www.terangianiwaniwa.skoolsites.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:a8:d2:cb:11:1c:2a:79:4a:5d:a7:37:0f:e5:9c:59:25:95 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.terangianiwaniwa.skoolsites.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:a8:d2:cb:11:1c:2a:79:4a:5d:a7:37:0f:e5:9c:59:25:95
Serial Number (int): 405896773632168260165758107802836126999957
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0d:22:8f:09:0d:54:65:79:16:f6:94:61:7f:c3:70:e1:3b:25:04:55
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 60:04:b6:2a:db:af:71:c3:d0:e8:eb:01:00:52:7d:86:4f:21:bd:4e
Fingerprint (sha256): 6d:2e:33:40:ba:d4:ba:d0:62:f9:ff:2a:d4:81:ee:96:37:22:d0:85:c0:58:0d:f0:ed:fb:d9:97:d8:2c:3c:bb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.terangianiwaniwa.skoolsites.co.nz

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.terangianiwaniwa.skoolsites.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.three.skoolsites.co.nz
flanshawroad.school.nz
papa.ac.nz
picton.school.nz
pomare.skoolsites.co.nz
portchalmers.school.nz
putaruru.school.nz
randwick.school.nz
ranzau.school.nz
riverina.school.nz
roseneath.school.nz
rotokawa.school.nz
rotoorangi.school.nz
salford.school.nz
selwynschool.school.nz
stcatherinescollege.school.nz
stgerards.school.nz
stjosbalclutha.school.nz
stmarysput.school.nz
stpatstaupo.school.nz
tainui.school.nz
takaro.school.nz
tapawera.school.nz
tarras.school.nz
tekaraka.skoolsites.co.nz
tekurakaupapatamarongo.skoolsites.co.nz
tepuna.school.nz
terangianiwaniwa.skoolsites.co.nz
teteko.school.nz
th.school.nz
thamessouth.school.nz
three.skoolsites.co.nz
tisbury.school.nz
tkkmwhangaroa.skoolsites.co.nz
tongariro.school.nz
totara.school.nz
twtop.school.nz
vogeltown.school.nz
waiouru.skoolsites.co.nz
waipachristian.school.nz
waitunawest.school.nz
wakanui.skoolsites.co.nz
wakari.skoolsites.co.nz
westportnorth.skoolsites.co.nz
wfpsa.nz
whangareiprimary.skoolsites.co.nz
whenuakite.skoolsites.co.nz
woodlands.school.nz
www.flanshawroad.school.nz
www.papa.ac.nz
www.picton.school.nz
www.pomare.skoolsites.co.nz
www.portchalmers.school.nz
www.putaruru.school.nz
www.randwick.school.nz
www.ranzau.school.nz
www.riverina.school.nz
www.roseneath.school.nz
www.rotokawa.school.nz
www.rotoorangi.school.nz
www.salford.school.nz
www.selwynschool.school.nz
www.stcatherinescollege.school.nz
www.stgerards.school.nz
www.stjosbalclutha.school.nz
www.stmarysput.school.nz
www.stpatstaupo.school.nz
www.tainui.school.nz
www.takaro.school.nz
www.tapawera.school.nz
www.tarras.school.nz
www.tekaraka.skoolsites.co.nz
www.tekurakaupapatamarongo.skoolsites.co.nz
www.tepuna.school.nz
www.terangianiwaniwa.skoolsites.co.nz
www.teteko.school.nz
www.thamessouth.school.nz
www.three.skoolsites.co.nz
www.tisbury.school.nz
www.tkkmwhangaroa.skoolsites.co.nz
www.tongariro.school.nz
www.totara.school.nz
www.twtop.school.nz
www.vogeltown.school.nz
www.waiouru.skoolsites.co.nz
www.waipachristian.school.nz
www.waitunawest.school.nz
www.wakanui.skoolsites.co.nz
www.wakari.skoolsites.co.nz
www.westportnorth.skoolsites.co.nz
www.wfpsa.nz
www.whangareiprimary.skoolsites.co.nz
www.whenuakite.skoolsites.co.nz
www.woodlands.school.nz

Other certificates including the domain name skoolsites.co.nz

(limited to 100 certificates)
skoolsites.co.nz
www.papa.ac.nz
skoolsites.co.nz
*.ebbettpark.skoolsites.co.nz
skoolsites.co.nz
templatetwo.skoolsites.co.nz
skoolsites.co.nz
www.waitakereprimary.school.nz
www.firth.skoolsites.co.nz
skoolsites.co.nz
www.cobdenprimary.skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
mangerekura.school.nz
wakanui.skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
www.terangianiwaniwa.skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
www.matamataintermediate.school.nz
skoolsites.co.nz
skoolsites.co.nz
taitoko.skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
mossburn.school.nz
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
duntroon.school.nz
skoolsites.co.nz
cpanel.skoolsites.co.nz
www.riverina.school.nz
birkdalenorth.school.nz
skoolsites.co.nz
wairauvalley.skoolsites.co.nz
www.lichfield.school.nz
terangianiwaniwa.school.nz
skoolsites.co.nz
skoolsites.co.nz
glenavy.school.nz

Certificate

