sporty.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:71:a6:f8:61:24:66:74:27:bc:02:6c:86:0b:56:a6:5c:55 was issued on by Let's Encrypt.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:71:a6:f8:61:24:66:74:27:bc:02:6c:86:0b:56:a6:5c:55
Serial Number (int): 387122992696305898928773691334904166898773
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c2:a1:89:ea:a5:4e:bf:77:ed:dc:f8:e4:01:fa:7a:0c:70:1c:3d:cb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 45:e5:8d:eb:37:23:f7:61:07:cc:6c:f3:7f:e9:72:64:49:88:f2:5d
Fingerprint (sha256): 5f:bc:25:b3:02:3f:44:e4:b8:5c:f3:fa:d9:35:fb:0c:e9:7b:45:34:44:a4:5d:20:00:9c:de:ce:71:fc:32:fb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.co.nz

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arataki.school.nz
aucklandnetball.co.nz
beachlandsspeedway.co.nz
birkenhead.school.nz
boprugby.co.nz
brucepulmanpark.com
cityrovers.co.nz
clevedongamefishingclub.co.nz
cliftonmarineclub.co.nz
csfc.co.nz
dunedintriclub.co.nz
frimley.school.nz
glenedenunited.co.nz
glenfieldsoftballclub.co.nz
hibiscuscoast.basketball
horshamdownsgolf.co.nz
iona.school.nz
kaiparabasketball.com
karatenz.co.nz
kartsportrotorua.nz
mknetball.co.nz
myrugby.co.nz
netballhuttvalley.co.nz
netballwellington.co.nz
nghs.school.nz
northcanterbury.basketball
northernunitedfootball.co.nz
northernunitedsports.co.nz
ohopefootball.org.nz
oldboys.co.nz
onemanaslsc.org.nz
otagocricket.co.nz
otagocricket.nz
otagosoftball.com
otagotouch.co.nz
papnorth.school.nz
prebbletonvillagesquare.co.nz
pukekoheswimmingclub.co.nz
rockynookbowls.nz
rotoruaspeedway.co.nz
runtimaru.co.nz
sportschaplaincy.co.nz
sporty.co.nz
squashwaikato.co.nz
tairuarsc.co.nz
teatatusoccer.org.nz
tetauihubaseball.nz
thelongroom.co.nz
workingequitationkaikoheboi.co.nz
wtrugby.com

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJDDCCB/SgAwIBAgISBHGm+GEkZnQnvAJshgtWplxVMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA1MjAwMzAzMTRaFw0yNDA4MTgwMzAzMTNaMBcxFTATBgNVBAMT
DHNwb3J0eS5jby5uejCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALdK
HH/HD/b36HbKm4++aHs2RR0E+InWNBROHxBNofXI08UZjEu0vNR1c8YKWRKpvcO7
yC/LdxMWymQACkBbFuP+jmnROZ/EYCR0OLMgbC30ZGoNeM5+U+8KpFkpw60s8hNk
r9Gt20THoMWYj0gtZCXuQl8U51pjim7QLA5ne6WMmoas5qXRqzVZtqOZnauuXA+h
55Vxld71uuFQN/odMVO0qblQSVwZgNsFw8mjcQuH+d6DWepckXlMA2K5sO/u0xoO
16bzZxvLs3g6pkSjaNsHfB9me7aq6U5jclCl3yGhwxcqegmgVXoBXlA1FtF0cDJM
OnCldfaUqA0lqXwGI6ECAwEAAaOCBjUwggYxMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUwqGJ6qVOv3ft3PjkAfp6DHAcPcswHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA
5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu
by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w
ggQ7BgNVHREEggQyMIIELoIRYXJhdGFraS5zY2hvb2wubnqCFWF1Y2tsYW5kbmV0
YmFsbC5jby5ueoIYYmVhY2hsYW5kc3NwZWVkd2F5LmNvLm56ghRiaXJrZW5oZWFk
LnNjaG9vbC5ueoIOYm9wcnVnYnkuY28ubnqCE2JydWNlcHVsbWFucGFyay5jb22C
EGNpdHlyb3ZlcnMuY28ubnqCHWNsZXZlZG9uZ2FtZWZpc2hpbmdjbHViLmNvLm56
ghdjbGlmdG9ubWFyaW5lY2x1Yi5jby5ueoIKY3NmYy5jby5ueoIUZHVuZWRpbnRy
aWNsdWIuY28ubnqCEWZyaW1sZXkuc2Nob29sLm56ghRnbGVuZWRlbnVuaXRlZC5j
by5ueoIbZ2xlbmZpZWxkc29mdGJhbGxjbHViLmNvLm56ghhoaWJpc2N1c2NvYXN0
LmJhc2tldGJhbGyCFmhvcnNoYW1kb3duc2dvbGYuY28ubnqCDmlvbmEuc2Nob29s
Lm56ghVrYWlwYXJhYmFza2V0YmFsbC5jb22CDmthcmF0ZW56LmNvLm56ghNrYXJ0
c3BvcnRyb3RvcnVhLm56gg9ta25ldGJhbGwuY28ubnqCDW15cnVnYnkuY28ubnqC
F25ldGJhbGxodXR0dmFsbGV5LmNvLm56ghduZXRiYWxsd2VsbGluZ3Rvbi5jby5u
eoIObmdocy5zY2hvb2wubnqCGm5vcnRoY2FudGVyYnVyeS5iYXNrZXRiYWxsghxu
b3J0aGVybnVuaXRlZGZvb3RiYWxsLmNvLm56ghpub3J0aGVybnVuaXRlZHNwb3J0
cy5jby5ueoIUb2hvcGVmb290YmFsbC5vcmcubnqCDW9sZGJveXMuY28ubnqCEm9u
ZW1hbmFzbHNjLm9yZy5ueoISb3RhZ29jcmlja2V0LmNvLm56gg9vdGFnb2NyaWNr
ZXQubnqCEW90YWdvc29mdGJhbGwuY29tghBvdGFnb3RvdWNoLmNvLm56ghJwYXBu
b3J0aC5zY2hvb2wubnqCHXByZWJibGV0b252aWxsYWdlc3F1YXJlLmNvLm56ghpw
dWtla29oZXN3aW1taW5nY2x1Yi5jby5ueoIRcm9ja3lub29rYm93bHMubnqCFXJv
dG9ydWFzcGVlZHdheS5jby5ueoIPcnVudGltYXJ1LmNvLm56ghZzcG9ydHNjaGFw
bGFpbmN5LmNvLm56ggxzcG9ydHkuY28ubnqCE3NxdWFzaHdhaWthdG8uY28ubnqC
D3RhaXJ1YXJzYy5jby5ueoIUdGVhdGF0dXNvY2Nlci5vcmcubnqCE3RldGF1aWh1
YmFzZWJhbGwubnqCEXRoZWxvbmdyb29tLmNvLm56giF3b3JraW5nZXF1aXRhdGlv
bmthaWtvaGVib2kuY28ubnqCC3d0cnVnYnkuY29tMBMGA1UdIAQMMAowCAYGZ4EM
AQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAPxdLT9ciR1iUHWUchL4NEu2Q
N38fhWrrwb8ohez4ZG4AAAGPlCr1ngAABAMARzBFAiBibyqJJxhm4vVCyAA4Jj6s
RvH5GVkbtBGRzMj7TYh59QIhAJB4voCB7v/Ny/siVykFR/5hclFaTn2sOza+niel
/ZxWAHcAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGPlCr1zAAA
BAMASDBGAiEAmyY4oduUbCo/1lbhr/6j7cLkrRU5YBBmmJizxujVuZUCIQC5YZN7
5V6ZImMcGW6jWXshhBsdvgEUQ90XDJ2ijHdeATANBgkqhkiG9w0BAQsFAAOCAQEA
f+doCXbOcJhzjIQPNblXlCImCYwOZid7aJnDsr9+gQqvBWlHdAtZgfBdU1ogOnQ0
6kx29fwEelbkDrLoDUK4yJtHARq9bYSQJQF14Xvz0xUdCJx6C79dBahcytnzwft7
NVHXU6SwkKX3TAc+U0Ai0JG0Ye6mBMe1VU5GCFKtSmoioLA7G8reZslACNnoFeQG
wp+jyyc9JC9g1IWB1KTMLcosF8CK6Tt1b0b44p2c7FqC67I1GMA9KqQy1x+OcL6G
NotB+F0y+n+Ae3GwgvyNWXzME9N7n4SJ8P//2Kf/NdmN0jpLknTzgI/T3qbyc/Wi
