hockeymanawatu.org.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:58:00:b8:0b:b8:e3:2f:9f:e7:f0:c6:de:79:90:c6:12:b8 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hockeymanawatu.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:58:00:b8:0b:b8:e3:2f:9f:e7:f0:c6:de:79:90:c6:12:b8
Serial Number (int): 291282661704700093347603112028250441126584
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: af:36:39:1d:ec:7d:bd:da:d4:c5:c1:9d:38:cc:c7:22:ee:14:4e:6d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b0:8c:ff:b4:01:0d:cf:95:a1:93:20:32:b2:57:82:e6:8b:20:22:81
Fingerprint (sha256): 5e:11:75:44:fb:d4:24:84:ae:de:ab:f6:99:0c:14:17:8a:7e:66:44:c8:d6:b4:51:79:5e:db:1f:95:bc:6f:5d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hockeymanawatu.org.nz

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hockeymanawatu.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aff.org.nz
aoraki-dragons.co.nz
ardmoremarist.co.nz
arra.org.nz
baseballnzcharity.com
bayolympic.co.nz
bbafc.org.nz
bopbadminton.co.nz
bowlssouthland.co.nz
brooklyncroquetclub.org
burwoodafc.co.nz
businesshb.nz
canoeslalomnz.org.nz
capitalfootball.org.nz
carltonjuniorsrugby.co.nz
clevedontennisclub.co.nz
cmydt.co.nz
cornwallcricket.co.nz
druryfootball.co.nz
ecbafc.co.nz
foxtongolf.co.nz
gksports.co.nz
glenviewsoccer.co.nz
greenhithefootball.org
helensvillerugby.co.nz
hockeymanawatu.org.nz
howicknetball.org.nz
katikatifc.co.nz
kbhs.school.nz
mainlandfootball.co.nz
marlboroughfootball.co.nz
mbnc.co.nz
mountroskillrugby.co.nz
mrra.co.nz
nelsonbaysfootball.co.nz
newplymouthcroquetclub.co.nz
nff.org.nz
nhrra.co.nz
norths.co.nz
northsrugby.co.nz
nzfootball.co.nz
oratiaunited.co.nz
otahuhusoccer.org.nz
papakuracityfc.org.nz
papakuranetball.org.nz
papamoafootballclub.co.nz
papamoafootballclub.nz
papanuiredwoodafc.co.nz
papatoetoeunited.co.nz
parklandsunited.co.nz
parklandsunitedsportsclub.net.nz
pcbasketballclub.co.nz
phoenixsynchro.co.nz
ravensbourne.co.nz
redbeachsquashclub.co.nz
rivertongolf.co.nz
sasfootball.club
sasfootball.org.nz
schoolground.co.nz
schoolground.nz
scpacers.co.nz
slalomnz.org.nz
southlandfootball.org.nz
speedway.co.nz
sportcanterbury.org.nz
sportnorthland.co.nz
sportnorthland.nz
sporttasman.org.nz
sportwaitakere.co.nz
sportwaitakere.nz
sydenhamrugby.co.nz
takapunaafc.co.nz
taradalefootball.org.nz
tcafc.co.nz
teawamutuafc.co.nz
thesalmonrun.nz
unimountafc.org.nz
waibopfootball.co.nz
waihekeunited.org.nz
waihoraclaytarget.co.nz
waitakerecityfc.org.nz
waitakererugby.co.nz
wakefieldfc.nz
wanakafootball.org.nz
westernafc.com
worldseriescricket.co.nz
wssfa.nz

Other certificates including the domain name hockeymanawatu.org.nz

(limited to 100 certificates)
maristinvercargill.co.nz
amdg.org.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.akaranacityrifleclub.co.nz
hockeymanawatu.org.nz
www.cyclingsc.co.nz
hockeymanawatu.org.nz
sporty.co.nz
maristinvercargill.co.nz
hockeymanawatu.org.nz
maristinvercargill.co.nz
www.pukekohesoftball.co.nz
www.eden.rugby
amdg.org.nz
maristinvercargill.co.nz
maristalbion.co.nz
www.mooloocommunityrugby.co.nz
www.christchurchmetrocricket.co.nz
www.crossrecreationcentre.co.nz
www.christchurchmetrocricket.org
www.marlinsnetball.co.nz
www.sportsground.com
sporty.co.nz
sporty.co.nz
www.pauanuilifeguards.org.nz
trfu.co.nz

Certificate

The complete raw certificate details for hockeymanawatu.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsio/gi8qsCAVOizzwdAI
cRkphA7LtPL97cqcB+X2CKLvOiQ2YdGYlV9X9lkhSjQpuyDow0LKzuYNh/Swu1VM
/vV0kCspwYsP8aQN1OJOPb5CkvzD8OPGf6ElaN1sisgoKSEOYUjNSWCZZQmM7F0s
YF9NTSuWb46A/HMhrNxVQ4OxKJ9yADtJcE9wsktu8ftCuG9aE5g3xcPk/TSrUvrs
M30KMdr5C9Xs7u2fqSeoyKlK/oF9Zxl7aHwGK7eTy8pCUTVOSZxsjHckQt9bF9Hz
XXfs4CK1LIT7Od59GeX4IMbLZoh2lmkWPFNlKliQ1ZX5cqJOABGajlwEnmsU7O4K
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291282661704700093347603112028250441126584
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-25 01:48:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-25 01:48:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hockeymanawatu.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22491251588774899271564643750972308876019942204015141045732320389626297258851575557349742921044409117259490578284073891921723677217426260378414019900750787809173578396979440199400335705234924340243995439752526871432049157794351486167366124053558360633694992626662029466202645019949797177469154999178178508419112904219207705991127447964365573894013607503347707436558281572033371197320984987644285841714546351688867083430173654866135804195956118845596875985900204658089819397024404116260795059048197084768312698747604967275333439955591572162644947086270922459854603026795416041351532778701052579389633519954415487683233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af36391dec7dbddad4c5c19d38ccc722ee144e6d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1787 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aoraki-dragons.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ardmoremarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnzcharity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayolympic.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bopbadminton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlssouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooklyncroquetclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesshb.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canoeslalomnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carltonjuniorsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedontennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmydt.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornwallcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'druryfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecbafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxtongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gksports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenviewsoccer.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenhithefootball.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helensvillerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeymanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howicknetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katikatifc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbhs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainlandfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbnc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountroskillrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrra.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonbaysfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newplymouthcroquetclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhrra.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norths.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oratiaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otahuhusoccer.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakuracityfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakuranetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papamoafootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papamoafootballclub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papanuiredwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papatoetoeunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parklandsunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parklandsunitedsportsclub.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoenixsynchro.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ravensbourne.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redbeachsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivertongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasfootball.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolground.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scpacers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slalomnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportcanterbury.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportnorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportnorthland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporttasman.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportwaitakere.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportwaitakere.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sydenhamrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takapunaafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taradalefootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teawamutuafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesalmonrun.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unimountafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waibopfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihekeunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihoraclaytarget.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitakerecityfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitakererugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wakefieldfc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanakafootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westernafc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldseriescricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wssfa.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016882e8b31100000403004730450220130e96b1286abf2039c548072a24b279fe8168ab04626bf12e5358c64fb06c24022100b086b0013037e94b284e0604f9369fd47355cb3ce6bdc9c89137b53a1a418e2b007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016882e8b35d0000040300483046022100a030548c5a68c2e2ee8d83385809d214ff44f2b403cda64fe5224c70cdd75330022100d4b35fd5dececbf5387c2578bf308e965c04d0aebf1e0e6afbc4a55b3dcb2df1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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