distanceridingnewzealand.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:60:01:52:36:1b:b6:ad:12:f0:41:48:a4:41:23:3b:a4:88 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=distanceridingnewzealand.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:60:01:52:36:1b:b6:ad:12:f0:41:48:a4:41:23:3b:a4:88
Serial Number (int): 294005721113474831694558241730093767173256
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 53:d7:ac:a4:91:c3:67:69:33:f9:20:14:78:3d:da:75:44:1f:26:29
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 82:e8:2a:62:b4:b1:c4:7d:ef:08:2b:08:e5:1f:ac:a3:c1:29:e7:6f
Fingerprint (sha256): 5e:53:0d:fc:23:d1:60:de:02:43:1d:97:69:d4:19:2b:9e:00:5c:c9:05:e5:5d:d3:d6:52:1e:9f:51:b2:e5:9e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate distanceridingnewzealand.co.nz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for distanceridingnewzealand.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acwpa.co.nz
ashleyrugby.co.nz
badmintonhb.co.nz
bowlsdunedin.co.nz
bowlswanganui.org.nz
boxingnz.org.nz
bushmultisport.org.nz
c33sports.kiwi
cambridgenetball.org.nz
canamju.org
canterburybaseball.co.nz
canterburycommunityrugby.co.nz
canterburyrugby.co.nz
clevedoncricketclub.co.nz
clevedonrifleclub.co.nz
cmih.co.nz
crfu.co.nz
cyclingtimaru.com
devonportsquash.org.nz
distanceridingnewzealand.co.nz
ellesmererugby.org.nz
forcepass.co.nz
gisborneharriers.co.nz
glenburniceskatingclub.co.nz
grammarcarlton.co.nz
grammartec.co.nz
halswellcricket.co.nz
hastingsintermediate.school.nz
karakarugbyclub.co.nz
mahedrysdale.co.nz
mahedrysdale.com
manukaumasters.co.nz
manurewarugby.co.nz
maorirugby.co.nz
marewa.school.nz
mariancollege.school.nz
maristalbionnetball.co.nz
maristfc.co.nz
maristnh.co.nz
marlboroughtennis.co.nz
martinboroughsquash.co.nz
martinboroughtennisclub.co.nz
mchockey.co.nz
meeanee.school.nz
midcanterburyrugby.co.nz
mttauharagymnastics.co.nz
mtwswim.co.nz
myhockey.co.nz
ncnc.org.nz
netballkapiti.org.nz
netballtaranaki.org.nz
nhcc.co.nz
northharbourcycling.co.nz
oacnz.org
ophc.co.nz
orfu.co.nz
orokohangamusictrust.co.nz
otagoindoorbowls.co.nz
papakurarugby.co.nz
paparoa.school.nz
parkvale.school.nz
pickleball.org.nz
primarysportwellington.org.nz
rangi.school.nz
rollestonrugby.co.nz
rosmini.school.nz
rotoruahockey.co.nz
safepass.co.nz
smognetball.org.nz
southlandmtbclub.co.nz
southlandtriclub.co.nz
sportsouthland.co.nz
stanthony.ac.nz
stjos.school.nz
suburbsrugby.co.nz
taierirugby.co.nz
taniwha.co.nz
taranakihockey.org.nz
tasmanrugbyreferees.co.nz
technicalharriers.co.nz
timarusquashclub.co.nz
touchcanterbury.co.nz
trenthamrifleclub.co.nz
uniss.co.nz
valleyhockey.org.nz
wellingtontouch.org.nz
whtc.co.nz
willowpark.school.nz
wmsc.org.nz

Other certificates including the domain name distanceridingnewzealand.co.nz

(limited to 100 certificates)
www.sportsground.com
www.diamondsportsnz.co.nz
bowlsdunedin.co.nz
www.bowlswestcoast.org.nz
www.ophc.co.nz
www.opotikicol.school.nz
keirunga.org.nz
www.ophc.co.nz
www.manurewamets.co.nz
distanceridingnewzealand.co.nz
whangareirowingclub.org.nz
sportsground.co.nz
sportsground.co.nz
manurewamets.co.nz
www.baseballnewzealand.org
www.waihibeachtennisclub.co.nz
rosmini.school.nz
www.diamondsportnz.co.nz
keirunga.org.nz
www.westcoastsoftball.co.nz
mtwswim.co.nz

