whangareirowingclub.org.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d8:c2:3a:18:79:c2:5d:36:36:10:ac:3c:33:fb:07:4f:8f was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=whangareirowingclub.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d8:c2:3a:18:79:c2:5d:36:36:10:ac:3c:33:fb:07:4f:8f
Serial Number (int): 335096020931028107677184162835075816705935
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: da:f8:89:88:29:7a:45:e6:bc:e9:1a:a0:98:91:5c:97:dd:04:60:7a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c0:85:69:d2:ae:76:e1:b7:49:d3:c6:e9:c5:96:dd:5a:d1:bc:71:b1
Fingerprint (sha256): 64:a5:c9:69:42:1b:f7:b5:6b:ef:a0:76:6c:32:24:97:1e:3d:81:56:73:dd:2a:5f:c5:de:c3:65:d4:00:ae:81

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate whangareirowingclub.org.nz

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for whangareirowingclub.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

athleticswanganui.co.nz
aucklandbaseball.co.nz
aucklandfootball.org.nz
aucklandservicerifle.org.nz
baseballnewzealand.co.nz
baseballnewzealand.com
baseballnewzealand.org
baseballnz.com
bowlsdunedin.co.nz
bowlstaurangasouth.co.nz
bowlswestcoast.org.nz
businesshawkesbay.co.nz
canterburybaseball.co.nz
cmsport.co.nz
collegerifles.co.nz
countiesbadminton.co.nz
dairyflattennis.co.nz
diamondblacks.co.nz
diamondblacks.org.nz
diamondsport.co.nz
diamondsportnz.co.nz
diamondsportnz.com
diamondsports.co.nz
diamondsportsnz.co.nz
diamondsportsnz.com
distanceridingnewzealand.co.nz
gameoftwohalfwits.com
ghryc.co.nz
hcwaterpolo.co.nz
hendersonsquash.co.nz
howicksailingclub.co.nz
hrc.org.nz
kereru.school.nz
ladiessocialcycling.org.nz
linfield.co.nz
linwoodrugby.co.nz
linwoodrugby.com
lynnavon.org.nz
mahedrysdale.co.nz
mahedrysdale.com
makikihi.school.nz
manurewamets.co.nz
maoribasketball.co.nz
maorirugby.co.nz
marewa.school.nz
marlborough-touch.co.nz
meeanee.school.nz
mmcc.co.nz
motuekatouch.co.nz
mountfortwaterpolo.nz
myfootball.co.nz
myhockey.co.nz
mysoftball.co.nz
netballmanurewa.org.nz
newzealandbaseball.co.nz
nscbaseball.co.nz
nzsra.org.nz
opotikicol.school.nz
orokohangamusictrust.co.nz
poolburn.school.nz
rosegardenscroquetclub.org.nz
rosmini.school.nz
royaloakracquets.co.nz
rugbysouthland.co.nz
rugbysouthlandreferees.co.nz
softballauckland.org.nz
southcanterburybasketball.co.nz
southernrugby.co.nz
southlandbmxclub.co.nz
southlandfestivalofrunning.co.nz
southlandtriclub.co.nz
teeball.co.nz
tennismanawatu.org.nz
touchsouthland.co.nz
ulyssesnelson.org.nz
upperhuttrifleclub.co.nz
waikaregolfclub.co.nz
wairarapacarclub.org.nz
wellingtonbaseball.co.nz
wellingtonbaseballassociation.co.nz
westaucklandafc.co.nz
whangamatasurf.co.nz
whangareirowingclub.org.nz
whangaroasportfishingclub.co.nz
willowpark.school.nz
woolstonparkindoorbowls.org.nz

Other certificates including the domain name whangareirowingclub.org.nz

(limited to 100 certificates)
www.sportsground.com
www.diamondsportsnz.co.nz
bowlsdunedin.co.nz
sporty.co.nz
www.bowlswestcoast.org.nz
www.ophc.co.nz
sporty.co.nz
www.turbotouch.org.nz
keirunga.org.nz
karakasportspark.co.nz
www.manurewamets.co.nz
whangareirowingclub.org.nz
sporty.co.nz
sportsground.co.nz
sportsground.co.nz
sporty.co.nz
manurewamets.co.nz
www.baseballnewzealand.org
www.schoolground.nz
sporty.co.nz
www.waihibeachtennisclub.co.nz
whangareirowingclub.org.nz
sporty.co.nz
www.diamondsportnz.co.nz
sporty.co.nz
sporty.co.nz
keirunga.org.nz
sportsground.co.nz
www.bowlswestcoast.org.nz

