www.cyclingsc.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c5:7a:f8:44:72:53:27:b8:ec:7c:8e:0b:06:5a:16:88:9b was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cyclingsc.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c5:7a:f8:44:72:53:27:b8:ec:7c:8e:0b:06:5a:16:88:9b
Serial Number (int): 328535938972073892468042335694058719447195
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d3:b4:c5:34:8c:42:d8:49:44:fc:40:17:3d:e8:45:2c:6f:ca:56:62
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 66:12:10:a1:f4:69:ee:d8:18:4c:23:fd:c8:ee:b7:5d:99:2a:a4:83
Fingerprint (sha256): 67:74:c8:a2:fc:7a:19:6a:a8:16:4f:c2:34:9c:6a:9d:51:ab:68:9b:bd:17:a4:94:0c:13:04:c5:4b:e8:0a:12

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.cyclingsc.co.nz

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cyclingsc.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sport.qmc.school.nz
www.akaranacityrifleclub.co.nz
www.badminton.org.nz
www.bayofislandsdressagegroup.co.nz
www.baysathletics.co.nz
www.belfastnetball.co.nz
www.blokarthb.co.nz
www.bowlsbop.co.nz
www.bowlswaikato.co.nz
www.canterburyunited.co.nz
www.capitalbaseball.co.nz
www.christchurchmetrocricket.co.nz
www.christchurchmetrocricket.com
www.christchurchmetrocricket.org.nz
www.cliftoncricket.nz
www.cliftoncricketclub.co.nz
www.clubsnzdarts.co.nz
www.collegesportsportal.co.nz
www.crossrecreationcentre.co.nz
www.ctfc.co.nz
www.cyclingsc.co.nz
www.darfieldcricket.co.nz
www.eden.rugby
www.fastpitch.co.nz
www.feildingfarmersmarket.co.nz
www.feildingfarmersmarket.net.nz
www.feildingfarmersmarket.org.nz
www.frasertechcricket.nz
www.gksports.co.nz
www.glenfieldrugbyleague.co.nz
www.goodmanrural.co.nz
www.halswellunitedfc.co.nz
www.hampsteadclub.co.nz
www.hawkfootball.org.nz
www.hbbct.org.nz
www.hbbusinesshub.nz
www.hbreds.nz
www.healthyfamiliesinvercargill.org.nz
www.highlightcam.co.nz
www.hnwafc.org.nz
www.hockeymanawatu.org.nz
www.hockeymarlborough.org.nz
www.hockeywairarapa.org.nz
www.howicknetball.org.nz
www.hsobburnside.co.nz
www.kapitisoftball.co.nz
www.kaumatuatc.org.nz
www.kerikerimtbclub.co.nz
www.maristinvercargill.co.nz
www.maristrugby.org.nz
www.marlinsnetball.co.nz
www.mcobsquash.co.nz
www.mooloo.co.nz
www.mooloocommunityrugby.co.nz
www.moonshinetrail.co.nz
www.morningtonbowlingclub.co.nz
www.mtsquashclub.co.nz
www.norths.co.nz
www.northsrugby.co.nz
www.nzblackpowder.nz
www.otumoetaifootball.co.nz
www.papakurarugbyleague.co.nz
www.pauanuilifeguards.org.nz
www.phoenixsynchro.co.nz
www.photocard.co.nz
www.playsoftball.org.nz
www.prebbletonfootball.co.nz
www.pukekohesoftball.co.nz
www.royaloakbowls.co.nz
www.sailhbc.org.nz
www.sasfootball.club
www.sasfootball.org.nz
www.schoolsport.nz
www.schoolsportnz.co.nz
www.schoolsportnz.org.nz
www.sharkssports.co.nz
www.sportauckland.nz
www.sportnorthland.co.nz
www.sportnorthland.nz
www.sumnerbowls.co.nz
www.tasmanvolley.org.nz
www.ths.school.nz
www.trfu.co.nz
www.wahinetoamcc.nz
www.westlandmotorcycleclub.co.nz
www.whangareinetball.co.nz
www.worldpowerlifting.nz
www.wsra.nz

Other certificates including the domain name cyclingsc.co.nz

(limited to 100 certificates)
www.sportycrm.com
www.sportsground.com
sportycrm.com
arrowtownrugby.co.nz
sporty.org.nz
www.sportsground.com
hbnetball.co.nz
www.cyclingsc.co.nz
sporty.org.nz
www.marlboroughtrampingclub.co.nz
www.membermanager.co.nz
www.membermanager.co.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sked.co.nz
golfnorthland.co.nz
freyberg.ac.nz
sporty.org.nz
sporty.org.nz
www.sporty.org.nz
cfc.co.nz
www.cfc.co.nz

Certificate

The complete raw certificate details for www.cyclingsc.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOETCCDPmgAwIBAgISA8V6+ERyUye47HyOCwZaFoibMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMjgwOTIyNDNaFw0y
MDA0MjcwOTIyNDNaMB4xHDAaBgNVBAMTE3d3dy5jeWNsaW5nc2MuY28ubnowggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBh3Ee4tCCGecFyUF9deeEj3Yj
IGNW+5Z/nkT+Mkw1xB4/pHMo4yiX4xogvM82Mj9BBozLGsTR3WTn+ImHBlBWXauK
XZbSpDnrgULmxm16qIlqKoU9UhWB/ENVxM1xgDW6LV3reZdBEuWlkbnXeKHa8fhy
2o8AXfpILJn2MMgFBuw1vAYV9R3zRqDwlb7WgP5vV/L62hqvNlr6pZ1yaQqxXK0Z
xwHXmjLCMOrbbQrWvdXfxDZuneJrFN18bZc8HimjEEgNPVwBGoYITJ6Bse/xteBn
oliOP3lOoxBHwd45JsyH524rIfR6liA/nV4r0eLqJk8Ei9mM+1A2HYAsrsxBAgMB
AAGjggsbMIILFzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNO0xTSMQthJRPxAFz3o
RSxvylZiMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF
BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy
eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy
eXB0Lm9yZy8wggjPBgNVHREEggjGMIIIwoITc3BvcnQucW1jLnNjaG9vbC5ueoIe
d3d3LmFrYXJhbmFjaXR5cmlmbGVjbHViLmNvLm56ghR3d3cuYmFkbWludG9uLm9y
Zy5ueoIjd3d3LmJheW9maXNsYW5kc2RyZXNzYWdlZ3JvdXAuY28ubnqCF3d3dy5i
YXlzYXRobGV0aWNzLmNvLm56ghh3d3cuYmVsZmFzdG5ldGJhbGwuY28ubnqCE3d3
dy5ibG9rYXJ0aGIuY28ubnqCEnd3dy5ib3dsc2JvcC5jby5ueoIWd3d3LmJvd2xz
d2Fpa2F0by5jby5ueoIad3d3LmNhbnRlcmJ1cnl1bml0ZWQuY28ubnqCGXd3dy5j
YXBpdGFsYmFzZWJhbGwuY28ubnqCInd3dy5jaHJpc3RjaHVyY2htZXRyb2NyaWNr
ZXQuY28ubnqCIHd3dy5jaHJpc3RjaHVyY2htZXRyb2NyaWNrZXQuY29tgiN3d3cu
Y2hyaXN0Y2h1cmNobWV0cm9jcmlja2V0Lm9yZy5ueoIVd3d3LmNsaWZ0b25jcmlj
a2V0Lm56ghx3d3cuY2xpZnRvbmNyaWNrZXRjbHViLmNvLm56ghZ3d3cuY2x1YnNu
emRhcnRzLmNvLm56gh13d3cuY29sbGVnZXNwb3J0c3BvcnRhbC5jby5ueoIfd3d3
LmNyb3NzcmVjcmVhdGlvbmNlbnRyZS5jby5ueoIOd3d3LmN0ZmMuY28ubnqCE3d3
dy5jeWNsaW5nc2MuY28ubnqCGXd3dy5kYXJmaWVsZGNyaWNrZXQuY28ubnqCDnd3
dy5lZGVuLnJ1Z2J5ghN3d3cuZmFzdHBpdGNoLmNvLm56gh93d3cuZmVpbGRpbmdm
YXJtZXJzbWFya2V0LmNvLm56giB3d3cuZmVpbGRpbmdmYXJtZXJzbWFya2V0Lm5l
dC5ueoIgd3d3LmZlaWxkaW5nZmFybWVyc21hcmtldC5vcmcubnqCGHd3dy5mcmFz
ZXJ0ZWNoY3JpY2tldC5ueoISd3d3Lmdrc3BvcnRzLmNvLm56gh53d3cuZ2xlbmZp
ZWxkcnVnYnlsZWFndWUuY28ubnqCFnd3dy5nb29kbWFucnVyYWwuY28ubnqCGnd3
dy5oYWxzd2VsbHVuaXRlZGZjLmNvLm56ghd3d3cuaGFtcHN0ZWFkY2x1Yi5jby5u
eoIXd3d3Lmhhd2tmb290YmFsbC5vcmcubnqCEHd3dy5oYmJjdC5vcmcubnqCFHd3
dy5oYmJ1c2luZXNzaHViLm56gg13d3cuaGJyZWRzLm56giZ3d3cuaGVhbHRoeWZh
bWlsaWVzaW52ZXJjYXJnaWxsLm9yZy5ueoIWd3d3LmhpZ2hsaWdodGNhbS5jby5u
eoIRd3d3Lmhud2FmYy5vcmcubnqCGXd3dy5ob2NrZXltYW5hd2F0dS5vcmcubnqC
HHd3dy5ob2NrZXltYXJsYm9yb3VnaC5vcmcubnqCGnd3dy5ob2NrZXl3YWlyYXJh
cGEub3JnLm56ghh3d3cuaG93aWNrbmV0YmFsbC5vcmcubnqCFnd3dy5oc29iYnVy
bnNpZGUuY28ubnqCGHd3dy5rYXBpdGlzb2Z0YmFsbC5jby5ueoIVd3d3LmthdW1h
dHVhdGMub3JnLm56ghl3d3cua2VyaWtlcmltdGJjbHViLmNvLm56ghx3d3cubWFy
aXN0aW52ZXJjYXJnaWxsLmNvLm56ghZ3d3cubWFyaXN0cnVnYnkub3JnLm56ghh3
d3cubWFybGluc25ldGJhbGwuY28ubnqCFHd3dy5tY29ic3F1YXNoLmNvLm56ghB3
d3cubW9vbG9vLmNvLm56gh53d3cubW9vbG9vY29tbXVuaXR5cnVnYnkuY28ubnqC
GHd3dy5tb29uc2hpbmV0cmFpbC5jby5ueoIfd3d3Lm1vcm5pbmd0b25ib3dsaW5n
Y2x1Yi5jby5ueoIWd3d3Lm10c3F1YXNoY2x1Yi5jby5ueoIQd3d3Lm5vcnRocy5j
by5ueoIVd3d3Lm5vcnRoc3J1Z2J5LmNvLm56ghR3d3cubnpibGFja3Bvd2Rlci5u
eoIbd3d3Lm90dW1vZXRhaWZvb3RiYWxsLmNvLm56gh13d3cucGFwYWt1cmFydWdi
eWxlYWd1ZS5jby5ueoIcd3d3LnBhdWFudWlsaWZlZ3VhcmRzLm9yZy5ueoIYd3d3
LnBob2VuaXhzeW5jaHJvLmNvLm56ghN3d3cucGhvdG9jYXJkLmNvLm56ghd3d3cu
cGxheXNvZnRiYWxsLm9yZy5ueoIcd3d3LnByZWJibGV0b25mb290YmFsbC5jby5u
eoIad3d3LnB1a2Vrb2hlc29mdGJhbGwuY28ubnqCF3d3dy5yb3lhbG9ha2Jvd2xz
LmNvLm56ghJ3d3cuc2FpbGhiYy5vcmcubnqCFHd3dy5zYXNmb290YmFsbC5jbHVi
ghZ3d3cuc2FzZm9vdGJhbGwub3JnLm56ghJ3d3cuc2Nob29sc3BvcnQubnqCF3d3
dy5zY2hvb2xzcG9ydG56LmNvLm56ghh3d3cuc2Nob29sc3BvcnRuei5vcmcubnqC
Fnd3dy5zaGFya3NzcG9ydHMuY28ubnqCFHd3dy5zcG9ydGF1Y2tsYW5kLm56ghh3
d3cuc3BvcnRub3J0aGxhbmQuY28ubnqCFXd3dy5zcG9ydG5vcnRobGFuZC5ueoIV
d3d3LnN1bW5lcmJvd2xzLmNvLm56ghd3d3cudGFzbWFudm9sbGV5Lm9yZy5ueoIR
d3d3LnRocy5zY2hvb2wubnqCDnd3dy50cmZ1LmNvLm56ghN3d3cud2FoaW5ldG9h
bWNjLm56giB3d3cud2VzdGxhbmRtb3RvcmN5Y2xlY2x1Yi5jby5ueoIad3d3Lndo
YW5nYXJlaW5ldGJhbGwuY28ubnqCGHd3dy53b3JsZHBvd2VybGlmdGluZy5ueoIL
d3d3LndzcmEubnowTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEw
KDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgor
BgEEAdZ5AgQCBIH1BIHyAPAAdgBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWW
gXFFWAAAAW/rrLyOAAAEAwBHMEUCIQDH5QYuE6F9gwgru2WP5VtwGwnoclt1tHra
9pwDHq+TXgIgVbp8cSpUs/RY20+EGfF9Ka8b5jlbjtzxesifB7+4P88AdgAHt1wb
5X1o//Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAW/rrLzcAAAEAwBHMEUCIQCZ
bkuYX4JL+SL7hn+O3ztT2qR2upnwZ7S11VxHnzUhNwIgVDOk7fUishkokhq8Klqi
37n3kOtehfEt97ELP8jLEAgwDQYJKoZIhvcNAQELBQADggEBAA5egYMhzDwa30pP
G4ZKByvoRQPMre2ktdvuK2FEJJQxgEk4b7JYMaW9sKhjZmIOYgQDf4+hOiHGMmYx
okF1uHr5LQ+y9YVGKLcJXfNK84NCikYrQnKU575sdgFNzPJO4c9XiGWZZps3EmHp
PtXrHxxlEG7GJHcHiU7DN9R27/v+7at4zH7352dkjJgTcJj9T78UJXxp1aK/ZgPl
jRbShKFvSdVoIFWzzmgBMSjjd5ksWaIWZ6id8TcSbLEU7PpI+BsKuWLvfCoe8KnJ
Jp9USokl+3L8TQDbVDBUHHxFnXB9UKj7ImJ8J5Oq1QknMlHCKs/+g6yADD0FLcmp
rb/jecQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYdxHuLQghnnBclBfXXn
hI92IyBjVvuWf55E/jJMNcQeP6RzKOMol+MaILzPNjI/QQaMyxrE0d1k5/iJhwZQ
Vl2ril2W0qQ564FC5sZteqiJaiqFPVIVgfxDVcTNcYA1ui1d63mXQRLlpZG513ih
2vH4ctqPAF36SCyZ9jDIBQbsNbwGFfUd80ag8JW+1oD+b1fy+toarzZa+qWdcmkK
sVytGccB15oywjDq220K1r3V38Q2bp3iaxTdfG2XPB4poxBIDT1cARqGCEyegbHv
8bXgZ6JYjj95TqMQR8HeOSbMh+duKyH0epYgP51eK9Hi6iZPBIvZjPtQNh2ALK7M
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328535938972073892468042335694058719447195
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-28 09:22:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-27 09:22:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cyclingsc.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24430781737516383792528588626924873404181545921087539058060949650442901541202316764901576990908500635366220174112624438578176678795271419090763448565797422067302890947951302481377768887087291028835503033202867797549408945954757649282998650616795886236111372686313817339806537985769046525962264918564981536266245656056500106600342454183408881673558158426667977616074437113993203733517100516469289005795441135496528670950657715461055373251268599059762056349500692119040384468640216130293867548543237885634156738317572285146595184072489752087105667166789808761185507352303266066149533886209992540985542603939615192566849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d3b4c5348c42d84944fc40173de8452c6fca5662
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport.qmc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akaranacityrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badminton.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayofislandsdressagegroup.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baysathletics.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belfastnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blokarthb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswaikato.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburyunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitalbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cliftoncricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cliftoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubsnzdarts.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegesportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crossrecreationcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cyclingsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darfieldcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eden.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fastpitch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feildingfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feildingfarmersmarket.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feildingfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frasertechcricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gksports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenfieldrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodmanrural.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halswellunitedfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hampsteadclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbbct.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbbusinesshub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbreds.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthyfamiliesinvercargill.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highlightcam.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hnwafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeymanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeymarlborough.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeywairarapa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicknetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsobburnside.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kapitisoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaumatuatc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kerikerimtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristinvercargill.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristrugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlinsnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcobsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mooloo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mooloocommunityrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moonshinetrail.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morningtonbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norths.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzblackpowder.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otumoetaifootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakurarugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pauanuilifeguards.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phoenixsynchro.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photocard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prebbletonfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pukekohesoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaloakbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sailhbc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sasfootball.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sasfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsport.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsportnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharkssports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportauckland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportnorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportnorthland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sumnerbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasmanvolley.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ths.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wahinetoamcc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westlandmotorcycleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareinetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldpowerlifting.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wsra.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016febacbc8e0000040300473045022100c7e5062e13a17d83082bbb658fe55b701b09e8725b75b47adaf69c031eaf935e022055ba7c712a54b3f458db4f8419f17d29af1be6395b8edcf17ac89f07bfb83fcf00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016febacbcdc0000040300473045022100996e4b985f824bf922fb867f8edf3b53daa476ba99f067b4b5d55c479f35213702205433a4edf522b21928921abc2a5aa2dfb9f790eb5e85f12df7b10b3fc8cb1008
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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