Certificate

The complete raw certificate details for distanceridingnewzealand.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzCl8RTKT7mHuzqgYej1
OpwA2P5c7pU2dMvtPHPE77znEv7rKCX1bV/U9HCo8AwQNoOBCytwKy/EczzIVpmj
RCod45zHN0fKAtFX+zd/4TamfwwNWSjUbkfjiYBhMqxt3CZRn1K3lIc9sLbc7A1k
Z+Ntop7V/ScWF3UZZ56qfl37bcxzzHvcFwfQuNl2NLK/K/jSKkTNwG8huBmfxR/2
C3bjv1CiwHrMYGnw9KmS7tdFQXobQz1VqhgNu2P+jQJH5XqHlQ87pnFRq7qcwYgE
vLb0RInSB+T3gpmhMD0UFqxmOk7vmRC/VzbV3kBfuRdcRVN/9J4Mift1qP2/vPAN
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294005721113474831694558241730093767173256
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-29 01:33:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-27 01:33:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'distanceridingnewzealand.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23630552355028065448648340789842736053430559093428088998620699316802721588987882386822821365376997514753960059024885395960749738185286110624134383546921134710776321012797667354512337938952089780754221875199299348716713647820546178503059125037257475880605848765007450729533717336748226158601824601970537881675675141555384983659553588834384875940351253380718953774013973319813686066428978605701786160822309769508824437898196205172703950629431449988679149906846329343840671303538834727043159128206424475249304038416729964627776036886739137616600093754260318718399100299630153111660346129349514611069719472523245010291987
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							53d7aca491c3676933f92014783dda75441f2629
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1858 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acwpa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashleyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badmintonhb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlsdunedin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxingnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bushmultisport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c33sports.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgenetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canamju.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburybaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburycommunityrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedonrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmih.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyclingtimaru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devonportsquash.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distanceridingnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellesmererugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forcepass.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisborneharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenburniceskatingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grammarcarlton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grammartec.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halswellcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastingsintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakarugbyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahedrysdale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahedrysdale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manukaumasters.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maorirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marewa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariancollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristalbionnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristnh.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughtennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martinboroughsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martinboroughtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mchockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meeanee.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mttauharagymnastics.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtwswim.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballkapiti.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballtaranaki.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northharbourcycling.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oacnz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ophc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orokohangamusictrust.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otagoindoorbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakurarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paparoa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkvale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pickleball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primarysportwellington.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rollestonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotoruahockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safepass.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smognetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandmtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandtriclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanthony.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjos.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suburbsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taierirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taniwha.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taranakihockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasmanrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technicalharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timarusquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trenthamrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniss.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valleyhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtontouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whtc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willowpark.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmsc.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001675d50d7400000040300463044022014df06971a32b807127e828174e8642ef5adb8f220472746827b52fa95dcc40102207038db0ea5cc5990e906bc0ff9c7dbc48d654453fc0f74ab7f4c9b619caa30cc007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001675d50d741000004030046304402205858cb297f4a9ab90f85711a21f1740a89a071d152e252acb403814ca1942a410220172a7471b7769932d1b9939476c20681bc6872ddaa3cfd17bc68e07442b97476
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001e83785db7606bd620e92b24fbb3ac9e5dde396bc9925279cdf1691525dde31fed9cad71486e5366b4d87fb3442d6cc1c7f8ce0f7a5ea5bef9131af904bc77b2cc5cb950ea365ae8c77da84961622e1e79910f27ed0a8b5520cb2028b26c33992103b2c815d9fd8865909e270f7a7514e04a0b97c782bbc56b8d9c93699eb5567cc7cd266ec62ebfcba4f67dd5398a86a48d8ae9640ca8b05a28e57088e36b88e46a31ba232a30198caf5a23f1946cd617bf71883a40c7d36082de881d1d18bac7fd0ca365ff340ebe4ed21460e26b8b6fdd9287ace04d171d6b8ca9a900317812cc431c2bd5b0e643efaeed7af8ca5bd96970c9a0fa9c888baf4c05f2b3b4ab