportsnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.footballsouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gameoftwohalfwits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenfieldbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hendersonsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicksailingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hrc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakasportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keirunga.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keirungaartists.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ladiessocialcycling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linfield.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linwoodrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linwoodrugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makikihi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manurewamets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maoribasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlborough-touch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motuekatouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountfortwaterpolo.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newplymouthcroquetclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newzealandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhbmx.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzsra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oratiaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osssa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ravensbourne.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redbeachsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosegardenscroquetclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaloakracquets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbysouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbysouthlandreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolground.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scpacers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcanterburybasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandbmxclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportwaitakere.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportwaitakere.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportyapp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.takapunaafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teeball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turbotouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ulyssesnelson.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upperhuttrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waibopfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihekeunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihibeachtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihoraclaytarget.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikaregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wairarapacarclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitakerecityfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitakererugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitematarowing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangaroasportfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woolstonparkindoorbowls.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169b81e06af0000040300483046022100e770b7543e1d1c52ea5492864a50ac932b2326a7714e9c2c0c18a257319f0ec902210085f83e74dc2d040a71101d60680acf35f15e36e7b1ed398e499d396bf7c242ab00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169b81e06b80000040300473045022100a24678f8b95506f56a06775dc94309126c1b4aeb2b3a4ba8428b81b308a7c64502206f660fb2e8b56db024edcbda6386d688c8539e559288262b07a3aa1d41bc780e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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