www.akaranacityrifleclub.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0e:7f:08:bc:fd:c4:3b:8a:e7:d7:49:05:3c:fe:1f:57:90 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.akaranacityrifleclub.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0e:7f:08:bc:fd:c4:3b:8a:e7:d7:49:05:3c:fe:1f:57:90
Serial Number (int): 266269668259211892669973298215299124778896
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f9:8c:85:25:4e:d9:c2:14:b3:5b:3e:f2:3a:1d:5f:43:22:07:eb:78
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 80:ee:90:c2:e7:d3:e2:19:fb:a4:ca:5f:84:94:0b:9d:77:ee:5f:32
Fingerprint (sha256): 5d:a6:40:2c:13:1b:66:1d:e2:cd:e3:65:88:61:76:3b:ef:7d:7d:0b:fc:3b:73:fe:53:28:69:67:98:98:11:d3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.akaranacityrifleclub.co.nz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.akaranacityrifleclub.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

music.rosmini.school.nz
sport.rosmini.school.nz
www.akaranacityrifleclub.co.nz
www.amdg.org.nz
www.aoraki-dragons.co.nz
www.arra.org.nz
www.awateregolfclub.co.nz
www.bayolympic.co.nz
www.blokarthb.co.nz
www.bopbadminton.co.nz
www.bowlsomanu.co.nz
www.businesshb.nz
www.canoeslalomnz.org.nz
www.canterburyunited.co.nz
www.capitalbaseball.co.nz
www.carltonjuniorsrugby.co.nz
www.christchurchmetrocricket.co.nz
www.christchurchmetrocricket.com
www.christchurchmetrocricket.org.nz
www.cliftoncricket.nz
www.cliftoncricketclub.co.nz
www.clubsnzdarts.co.nz
www.cmydt.co.nz
www.collegesportsportal.co.nz
www.darfieldcricket.co.nz
www.druryfootball.co.nz
www.ecbafc.co.nz
www.foxtongolf.co.nz
www.gksports.co.nz
www.glenviewsoccer.co.nz
www.healthyfamiliesinvercargill.org.nz
www.helensvillerugby.co.nz
www.highlightcam.co.nz
www.hnwafc.org.nz
www.hockeymanawatu.org.nz
www.howicknetball.org.nz
www.kapitisoftball.co.nz
www.kaumatuatc.org.nz
www.kbhs.school.nz
www.maristinvercargill.co.nz
www.mbnc.co.nz
www.mcobsquash.co.nz
www.mooloo.co.nz
www.mooloocommunityrugby.co.nz
www.moonshinetrail.co.nz
www.mosgielafc.co.nz
www.mrra.co.nz
www.nhrra.co.nz
www.norths.co.nz
www.northsrugby.co.nz
www.nsu.org.nz
www.otahuhusoccer.org.nz
www.otumoetaifootball.co.nz
www.papakuracityfc.org.nz
www.papakuranetball.nz
www.papakuranetball.org.nz
www.papamoafootballclub.co.nz
www.papamoafootballclub.nz
www.papanuiredwoodafc.co.nz
www.papatoetoeunited.co.nz
www.parklandsunited.co.nz
www.parklandsunitedsportsclub.net.nz
www.pauanuilifeguards.org.nz
www.pcbasketballclub.co.nz
www.phoenixsynchro.co.nz
www.pukekohesoftball.co.nz
www.rivertongolf.co.nz
www.royaloakbowls.co.nz
www.sasfootball.club
www.sasfootball.org.nz
www.sharkssports.co.nz
www.southlandfootball.org.nz
www.speedway.co.nz
www.sportnorthland.co.nz
www.sportnorthland.nz
www.sporttasman.org.nz
www.sumnerbowls.co.nz
www.sydenhamrugby.co.nz
www.taradalefootball.org.nz
www.teawamutuafc.co.nz
www.thesalmonrun.nz
www.ths.school.nz
www.trfu.co.nz
www.unimountafc.org.nz
www.wahinetoamcc.nz
www.wakefieldfc.nz
www.worldseriescricket.co.nz
www.wsra.nz
www.wssfa.nz