Certificate

The complete raw certificate details for whangareirowingclub.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RmF2C0H/LdYHlyjz4ra
AZ64q3w6xYme4vVHAG8OATFd902/vhiKsZmqjHS4Oeo1kY2Rgjl4cZQwpNgVBvoI
uRPz9jsAKAIMQOffz5K8FNQzFz1UAj2EBqN1KhWijEnjoN3JXLL7kIj4qgcXJuR5
M09nDgNSKWRK/EPIbFC8D4uT+rXSimCvkXZlztjr6NYbxroESCB8AM2ZOh1qWR/q
wayX70zGnsGLPbxy5XtBDFQsfMMPLgjRp4UX5Xj3olNZZsOXSRMJjbibzBy+PlY9
vn+IXAUn3APCJikMMb2ZWwrNfkpEzaBkBblyjxP+yA1pEJsOTBIiftMY87WYHoQo
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335096020931028107677184162835075816705935
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 10:20:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 10:20:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'whangareirowingclub.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28921157613696146113639598248675324105762287181032908018498226943673554480187436333727820098654553846001399525819382313335321609471015041136566682909523263950262281037335202481361594194100745676688026265668820529182695160148632186803394939378581328936489707583157633403149120398611637157084681220817866285430431844101801717126882710401901099244732014229430253892775983379716361409113985348360383569464170938179147169553561028371742388008035544945941735557113432375113519315031766769605332632828731310419626145659960790376695700284138987895624200714033400810845166734618168818993333608467471111304257653291095700023517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							daf88988297a45e6bce91aa098915c97dd04607a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1942 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athleticswanganui.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandservicerifle.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnewzealand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnewzealand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlsdunedin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlstaurangasouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswestcoast.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesshawkesbay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburybaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegerifles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countiesbadminton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dairyflattennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondblacks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondblacks.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsportnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsportsnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsportsnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distanceridingnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameoftwohalfwits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghryc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcwaterpolo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hendersonsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howicksailingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kereru.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladiessocialcycling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linfield.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linwoodrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linwoodrugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lynnavon.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahedrysdale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahedrysdale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makikihi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewamets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maoribasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maorirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marewa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlborough-touch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meeanee.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motuekatouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountfortwaterpolo.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballmanurewa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newzealandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nscbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opotikicol.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orokohangamusictrust.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poolburn.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosegardenscroquetclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaloakracquets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbysouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbysouthlandreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softballauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southcanterburybasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandbmxclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandfestivalofrunning.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandtriclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teeball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tennismanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulyssesnelson.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upperhuttrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikaregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wairarapacarclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonbaseballassociation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westaucklandafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangamatasurf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareirowingclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangaroasportfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willowpark.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woolstonparkindoorbowls.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170a546a1980000040300463044022079843dd1f6bd4aa16252eaa6fbc749fa4fce2ab2eec6225b438f32c8e1f492df0220361af7ed45221ace4cc3a4144dfe11e039d7a6c02e6496beade497e4be279781007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a546a1840000040300483046022100d4385a40c78c852bb6f97fcaa3a760cde495a831467c7380d61104e8a6f434dd022100d221ad4aeb531192ddffd70f086e7549f9a2553bb5ba38d1e74a36361c6565dd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0083f382047437f9c03ed17847f8d50661d455f0d98b17fddae8ee3f3a194da5a46fe762065f2244a36558d8f2144d95a9d638d8c7ba5d65c35b6cd071299fcf970600bbf964db75797e9245445da1d00bfe29f69c84fcdc83df3d363ce3e5a655993fe880698d3a6a038ba201af37871870f0c2eb24d9696c2c344c4eec13f32ffbb342e67562adfa64f0d097a7ff81126952b20bb7fff97d6073ca753cab71859cca18a166eebcf9b3a8d7826ffdd1d62dcb63d702887d9c8a47c923f7fceaaebdf6302a1e84dc9b19db26d112abdeb184ba05f7320e859992efc82b37e45a4eac075e84779ecacb082ce9cd8bd9d1509b87d21761807fe62490e184ce04ac82