www.marlboroughtrampingclub.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:98:27:11:77:a0:fb:56:4a:25:92:19:5a:f3:a8:94:73:50 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.marlboroughtrampingclub.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:98:27:11:77:a0:fb:56:4a:25:92:19:5a:f3:a8:94:73:50
Serial Number (int): 313111708154506627089482468074751670907728
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 63:1d:26:38:e2:31:6a:5b:d6:e5:08:f1:18:51:8d:52:0d:aa:19:17
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3b:e0:75:79:75:ec:cb:18:a9:a5:c0:3d:0c:77:01:98:0f:13:b8:b1
Fingerprint (sha256): 6d:83:af:81:1d:a4:b2:d0:4e:83:46:32:9b:e4:c7:d0:26:97:2f:f8:4d:32:94:58:51:25:75:ca:09:c9:42:34

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.marlboroughtrampingclub.co.nz

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.marlboroughtrampingclub.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sport.qmc.school.nz
www.akaranacityrifleclub.co.nz
www.amdg.org.nz
www.arrowtownrugby.co.nz
www.badminton.org.nz
www.basketballhawkesbay.co.nz
www.bayofislandsdressagegroup.co.nz
www.baysathletics.co.nz
www.belfastnetball.co.nz
www.bluerovers.co.nz
www.bowlsbop.co.nz
www.bowlsstadium.nz
www.bowlswaikato.co.nz
www.cashmere.school.nz
www.collegesportsportal.co.nz
www.countiesmanukaurugbyleague.co.nz
www.crossrecreationcentre.co.nz
www.ctfc.co.nz
www.cyclingsc.co.nz
www.eden.rugby
www.ellerslieeagles.co.nz
www.fastpitch.co.nz
www.feildingfarmersmarket.co.nz
www.feildingfarmersmarket.net.nz
www.feildingfarmersmarket.org.nz
www.frasertechcricket.nz
www.glenfieldrugbyleague.co.nz
www.goodmanrural.co.nz
www.greenacrescountry.org.nz
www.halswellunitedfc.co.nz
www.hampsteadclub.co.nz
www.harbourcityhockey.org.nz
www.havelocknorth.rugby
www.hawkesbay.basketball
www.hawkesbaynetball.co.nz
www.hawkfootball.org.nz
www.hbbct.org.nz
www.hbbusinesshub.nz
www.hbnetball.co.nz
www.hbreds.nz
www.hbrugby.co.nz
www.healthyfamiliesinvercargill.org.nz
www.highlightcam.co.nz
www.hnwafc.org.nz
www.hockeymarlborough.org.nz
www.hockeywairarapa.org.nz
www.hokowhitubridge.org.nz
www.hsobburnside.co.nz
www.huianetball.co.nz
www.kerikerimtbclub.co.nz
www.maristalbion.co.nz
www.maristrugby.org.nz
www.marlboroughtrampingclub.co.nz
www.marlinsnetball.co.nz
www.membermanager.co.nz
www.metrofootball.org.nz
www.morningtonbowlingclub.co.nz
www.mountsports.co.nz
www.mtsquashclub.co.nz
www.northgolf.nz
www.nzblackpowder.nz
www.otakisportsclub.co.nz
www.papakurarugbyleague.co.nz
www.photocard.co.nz
www.playsoftball.org.nz
www.ponsonbyrugby.co.nz
www.prebbletonfootball.co.nz
www.pukekohesoftball.co.nz
www.referees.co.nz
www.sailhbc.org.nz
www.schoolsport.nz
www.schoolsportnz.co.nz
www.schoolsportnz.org.nz
www.sharkssports.co.nz
www.sked.co.nz
www.southcanterbury.basketball
www.sportauckland.nz
www.taradaleint.school.nz
www.tasmanvolley.org.nz
www.tepukeunitedfc.co.nz
www.trfu.co.nz
www.wahinetoamcc.nz
www.waimakunited.org.nz
www.wanakafootball.nz
www.wdta.org.nz
www.westlandmotorcycleclub.co.nz
www.whangareinetball.co.nz
www.worldpowerlifting.nz

