www.nzfootball.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b4:bd:c3:6d:59:f2:3e:5b:da:14:94:7e:52:9b:39:3d:5d was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.nzfootball.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b4:bd:c3:6d:59:f2:3e:5b:da:14:94:7e:52:9b:39:3d:5d
Serial Number (int): 322839922648049350775982917794486443130205
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 76:a5:34:7e:70:9b:a7:7d:88:09:e0:34:50:65:34:16:ad:7a:a4:35
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 80:49:5e:7c:61:e7:9e:2e:39:9d:f0:98:d8:f7:cd:54:dc:df:59:c2
Fingerprint (sha256): 61:d6:dd:75:9f:56:31:13:d6:eb:2f:00:13:5b:b6:1c:f1:84:6c:c7:70:01:34:ee:38:d3:63:46:70:95:f5:65

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.nzfootball.co.nz

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nzfootball.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

music.rosmini.school.nz
sport.rosmini.school.nz
www.aoraki-dragons.co.nz
www.ardmoremarist.co.nz
www.arra.org.nz
www.awateregolfclub.co.nz
www.baseballnzcharity.com
www.bayolympic.co.nz
www.bbafc.org.nz
www.bopbadminton.co.nz
www.bowlsomanu.co.nz
www.bowlssouthland.co.nz
www.burwoodafc.co.nz
www.businesshb.nz
www.canoeslalomnz.org.nz
www.capitalfootball.org.nz
www.carltonjuniorsrugby.co.nz
www.clevedontennisclub.co.nz
www.cmydt.co.nz
www.cornwallcricket.co.nz
www.druryfootball.co.nz
www.ecbafc.co.nz
www.foxtongolf.co.nz
www.glenviewsoccer.co.nz
www.greenhithefootball.org
www.helensvillerugby.co.nz
www.katikatifc.co.nz
www.kbhs.school.nz
www.mainlandfootball.co.nz
www.marlboroughfootball.co.nz
www.mbnc.co.nz
www.mosgielafc.co.nz
www.mountroskillrugby.co.nz
www.mrra.co.nz
www.nelsonbaysfootball.co.nz
www.newplymouthcroquetclub.co.nz
www.nff.org.nz
www.nhrra.co.nz
www.nsu.org.nz
www.nzfootball.co.nz
www.oratiaunited.co.nz
www.osssa.org.nz
www.otahuhusoccer.org.nz
www.papakuracityfc.org.nz
www.papakuranetball.nz
www.papakuranetball.org.nz
www.papamoafootballclub.co.nz
www.papamoafootballclub.nz
www.papanuiredwoodafc.co.nz
www.papatoetoeunited.co.nz
www.parklandsunited.co.nz
www.parklandsunitedsportsclub.net.nz
www.pcbasketballclub.co.nz
www.pkjsports.co.nz
www.ravensbourne.co.nz
www.redbeachsquashclub.co.nz
www.rivertongolf.co.nz
www.schoolground.co.nz
www.schoolground.nz
www.scpacers.co.nz
www.slalomnz.org.nz
www.southlandfootball.org.nz
www.speedway.co.nz
www.sportcanterbury.org.nz
www.sportsportal.co.nz
www.sporttasman.org.nz
www.sportwaitakere.co.nz
www.sportwaitakere.nz
www.sportyapp.co.nz
www.sydenhamrugby.co.nz
www.takapunaafc.co.nz
www.taradalefootball.org.nz
www.tcafc.co.nz
www.teawamutuafc.co.nz
www.thesalmonrun.nz
www.unimountafc.org.nz
www.waibopfootball.co.nz
www.waihekeunited.org.nz
www.waitakerecityfc.org.nz
www.waitakererugby.co.nz
www.wakefieldfc.nz
www.wanakafootball.org.nz
www.westernafc.com
www.worldseriescricket.co.nz
www.wssfa.nz