Other certificates including the domain name akaranacityrifleclub.co.nz

(limited to 100 certificates)
www.sportsground.com
supersixes.co.nz
eden.rugby
sporty.org.nz
sporty.org.nz
hbnetball.co.nz
www.sportsground.com
www.akaranacityrifleclub.co.nz
www.cyclingsc.co.nz
sporty.org.nz
www.marlboroughtrampingclub.co.nz
ctfc.co.nz
sporty.org.nz
www.membermanager.co.nz
www.membermanager.co.nz
sporty.org.nz
sporty.org.nz
www.pukekohesoftball.co.nz
sporty.org.nz
www.eden.rugby
sporty.org.nz
eden.rugby
sked.co.nz
golfnorthland.co.nz
www.christchurchmetrocricket.co.nz
www.crossrecreationcentre.co.nz
www.marlinsnetball.co.nz
cfc.co.nz

Certificate

The complete raw certificate details for www.akaranacityrifleclub.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvQwbxP4YaGqrMoPGi73
ghl1zHkM1B3vHlg2AmSrbCxNHV+iyBKf1IDlpbtnzwL7ptg3FnE0xxfouv7jWkVl
sLbj9krlJ4aXkXOLKfWbo+oWM6pLbYAWMYgvngjHf0YB8CimUjRrkOVoo+PDxDBq
tWTqowkbImQwHbhVYagOyGtYpmNewKq3MOv1ee65EThH9KerlFZtkuhWtcCWh7Ij
p2f3spNkWLEqXyDCgHbcssmhc8ZWDFw9b667STjpZgtdJX12JAlpZ+biTyjME/aL
IprfYSxte7I0gVAPgLCSwYxa4iWFi2/jpAuFoguphOcfy3kJJ+K3phmkfMxFtLV8
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266269668259211892669973298215299124778896
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-29 06:11:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-27 06:11:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.akaranacityrifleclub.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20066066364548240228244448232156627726763681438891250363608332936570200118163039174804368032769475848970245545420486694853849540034247534818794769554524338450075209238842879229158517899703768121175750746926658721316780696920641993242098648664714171494239791984922074556690574371862483533395702309690494087464371807268585464555043628594534326655620473925482432100607143296703872114704103248289853977716047831186887074383062157589652314961735679992613605001709282713969669682127967567211864735689807878738344051488773824666076367903766609216151673242471286865882491137088917223829243275562597509947264422530060293340201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f98c85254ed9c214b35b3ef23a1d5f432207eb78
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2200 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music.rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport.rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akaranacityrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amdg.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aoraki-dragons.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awateregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayolympic.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blokarthb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bopbadminton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsomanu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businesshb.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canoeslalomnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburyunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitalbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carltonjuniorsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cliftoncricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cliftoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubsnzdarts.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmydt.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegesportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darfieldcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.druryfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecbafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foxtongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gksports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenviewsoccer.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthyfamiliesinvercargill.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helensvillerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highlightcam.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hnwafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeymanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicknetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kapitisoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaumatuatc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kbhs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristinvercargill.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcobsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mooloo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mooloocommunityrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moonshinetrail.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mosgielafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mrra.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhrra.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norths.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otahuhusoccer.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otumoetaifootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakuracityfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakuranetball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakuranetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papamoafootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papamoafootballclub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papanuiredwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papatoetoeunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parklandsunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parklandsunitedsportsclub.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pauanuilifeguards.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phoenixsynchro.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pukekohesoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rivertongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaloakbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sasfootball.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sasfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharkssports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportnorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportnorthland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporttasman.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sumnerbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sydenhamrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taradalefootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teawamutuafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesalmonrun.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ths.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unimountafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wahinetoamcc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wakefieldfc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldseriescricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wsra.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wssfa.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c3c9242cb0000040300473045022100910153ec135e653d1cdc9bf111fc865a21e6e8f5ed8fea08881819866eb06504022019ecd2fe1ff18b7e40b3d59914ddcc299984d6aa3cfa71a67e3c1cab3bb6048c00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c3c9242bb0000040300483046022100ad96999d628988bc94c36234fa0f4c123ba6d9914baae5cdca7ef3b82534f65e02210080dd6a9641b84ca5721ffd25957d030c0d8a89ec1a5ee4184db4e6b2b95b203f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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