ctfc.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4d:54:f3:ed:33:98:e8:79:2d:90:9a:4f:b1:46:02:66:07 was issued on by Let's Encrypt.

With 71 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ctfc.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4d:54:f3:ed:33:98:e8:79:2d:90:9a:4f:b1:46:02:66:07
Serial Number (int): 287651521738994593641192430359554361026055
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 62:53:e8:c0:28:3e:7a:2a:7f:f8:2a:73:8d:81:9d:fc:fc:a6:3a:11
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7e:5f:3c:c3:33:f5:df:c1:0b:97:13:97:4d:59:5c:5b:9f:e5:f5:6e
Fingerprint (sha256): 71:a4:37:ac:a0:15:76:f4:30:76:2e:a7:9d:10:21:25:7b:51:a2:73:27:ac:f0:55:6f:c6:7d:5a:c6:eb:4e:af

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ctfc.co.nz

71

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ctfc.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akaranacityrifleclub.co.nz
aurfc.co.nz
belfastrugby.co.nz
bopgolf.co.nz
canterburywaterpolo.org.nz
cdcricket.co.nz
centralcitybaseball.org.nz
cliftoncricket.nz
cliftoncricketclub.co.nz
collegesportsportal.co.nz
crossrecreationcentre.co.nz
ctfc.co.nz
edenrugby.co.nz
fastpitch.co.nz
flaxmillbaymotel.co.nz
goodmanrural.co.nz
greenislandbadmintonclub.net.nz
greertonmaristnz.org.nz
hampsteadclub.co.nz
harbourcityhockey.org.nz
havelocknorthbridgeclub.co.nz
hawkesbayrugbyreferees.co.nz
hawkfootball.org.nz
hbcricket.co.nz
hbmagpies.co.nz
hbreds.nz
hbrfu.co.nz
hbru.co.nz
healthyfamiliesinvercargill.org.nz
highlightcam.co.nz
hillseekers.co.nz
hillseekers4wd.co.nz
huttaikido.org.nz
invercargillnetball.co.nz
magpies.co.nz
maristrugby.org.nz
merivalepap.co.nz
mesoball.co.nz
mgcarclubcanterbury.nz
mtbtauranga.co.nz
mtsquashclub.co.nz
nelsonnetball.co.nz
netballsouthcanterbury.co.nz
northshorerugby.co.nz
nzssfootball.co.nz
nzsssc.co.nz
nzsssc.org.nz
ojcc.org.nz
papakurarugbyleague.co.nz
papatoetoenorth.school.nz
photocard.co.nz
playsoftball.org.nz
pointrugby.co.nz
rangatiragolf.co.nz
southbridgerugby.com
southlandschoolsport.org.nz
sportslink.org.nz
sportspark.co.nz
sportspay.co.nz
sportsportal.co.nz
sportyapp.co.nz
supersixes.co.nz
tasmanvolley.org.nz
totaltouch.org.nz
tuki.co.nz
turbotouch.co.nz
turbotouch.org.nz
waikatogolf.co.nz
waikatogolf.nz
wellingtonsoftball.org.nz
westcoastsoftball.co.nz

Other certificates including the domain name ctfc.co.nz

(limited to 100 certificates)
www.sportycrm.com
eden.rugby
hbnetball.co.nz
www.cyclingsc.co.nz
www.marlboroughtrampingclub.co.nz
ctfc.co.nz
ctfc.co.nz
www.membermanager.co.nz
www.membermanager.co.nz
sporty.org.nz
www.eden.rugby
ctfc.co.nz
eden.rugby
ctfc.co.nz
sked.co.nz
golfnorthland.co.nz
ctfc.co.nz
www.sporty.org.nz
cfc.co.nz
www.cfc.co.nz