Other certificates including the domain name marlboroughtrampingclub.co.nz

(limited to 100 certificates)
www.sportycrm.com
www.giafc.co.nz
sportycrm.com
fdmc.school.nz
arrowtownrugby.co.nz
www.sportsground.com
www.sportsground.com
www.marlboroughtrampingclub.co.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
golfnorthland.co.nz
freyberg.ac.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.sporty.org.nz
www.ams.school.nz
www.skeggsfoundation.nz
cfc.co.nz
www.cfc.co.nz

Certificate

The complete raw certificate details for www.marlboroughtrampingclub.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNkAjeKeCQNMIdpnNQtY
rn8wEmyXIuFzd+3LSwZHTo0xn/0dhiMfAKI8IUpdWstmGTLAYmGFSwQCG8AVbYiG
5LbB1q19HHG9+0V8uUsOrqPoRXItF6T/cdX6PjU8PzXgu3rOSEz0jzuPaqVCc0Bw
Kv6q/Zb5aRzMc3dFnnCFxvgy1t18Mb1L/yd+PFjCCqoTaJ/qu2RPC+AYAkS2HMUD
ig3hDAsWTwgl+pKKLdFM/JcsBHTLvO84rCaiJud7LzS3Vub/MIusXsdvHf2b3OS9
aBLYVnf6zfiiIVaxzKo4TYDb18d95mq180/Do92NaTTFLythFOhVpP+36oVlRcy5
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313111708154506627089482468074751670907728
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 07:13:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-25 07:13:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.marlboroughtrampingclub.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16770464011313287987660062775073802739209514524797153322629021950069879915019820479468418656463608784106726190078717841917503903301755470044128163381530875380392999843482773984754276624706786515862060117662540021336144448601409280530650906624684355824212891177684197078589581809579281797825313788024659803422166886139200714125202630838053022257955866831265516571899003422231189791628562871606622688152008483575546690616402635890437766152620020920531396626199508392922310530986845803026783337354819593452539078674259051425793803830485457173777752039666866188745315081375875010915153655063904396634306544496479533054227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							631d2638e2316a5bd6e508f118518d520daa1917
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2233 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport.qmc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akaranacityrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amdg.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arrowtownrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badminton.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basketballhawkesbay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayofislandsdressagegroup.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baysathletics.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belfastnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluerovers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsstadium.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswaikato.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cashmere.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegesportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countiesmanukaurugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crossrecreationcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cyclingsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eden.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ellerslieeagles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fastpitch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feildingfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feildingfarmersmarket.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feildingfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frasertechcricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenfieldrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodmanrural.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenacrescountry.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halswellunitedfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hampsteadclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harbourcityhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havelocknorth.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbay.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbaynetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbbct.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbbusinesshub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbreds.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthyfamiliesinvercargill.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highlightcam.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hnwafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeymarlborough.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeywairarapa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hokowhitubridge.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsobburnside.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huianetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kerikerimtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristalbion.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristrugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughtrampingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlinsnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.membermanager.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metrofootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morningtonbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northgolf.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzblackpowder.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otakisportsclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakurarugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photocard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ponsonbyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prebbletonfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pukekohesoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.referees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sailhbc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsport.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsportnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharkssports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sked.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcanterbury.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportauckland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taradaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasmanvolley.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tepukeunitedfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wahinetoamcc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waimakunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wanakafootball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wdta.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westlandmotorcycleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareinetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldpowerlifting.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016af859fa480000040300463044022077e2b4a016c5a0a980fa9c7d91a68a52215f03d9b490dbd942d09ff18f697f9302203776732832dceed689e4a55d888dedb5e6088f715d98acff829c2f0a47c0f6f6007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016af859f97e0000040300483046022100b4831d9020928e8a717ea9d6810756ca3b2effe711d0b88c9ec63244fa45f9b2022100d5e7cae9d39cb5651a9d4bff80fd49cc72bf9a867ac8961e1cce803ae358b5d9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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