loadbalancer.nix.jucy.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d4:c8:1a:4f:a6:98:6e:19:f8:7e:cf:3a:20:df:00:8f:2d was issued on by Let's Encrypt.

With 56 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=loadbalancer.nix.jucy.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d4:c8:1a:4f:a6:98:6e:19:f8:7e:cf:3a:20:df:00:8f:2d
Serial Number (int): 420854987728664654412656055770745581637421
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 70:05:05:4d:70:3c:19:36:b9:b0:42:c8:fb:d5:8b:15:fb:df:8d:b7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 36:f5:c6:62:96:88:10:bc:87:e2:e5:fa:3a:c0:be:9b:bb:72:24:96
Fingerprint (sha256): 5e:71:b6:6c:02:89:5b:94:68:a7:19:a0:2f:bb:2b:93:f4:de:f9:5b:41:f7:c0:16:dd:8f:bb:77:29:73:b3:4b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate loadbalancer.nix.jucy.co.nz

56

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for loadbalancer.nix.jucy.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.jucyworld.com
cp.nix.jucy.co.nz
jucy.co.nz
jucy.co.nz.loadbalancer.nix.jucy.co.nz
jucy.co.nz.prod.jucy.co.nz
jucy.co.nz.web1.nix.jucy.co.nz
jucy.co.nz.web2.nix.jucy.co.nz
jucy.com.au
jucy.com.au.loadbalancer.nix.jucy.co.nz
jucy.com.au.prod.jucy.co.nz
jucy.com.au.web1.nix.jucy.co.nz
jucy.com.au.web2.nix.jucy.co.nz
jucysnooze.co.nz
jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz
jucysnooze.co.nz.prod.jucy.co.nz
jucysnooze.co.nz.web1.nix.jucy.co.nz
jucysnooze.co.nz.web2.nix.jucy.co.nz
jucyusa.com
jucyusa.com.loadbalancer.nix.jucy.co.nz
jucyusa.com.prod.jucy.co.nz
jucyusa.com.web1.nix.jucy.co.nz
jucyusa.com.web2.nix.jucy.co.nz
jucyworld.com
jucyworld.com.loadbalancer.nix.jucy.co.nz
jucyworld.com.prod.jucy.co.nz
jucyworld.com.web1.nix.jucy.co.nz
jucyworld.com.web2.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
prod.jucy.co.nz
web1.nix.jucy.co.nz
web2.nix.jucy.co.nz
www.jucy.co.nz
www.jucy.co.nz.loadbalancer.nix.jucy.co.nz
www.jucy.co.nz.prod.jucy.co.nz
www.jucy.co.nz.web1.nix.jucy.co.nz
www.jucy.co.nz.web2.nix.jucy.co.nz
www.jucy.com.au
www.jucy.com.au.loadbalancer.nix.jucy.co.nz
www.jucy.com.au.prod.jucy.co.nz
www.jucy.com.au.web1.nix.jucy.co.nz
www.jucy.com.au.web2.nix.jucy.co.nz
www.jucysnooze.co.nz
www.jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz
www.jucysnooze.co.nz.prod.jucy.co.nz
www.jucysnooze.co.nz.web1.nix.jucy.co.nz
www.jucysnooze.co.nz.web2.nix.jucy.co.nz
www.jucyusa.com
www.jucyusa.com.loadbalancer.nix.jucy.co.nz
www.jucyusa.com.prod.jucy.co.nz
www.jucyusa.com.web1.nix.jucy.co.nz
www.jucyusa.com.web2.nix.jucy.co.nz
www.jucyworld.com
www.jucyworld.com.loadbalancer.nix.jucy.co.nz
www.jucyworld.com.prod.jucy.co.nz
www.jucyworld.com.web1.nix.jucy.co.nz
www.jucyworld.com.web2.nix.jucy.co.nz

Other certificates including the domain name jucy.co.nz

(limited to 100 certificates)
loadbalancer.nix.jucy.co.nz
citrix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
uat.jucy.co.nz
uat.jucy.co.nz
sni.cloudflaressl.com
*.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
photos.jucy.co.nz
jucy.co.nz
uat.jucy.co.nz
uat.jucy.co.nz
uat.jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
bookings.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
mail.jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
www.jucyrentals.de
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
uat.jucy.co.nz
jucy.co.nz
bookings.jucy.co.nz
sni.cloudflaressl.com
secure.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
*.jucy.co.nz
secure.jucy.co.nz
jucy.co.nz
loadbalancer.nix.jucy.co.nz
uat.jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
jucy.co.nz
photos.jucy.co.nz

Certificate

The complete raw certificate details for loadbalancer.nix.jucy.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3QmiGRIxdGxn8+L99G9
WYJ4k0IWYzqqbZZI99fxPmcqyG5NmQSdV5yTRB+sGpD00TVuBZfXlMANNnDt3Tax
edQpRbfJLveT14fEV8iwVYoxpuD3PMQqeBI3bngqQkjZSgedKfaG3nfcUGsADkso
Rmwe6KK+1GSNBrCpe74EjznpXXW1+7UcU8kRk9FcDDkhAIgHLIbfO5jb4vL4qki/
JrPbnd2C+g1nRqCorIxMAPz2LWZXKSyMfVyl7VLMkOOFZ+479llnXHtPfMebcfyr
4RResMc4esfOsxijDY+68lw/1BOJ1nBJq+QsHhuCX47DOSJMUj1a39Pqh5fzwlya
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 420854987728664654412656055770745581637421
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-12 03:07:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-10 03:07:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'loadbalancer.nix.jucy.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23158885764250340383685457796858600375289572565539616264211932291882303291748056148575289859562920420914122314918366801601057417802017963367750531926426631678127255070909024903448482949215229158207689910860580199981235851002211861938476410163007537436267997730244697196328138563851107025809883048204080530107789434310816177559283012580600404663257166412719053636358014102800026642098673509874761627012599213870701641998461436909351344247558635956954818753897346359077582004545049200037567218702561610945019640671269986763955404979944907302987941604079077623984949792446374899202713753061911237628442230987428816788211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7005054d703c1936b9b042c8fbd58b15fbdf8db7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1781 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.jucyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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