Certificate

The complete raw certificate details for ctfc.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILCTCCCfGgAwIBAgISA01U8+0zmOh5LZCaT7FGAmYHMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMTkxOTQ2MDdaFw0y
MDAyMTcxOTQ2MDdaMBUxEzARBgNVBAMTCmN0ZmMuY28ubnowggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQDETAQm4dErXh+oQ+qqskGA/TPLoKwAQLIRl9Lj
EN2vtCoVf/47TX3zWSeoJ9xoDpRPlD3Gp9/TDytF3MejK9Xak8ld1ety9eGLDs5o
HPYlGlC6OGPjWxTWhG4dhru47XrhjDepLuida0eUWRSs8s2xsvWjgDC8JKlHjO1Y
uu7O06cQ5Rz7hrVMbfbytxN6HWHvclW9DSTXhw/JyRAw2vP0pF7kSAUdQs7ElOLU
eLqQXfFV+B1n8DjVHA06e8YgiZmf4myW2XMY4q3LKE6o0zETmlwrVbjbVKIvCle9
GoKKH1j963I6l1GiIX2b67ErEPHMC11HwtgW8v8ZdKiTUvKfAgMBAAGjgggcMIII
GDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGJT6MAoPnoqf/gqc42Bnfz8pjoRMB8G
A1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAu
BggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAv
BggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8w
ggXRBgNVHREEggXIMIIFxIIaYWthcmFuYWNpdHlyaWZsZWNsdWIuY28ubnqCC2F1
cmZjLmNvLm56ghJiZWxmYXN0cnVnYnkuY28ubnqCDWJvcGdvbGYuY28ubnqCGmNh
bnRlcmJ1cnl3YXRlcnBvbG8ub3JnLm56gg9jZGNyaWNrZXQuY28ubnqCGmNlbnRy
YWxjaXR5YmFzZWJhbGwub3JnLm56ghFjbGlmdG9uY3JpY2tldC5ueoIYY2xpZnRv
bmNyaWNrZXRjbHViLmNvLm56ghljb2xsZWdlc3BvcnRzcG9ydGFsLmNvLm56ghtj
cm9zc3JlY3JlYXRpb25jZW50cmUuY28ubnqCCmN0ZmMuY28ubnqCD2VkZW5ydWdi
eS5jby5ueoIPZmFzdHBpdGNoLmNvLm56ghZmbGF4bWlsbGJheW1vdGVsLmNvLm56
ghJnb29kbWFucnVyYWwuY28ubnqCH2dyZWVuaXNsYW5kYmFkbWludG9uY2x1Yi5u
ZXQubnqCF2dyZWVydG9ubWFyaXN0bnoub3JnLm56ghNoYW1wc3RlYWRjbHViLmNv
Lm56ghhoYXJib3VyY2l0eWhvY2tleS5vcmcubnqCHWhhdmVsb2Nrbm9ydGhicmlk
Z2VjbHViLmNvLm56ghxoYXdrZXNiYXlydWdieXJlZmVyZWVzLmNvLm56ghNoYXdr
Zm9vdGJhbGwub3JnLm56gg9oYmNyaWNrZXQuY28ubnqCD2hibWFncGllcy5jby5u
eoIJaGJyZWRzLm56ggtoYnJmdS5jby5ueoIKaGJydS5jby5ueoIiaGVhbHRoeWZh
bWlsaWVzaW52ZXJjYXJnaWxsLm9yZy5ueoISaGlnaGxpZ2h0Y2FtLmNvLm56ghFo
aWxsc2Vla2Vycy5jby5ueoIUaGlsbHNlZWtlcnM0d2QuY28ubnqCEWh1dHRhaWtp
ZG8ub3JnLm56ghlpbnZlcmNhcmdpbGxuZXRiYWxsLmNvLm56gg1tYWdwaWVzLmNv
Lm56ghJtYXJpc3RydWdieS5vcmcubnqCEW1lcml2YWxlcGFwLmNvLm56gg5tZXNv
YmFsbC5jby5ueoIWbWdjYXJjbHViY2FudGVyYnVyeS5ueoIRbXRidGF1cmFuZ2Eu
Y28ubnqCEm10c3F1YXNoY2x1Yi5jby5ueoITbmVsc29ubmV0YmFsbC5jby5ueoIc
bmV0YmFsbHNvdXRoY2FudGVyYnVyeS5jby5ueoIVbm9ydGhzaG9yZXJ1Z2J5LmNv
Lm56ghJuenNzZm9vdGJhbGwuY28ubnqCDG56c3NzYy5jby5ueoINbnpzc3NjLm9y
Zy5ueoILb2pjYy5vcmcubnqCGXBhcGFrdXJhcnVnYnlsZWFndWUuY28ubnqCGXBh
cGF0b2V0b2Vub3J0aC5zY2hvb2wubnqCD3Bob3RvY2FyZC5jby5ueoITcGxheXNv
ZnRiYWxsLm9yZy5ueoIQcG9pbnRydWdieS5jby5ueoITcmFuZ2F0aXJhZ29sZi5j
by5ueoIUc291dGhicmlkZ2VydWdieS5jb22CG3NvdXRobGFuZHNjaG9vbHNwb3J0
Lm9yZy5ueoIRc3BvcnRzbGluay5vcmcubnqCEHNwb3J0c3BhcmsuY28ubnqCD3Nw
b3J0c3BheS5jby5ueoISc3BvcnRzcG9ydGFsLmNvLm56gg9zcG9ydHlhcHAuY28u
bnqCEHN1cGVyc2l4ZXMuY28ubnqCE3Rhc21hbnZvbGxleS5vcmcubnqCEXRvdGFs
dG91Y2gub3JnLm56ggp0dWtpLmNvLm56ghB0dXJib3RvdWNoLmNvLm56ghF0dXJi
b3RvdWNoLm9yZy5ueoIRd2Fpa2F0b2dvbGYuY28ubnqCDndhaWthdG9nb2xmLm56
ghl3ZWxsaW5ndG9uc29mdGJhbGwub3JnLm56ghd3ZXN0Y29hc3Rzb2Z0YmFsbC5j
by5uejBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG
AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkC
BAIEgfQEgfEA7wB2AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAAB
boVqUKEAAAQDAEcwRQIgSFay/eR9wtTnZDfvYFqZRDy2IONKq04xYZkH2KWLhBUC
IQDg7Y5gumxHj2gWcDilrmrrC7wvsT48NRMK1LrgW4HnvwB1ALIeBcyLos2KIE6H
ZvkruYolIGdr2vpw57JJUy3vi5BeAAABboVqUJEAAAQDAEYwRAIgdHM7yWGA359f
XpMsM2ygBQBjt1KmTysNlFWo1PzyVXACIDRbYFdVcveeGSWi0u58KM35M8c4MEor
YhAe8LboXTi5MA0GCSqGSIb3DQEBCwUAA4IBAQBQvooAcoWPaTVx0HONMNmQ8IvA
O28Y1cRz0Rcjo9KaiaAqLb3FRPA5Jk6WTa3PAFJw5IqxyHIRGJeVQPY8f9WdndUu
R2HHY+qv5XFEHE8J+brIdftVGM1BYvDjJ/Ja+G3pzaAf3JJn76fBnVTJDW+tZDy1
cH2qo+UUJd2r7uxrqet4nWNk/RCUDM3I1JC9FySw3QIceiW91idb9PfbDycRb8cn
i5s0K5IZZTJ1amEOGKu+RCleBpYuKH8fvsMvLzmtIenULpdsZT89iK40upN6Ocwe
d3QH/X6eNLtDIblJTQQ09yDxDqQ5qNzMVj9bVuwf5Q50cjUteX+0X5eF+O8q
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEwEJuHRK14fqEPqqrJB
gP0zy6CsAECyEZfS4xDdr7QqFX/+O01981knqCfcaA6UT5Q9xqff0w8rRdzHoyvV
2pPJXdXrcvXhiw7OaBz2JRpQujhj41sU1oRuHYa7uO164Yw3qS7onWtHlFkUrPLN
sbL1o4AwvCSpR4ztWLruztOnEOUc+4a1TG328rcTeh1h73JVvQ0k14cPyckQMNrz
9KRe5EgFHULOxJTi1Hi6kF3xVfgdZ/A41RwNOnvGIImZn+JsltlzGOKtyyhOqNMx
E5pcK1W421SiLwpXvRqCih9Y/etyOpdRoiF9m+uxKxDxzAtdR8LYFvL/GXSok1Ly
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287651521738994593641192430359554361026055