dFhN4QV4cLjVklW79inC1Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0ocf8cP9vfodsqbj75o
ezZFHQT4idY0FE4fEE2h9cjTxRmMS7S81HVzxgpZEqm9w7vIL8t3ExbKZAAKQFsW
4/6OadE5n8RgJHQ4syBsLfRkag14zn5T7wqkWSnDrSzyE2Sv0a3bRMegxZiPSC1k
Je5CXxTnWmOKbtAsDmd7pYyahqzmpdGrNVm2o5mdq65cD6HnlXGV3vW64VA3+h0x
U7SpuVBJXBmA2wXDyaNxC4f53oNZ6lyReUwDYrmw7+7TGg7XpvNnG8uzeDqmRKNo
2wd8H2Z7tqrpTmNyUKXfIaHDFyp6CaBVegFeUDUW0XRwMkw6cKV19pSoDSWpfAYj
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 387122992696305898928773691334904166898773
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-20 03:03:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-18 03:03:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23138155465088971755704869727492620773022937154743682665406511416638243296415932974595370570887803153023683982424252489088319604596747720283812904565406521838761900428483291208644761465395018923123519276637105638229847784131679600244177046474551535754287756232738462954710639173809759427268617102140780374844967678783809016501427474199947811287241169670287880254854886820834392005570843198263552604402328856611308475701140907151313066686660966751262410292167658803429051275787792336761347398117751791980004278178175965890157595534835285777994049520743178590668006916148898602937785412999188242638405792192821482365857
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c2a189eaa54ebf77eddcf8e401fa7a0c701c3dcb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1074 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arataki.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachlandsspeedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birkenhead.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boprugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brucepulmanpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityrovers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedongamefishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliftonmarineclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunedintriclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frimley.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenedenunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenfieldsoftballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hibiscuscoast.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horshamdownsgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iona.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaiparabasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karatenz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartsportrotorua.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mknetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballhuttvalley.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballwellington.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nghs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcanterbury.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernunitedfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernunitedsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohopefootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldboys.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onemanaslsc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otagocricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otagocricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otagosoftball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otagotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papnorth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonvillagesquare.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pukekoheswimmingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockynookbowls.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotoruaspeedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runtimaru.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportschaplaincy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squashwaikato.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tairuarsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teatatusoccer.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tetauihubaseball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelongroom.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workingequitationkaikoheboi.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wtrugby.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f942af59e00000403004730450220626f2a89271866e2f542c80038263eac46f1f919591bb41191ccc8fb4d8879f50221009078be8081eeffcdcbfb2257290547fe6172515a4e7dac3b36be9e27a5fd9c5600770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f942af5cc00000403004830460221009b2638a1db946c2a3fd656e1affea3edc2e4ad15396010669898b3c6e8d5b995022100b961937be55e9922631c196ea3597b21841b1dbe011443dd170c9da28c775e01
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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