The complete raw certificate details for www.terangianiwaniwa.skoolsites.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOETCCDPmgAwIBAgISBKjSyxEcKnlKXac3D+WcWSWVMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA2MDMyMTQ3NTJaFw0yNDA5MDEyMTQ3NTFaMDAxLjAsBgNVBAMT
JXd3dy50ZXJhbmdpYW5pd2FuaXdhLnNrb29sc2l0ZXMuY28ubnowggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkXdb1hvWu6u0bG/DsKsfAedHfDOH8gA5X
6/F1nEJvGTna0kkiMQAEvLfnWTSNaxyt4gvlXYShqC9INirzIp0gKOCSXEmkog3r
zOOr3UDEdXSOXKO84VnOG4F5pycmV0tgtgMU4D/Bu4mwLEWhRH1C6w+QMj1L8rtI
mN09aufPpm3Uc5FQz3zZTurHnfMFNuH0gKPft5eQWg3TIwPJKk1HW6JGnwNlg5n8
hx6ctcwjfP2S1HiGMcEP9S8qsBVbZ2G3tm4znwpunec3t3nLlpwV56JYlBF6lJKv
A5Q2WZ3F/fXupDIY9UTD6qAF8ONG163/S93u1Y2Rx3r3rXasYPm7AgMBAAGjggsh
MIILHTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFA0ijwkNVGV5FvaUYX/DcOE7JQRV
MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkw
RzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAC
hhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIJKAYDVR0RBIIJHzCCCRuCHWNwYW5l
bC50aHJlZS5za29vbHNpdGVzLmNvLm56ghZmbGFuc2hhd3JvYWQuc2Nob29sLm56
ggpwYXBhLmFjLm56ghBwaWN0b24uc2Nob29sLm56ghdwb21hcmUuc2tvb2xzaXRl
cy5jby5ueoIWcG9ydGNoYWxtZXJzLnNjaG9vbC5ueoIScHV0YXJ1cnUuc2Nob29s
Lm56ghJyYW5kd2ljay5zY2hvb2wubnqCEHJhbnphdS5zY2hvb2wubnqCEnJpdmVy
aW5hLnNjaG9vbC5ueoITcm9zZW5lYXRoLnNjaG9vbC5ueoIScm90b2thd2Euc2No
b29sLm56ghRyb3Rvb3JhbmdpLnNjaG9vbC5ueoIRc2FsZm9yZC5zY2hvb2wubnqC
FnNlbHd5bnNjaG9vbC5zY2hvb2wubnqCHXN0Y2F0aGVyaW5lc2NvbGxlZ2Uuc2No
b29sLm56ghNzdGdlcmFyZHMuc2Nob29sLm56ghhzdGpvc2JhbGNsdXRoYS5zY2hv
b2wubnqCFHN0bWFyeXNwdXQuc2Nob29sLm56ghVzdHBhdHN0YXVwby5zY2hvb2wu
bnqCEHRhaW51aS5zY2hvb2wubnqCEHRha2Fyby5zY2hvb2wubnqCEnRhcGF3ZXJh
LnNjaG9vbC5ueoIQdGFycmFzLnNjaG9vbC5ueoIZdGVrYXJha2Euc2tvb2xzaXRl
cy5jby5ueoIndGVrdXJha2F1cGFwYXRhbWFyb25nby5za29vbHNpdGVzLmNvLm56
ghB0ZXB1bmEuc2Nob29sLm56giF0ZXJhbmdpYW5pd2FuaXdhLnNrb29sc2l0ZXMu
Y28ubnqCEHRldGVrby5zY2hvb2wubnqCDHRoLnNjaG9vbC5ueoIVdGhhbWVzc291
dGguc2Nob29sLm56ghZ0aHJlZS5za29vbHNpdGVzLmNvLm56ghF0aXNidXJ5LnNj
aG9vbC5ueoIedGtrbXdoYW5nYXJvYS5za29vbHNpdGVzLmNvLm56ghN0b25nYXJp
cm8uc2Nob29sLm56ghB0b3RhcmEuc2Nob29sLm56gg90d3RvcC5zY2hvb2wubnqC
E3ZvZ2VsdG93bi5zY2hvb2wubnqCGHdhaW91cnUuc2tvb2xzaXRlcy5jby5ueoIY
d2FpcGFjaHJpc3RpYW4uc2Nob29sLm56ghV3YWl0dW5hd2VzdC5zY2hvb2wubnqC
GHdha2FudWkuc2tvb2xzaXRlcy5jby5ueoIXd2FrYXJpLnNrb29sc2l0ZXMuY28u
bnqCHndlc3Rwb3J0bm9ydGguc2tvb2xzaXRlcy5jby5ueoIId2Zwc2EubnqCIXdo
YW5nYXJlaXByaW1hcnkuc2tvb2xzaXRlcy5jby5ueoIbd2hlbnVha2l0ZS5za29v
bHNpdGVzLmNvLm56ghN3b29kbGFuZHMuc2Nob29sLm56ghp3d3cuZmxhbnNoYXdy
b2FkLnNjaG9vbC5ueoIOd3d3LnBhcGEuYWMubnqCFHd3dy5waWN0b24uc2Nob29s
Lm56ght3d3cucG9tYXJlLnNrb29sc2l0ZXMuY28ubnqCGnd3dy5wb3J0Y2hhbG1l
cnMuc2Nob29sLm56ghZ3d3cucHV0YXJ1cnUuc2Nob29sLm56ghZ3d3cucmFuZHdp
Y2suc2Nob29sLm56ghR3d3cucmFuemF1LnNjaG9vbC5ueoIWd3d3LnJpdmVyaW5h
LnNjaG9vbC5ueoIXd3d3LnJvc2VuZWF0aC5zY2hvb2wubnqCFnd3dy5yb3Rva2F3
YS5zY2hvb2wubnqCGHd3dy5yb3Rvb3JhbmdpLnNjaG9vbC5ueoIVd3d3LnNhbGZv
cmQuc2Nob29sLm56ghp3d3cuc2Vsd3luc2Nob29sLnNjaG9vbC5ueoIhd3d3LnN0
Y2F0aGVyaW5lc2NvbGxlZ2Uuc2Nob29sLm56ghd3d3cuc3RnZXJhcmRzLnNjaG9v
bC5ueoIcd3d3LnN0am9zYmFsY2x1dGhhLnNjaG9vbC5ueoIYd3d3LnN0bWFyeXNw
dXQuc2Nob29sLm56ghl3d3cuc3RwYXRzdGF1cG8uc2Nob29sLm56ghR3d3cudGFp
bnVpLnNjaG9vbC5ueoIUd3d3LnRha2Fyby5zY2hvb2wubnqCFnd3dy50YXBhd2Vy
YS5zY2hvb2wubnqCFHd3dy50YXJyYXMuc2Nob29sLm56gh13d3cudGVrYXJha2Eu
c2tvb2xzaXRlcy5jby5ueoIrd3d3LnRla3VyYWthdXBhcGF0YW1hcm9uZ28uc2tv
b2xzaXRlcy5jby5ueoIUd3d3LnRlcHVuYS5zY2hvb2wubnqCJXd3dy50ZXJhbmdp
YW5pd2FuaXdhLnNrb29sc2l0ZXMuY28ubnqCFHd3dy50ZXRla28uc2Nob29sLm56
ghl3d3cudGhhbWVzc291dGguc2Nob29sLm56ghp3d3cudGhyZWUuc2tvb2xzaXRl
cy5jby5ueoIVd3d3LnRpc2J1cnkuc2Nob29sLm56giJ3d3cudGtrbXdoYW5nYXJv
YS5za29vbHNpdGVzLmNvLm56ghd3d3cudG9uZ2FyaXJvLnNjaG9vbC5ueoIUd3d3
LnRvdGFyYS5zY2hvb2wubnqCE3d3dy50d3RvcC5zY2hvb2wubnqCF3d3dy52b2dl
bHRvd24uc2Nob29sLm56ghx3d3cud2Fpb3VydS5za29vbHNpdGVzLmNvLm56ghx3
d3cud2FpcGFjaHJpc3RpYW4uc2Nob29sLm56ghl3d3cud2FpdHVuYXdlc3Quc2No
b29sLm56ghx3d3cud2FrYW51aS5za29vbHNpdGVzLmNvLm56ght3d3cud2FrYXJp
LnNrb29sc2l0ZXMuY28ubnqCInd3dy53ZXN0cG9ydG5vcnRoLnNrb29sc2l0ZXMu
Y28ubnqCDHd3dy53ZnBzYS5ueoIld3d3LndoYW5nYXJlaXByaW1hcnkuc2tvb2xz
aXRlcy5jby5ueoIfd3d3LndoZW51YWtpdGUuc2tvb2xzaXRlcy5jby5ueoIXd3d3
Lndvb2RsYW5kcy5zY2hvb2wubnowEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgor
BgEEAdZ5AgQCBIH1BIHyAPAAdgA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvBvyiF
7PhkbgAAAY/gSaKvAAAEAwBHMEUCIE5KfY1nX1L/do+/oASUt4O75kcznzNg77XY