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-19 19:46:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-17 19:46:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ctfc.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24780192767672999475724933706766138208552908378605706190805441964998791235830526038575636479392085727012955926508443987574767913142004873537908053523768963357905451727248447058044129928376870798840331415060089296959278854469329180857644415268243000762748716884173128063698680707254708128172622230987521483110464014784056747202164578717218567350332169462673383826389563325739669349915191212483128402316216312400129272183793023193665687197126385002947391063658850793117646641428183789028203019926161954571703696173169409233158511679346402767831690488454849424256715172341160965868447921651570256213376821358620050649759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6253e8c0283e7a2a7ff82a738d819dfcfca63a11
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1480 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akaranacityrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belfastrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bopgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburywaterpolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralcitybaseball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliftoncricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliftoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegesportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossrecreationcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edenrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastpitch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaxmillbaymotel.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodmanrural.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenislandbadmintonclub.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greertonmaristnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hampsteadclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harbourcityhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelocknorthbridgeclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbayrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbmagpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbreds.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbru.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyfamiliesinvercargill.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlightcam.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillseekers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillseekers4wd.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huttaikido.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invercargillnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristrugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merivalepap.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesoball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgcarclubcanterbury.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtbtauranga.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballsouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northshorerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzssfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsssc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsssc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ojcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakurarugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papatoetoenorth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photocard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pointrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangatiragolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southbridgerugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandschoolsport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportslink.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportspay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportyapp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supersixes.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasmanvolley.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totaltouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikatogolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikatogolf.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westcoastsoftball.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e856a50a1000004030047304502204856b2fde47dc2d4e76437ef605a99443cb620e34aab4e31619907d8a58b8415022100e0ed8e60ba6c478f68167038a5ae6aeb0bbc2fb13e3c35130ad4bae05b81e7bf007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e856a50910000040300463044022074733bc96180df9f5f5e932c336ca0050063b752a64f2b0d9455a8d4fcf255700220345b60575572f79e1925a2d2ee7c28cdf933c738304a2b62101ef0b6e85d38b9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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