Other certificates including the domain name nzfootball.co.nz

(limited to 100 certificates)
maristinvercargill.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sportnorthland.co.nz
www.katikatifc.co.nz
sporty.co.nz
sporty.co.nz
pcbasketballclub.co.nz
pcbasketballclub.co.nz
sporty.co.nz
www.pkjsports.co.nz
*.nzfootball.co.nz
sporty.co.nz
hockeymanawatu.org.nz
www.nzfootball.co.nz
hockeymanawatu.org.nz
sporty.co.nz
maristinvercargill.co.nz
hockeymanawatu.org.nz
maristinvercargill.co.nz
www.aucklandsoftball.org.nz
sporty.co.nz
www.brooklyncroquetclub.org
www.thesalmonrun.nz
maristinvercargill.co.nz
maristalbion.co.nz
www.mooloocommunityrugby.co.nz
sporty.co.nz
www.unimountafc.org.nz
www.christchurchmetrocricket.org
*.nzfootball.co.nz
nzfootball.co.nz
www.sportsground.com
sporty.co.nz
www.pauanuilifeguards.org.nz

Certificate

The complete raw certificate details for www.nzfootball.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg74vpot3ZMnHCVY3/l+X
DZt7RoF6/uiJx3VUK4UjKQJZ1jVzH63kJMJc1THRAcTlNhi+WtsrE5uO/2iiZkGx
Cn33TJRCBQxVG3VgQd0f0PCco6wzKQzKL6hjj9gJ/YtTFaggGqIq+cQpkSUrSt57
5CVgij8vP1/h6cZL9Y0jUt7EwhynMnI9VH4eigm5vW+rp/9/myEh8qFB+2VjuA3o
+UqX/mdjiATXKKEsi3jpJMtYDHxhiEL+io2f9SWnwck75DoNiUtV6mZgtFMu6F9U
khpZkWrOUmdZSYDzkCYoOHAFRcJ3wS8/77052XLKlGxver0jxWeacXnvWAsagyTw
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322839922648049350775982917794486443130205
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-23 23:13:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-23 23:13:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nzfootball.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16631002229120873227591743198448563887566765357593035980163127516983827039756755475349046178516415198915838572216652357726423467973930994832422794261452079856847442848305336051425782809367215305801120168108796742522865137302769891718084785151823336443223562094375161232666615757976255689598167173561842544191593201849734944975352658421498932137779462758803767135202871484809765055403673000901493673582387973603719418093396228920997425155736635042999303451700241174072385080413146313902866324041039104811412943311639873517673181427935755272952352280495337271887721242046941504781669967234945351689754718312675871617117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							76a5347e709ba77d8809e03450653416ad7aa435
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2071 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music.rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport.rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aoraki-dragons.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ardmoremarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awateregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnzcharity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayolympic.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bopbadminton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsomanu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlssouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businesshb.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canoeslalomnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitalfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carltonjuniorsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clevedontennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmydt.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornwallcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.druryfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecbafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foxtongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenviewsoccer.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenhithefootball.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helensvillerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.katikatifc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kbhs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainlandfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mosgielafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountroskillrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mrra.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonbaysfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newplymouthcroquetclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhrra.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oratiaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osssa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otahuhusoccer.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakuracityfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakuranetball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakuranetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papamoafootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papamoafootballclub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papanuiredwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papatoetoeunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parklandsunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parklandsunitedsportsclub.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pkjsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ravensbourne.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redbeachsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rivertongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolground.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scpacers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slalomnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportcanterbury.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporttasman.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportwaitakere.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportwaitakere.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportyapp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sydenhamrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.takapunaafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taradalefootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tcafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teawamutuafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesalmonrun.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unimountafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waibopfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihekeunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitakerecityfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitakererugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wakefieldfc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wanakafootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westernafc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldseriescricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wssfa.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001687d349a2a000004030047304502203f0a29c40886970dbf54513c486dcc1e39c16b6017c460012c939d9f2da75b87022100e2af7595abd7b7eec7d270252eb958796c18b358810d72a583248a066827b64500760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001687d349a2d0000040300473045022100fb324e0b7f4a0e7848f39abfffe1835fa98db59826e788eee37477a295aa981102203f9642fe105a62df6ff954e90f577aabb7d5af2f2614a6b0d611629020279bef
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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