IHywtm9wAiEA2l9NpQefrUvAY+VJlKhKGxr967JPn0A/2lLViNXe9PcAdgDuzdBk
1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAY/gSaKtAAAEAwBHMEUCIFF2
Tr/tZAuNonAD6mvbglQB1o+8KmpHMmmuZHly8ZRUAiEA3KfuOB0H/lc7OXPu94mf
TghHlt8LwsBHVEHHO5fDSpAwDQYJKoZIhvcNAQELBQADggEBALNs3fZPRre8/Rgj
TsRu4QOIQS+NIFog0WqS/i/X5dW+z+ACaxCFxOP+NnwHGIU2UC0YAUXQIFmZUeNN
sva6sZkdsmwq+vHMJatae1gg1KN8NIuKtQukcoUMx/IKcGvgiky05aOziggUJ2sI
4qA5br++xopYli/EZ7IRCJGVa6/n28ECEl8JO+SuJpNV5cTr3lFNUERDqeuv06bZ
3VIVVTSY8/XHf0TZ5trHk2EHRGgdC3Z9TsDqdfXXLlh5ccyeeySojRz07jdynikx
mXIb672ruc9uDrKLXq+i7oLl1Y5vR2431U3ejn2BodssHhpBSeG9lJr7GQwZYDSn
O/TDJso=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF3W9Yb1rurtGxvw7CrH
wHnR3wzh/IAOV+vxdZxCbxk52tJJIjEABLy351k0jWscreIL5V2EoagvSDYq8yKd
ICjgklxJpKIN68zjq91AxHV0jlyjvOFZzhuBeacnJldLYLYDFOA/wbuJsCxFoUR9
QusPkDI9S/K7SJjdPWrnz6Zt1HORUM982U7qx53zBTbh9ICj37eXkFoN0yMDySpN
R1uiRp8DZYOZ/IcenLXMI3z9ktR4hjHBD/UvKrAVW2dht7ZuM58Kbp3nN7d5y5ac
FeeiWJQRepSSrwOUNlmdxf317qQyGPVEw+qgBfDjRtet/0vd7tWNkcd69612rGD5
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 405896773632168260165758107802836126999957
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-03 21:47:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-01 21:47:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.terangianiwaniwa.skoolsites.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20749356087246460849997838993921351986790401888935024709684623295642601149240391129362747812683772342536523572071661451886256572429930039044011203870652974768788863429248136586484770777536063495356589183689522590817709750627693238078943893595145498365994628782560242117458997927560934337896936387204456156532902851860909024179240710768067766173854817580343456998899473193523041097764687464755284750313848974217322463545851191343225438588234486660300733865689392958369576198653582417668405943637421683362215315981471985176735371730149150892932949841824645699699630980534306377252672285891084245825978811035651598776763
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d228f090d54657916f694617fc370e13b250455
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2335 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.three.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flanshawroad.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papa.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picton.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pomare.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portchalmers.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'putaruru.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'randwick.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranzau.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverina.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roseneath.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotokawa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotoorangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salford.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selwynschool.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcatherinescollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgerards.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosbalclutha.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysput.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatstaupo.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tainui.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takaro.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tapawera.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarras.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tekaraka.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tekurakaupapatamarongo.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tepuna.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terangianiwaniwa.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teteko.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'th.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thamessouth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'three.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tisbury.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tkkmwhangaroa.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tongariro.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totara.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twtop.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vogeltown.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waiouru.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waipachristian.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitunawest.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wakanui.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wakari.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westportnorth.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfpsa.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareiprimary.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whenuakite.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodlands.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flanshawroad.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papa.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.picton.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pomare.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portchalmers.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.putaruru.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.randwick.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranzau.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverina.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roseneath.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rotokawa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rotoorangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salford.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selwynschool.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcatherinescollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stgerards.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosbalclutha.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysput.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatstaupo.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tainui.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.takaro.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tapawera.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tarras.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tekaraka.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tekurakaupapatamarongo.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tepuna.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terangianiwaniwa.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teteko.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thamessouth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.three.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tisbury.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tkkmwhangaroa.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tongariro.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.totara.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twtop.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vogeltown.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiouru.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waipachristian.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitunawest.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wakanui.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wakari.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westportnorth.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wfpsa.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareiprimary.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whenuakite.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodlands.school.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fe049a2af000004030047304502204e4a7d8d675f52ff768fbfa00494b783bbe647339f3360efb5d8207cb0b66f70022100da5f4da5079fad4bc063e54994a84a1b1afdebb24f9f403fda52d588d5def4f7007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018fe049a2ad0000040300473045022051764ebfed640b8da27003ea6bdb825401d68fbc2a6a473269ae647972f19454022100dca7ee381d07fe573b3973eef7899f4e084796df0bc2c0475441c73b97c34a90
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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