loadbalancer.nix.jucy.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:e1:48:f5:5c:a7:ed:78:4a:d5:af:1d:89:eb:26:1a:23:f7 was issued on by Let's Encrypt.

With 56 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=loadbalancer.nix.jucy.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e1:48:f5:5c:a7:ed:78:4a:d5:af:1d:89:eb:26:1a:23:f7
Serial Number (int): 337997368760205029242407779791172265452535
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 63:2a:fb:1f:a4:96:58:70:78:59:bd:41:59:da:2c:ec:09:a5:de:76
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3b:77:72:00:92:e7:62:01:07:24:1c:25:b9:f5:0f:ad:20:7e:7b:4a
Fingerprint (sha256): 76:c4:63:ea:a4:05:ef:43:ec:e2:d8:9e:7d:e9:3a:5d:d6:b8:07:4f:f6:17:65:7a:19:e5:83:b0:9a:13:60:7d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate loadbalancer.nix.jucy.co.nz

56

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for loadbalancer.nix.jucy.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

content.jucy.com
cp.nix.jucy.co.nz
jucy.co.nz
jucy.co.nz.loadbalancer.nix.jucy.co.nz
jucy.co.nz.web1.nix.jucy.co.nz
jucy.com
jucy.com.au
jucy.com.au.loadbalancer.nix.jucy.co.nz
jucy.com.au.web1.nix.jucy.co.nz
jucy.com.loadbalancer.nix.jucy.co.nz
jucy.com.web1.nix.jucy.co.nz
jucycruise.co.nz
jucycruise.co.nz.loadbalancer.nix.jucy.co.nz
jucycruise.co.nz.web1.nix.jucy.co.nz
jucycruize.co.nz
jucycruize.co.nz.loadbalancer.nix.jucy.co.nz
jucycruize.co.nz.web1.nix.jucy.co.nz
jucysnooze.co.nz
jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz
jucysnooze.co.nz.web1.nix.jucy.co.nz
jucyusa.com
jucyusa.com.loadbalancer.nix.jucy.co.nz
jucyusa.com.web1.nix.jucy.co.nz
jucyworld.com
jucyworld.com.loadbalancer.nix.jucy.co.nz
jucyworld.com.web1.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
operations.jucy.co.nz
opperations.jucy.co.nz
opperations.jucy.co.nz.loadbalancer.nix.jucy.co.nz
opperations.jucy.co.nz.web1.nix.jucy.co.nz
web1.nix.jucy.co.nz
www.jucy.co.nz
www.jucy.co.nz.loadbalancer.nix.jucy.co.nz
www.jucy.co.nz.web1.nix.jucy.co.nz
www.jucy.com
www.jucy.com.au
www.jucy.com.au.loadbalancer.nix.jucy.co.nz
www.jucy.com.au.web1.nix.jucy.co.nz
www.jucy.com.loadbalancer.nix.jucy.co.nz
www.jucy.com.web1.nix.jucy.co.nz
www.jucycruise.co.nz
www.jucycruise.co.nz.loadbalancer.nix.jucy.co.nz
www.jucycruise.co.nz.web1.nix.jucy.co.nz
www.jucycruize.co.nz
www.jucycruize.co.nz.loadbalancer.nix.jucy.co.nz
www.jucycruize.co.nz.web1.nix.jucy.co.nz
www.jucysnooze.co.nz
www.jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz
www.jucysnooze.co.nz.web1.nix.jucy.co.nz
www.jucyusa.com
www.jucyusa.com.loadbalancer.nix.jucy.co.nz
www.jucyusa.com.web1.nix.jucy.co.nz
www.jucyworld.com
www.jucyworld.com.loadbalancer.nix.jucy.co.nz
www.jucyworld.com.web1.nix.jucy.co.nz

Other certificates including the domain name jucy.co.nz

(limited to 100 certificates)
loadbalancer.nix.jucy.co.nz
citrix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
uat.jucy.co.nz
uat.jucy.co.nz
sni.cloudflaressl.com
*.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
photos.jucy.co.nz
jucy.co.nz
uat.jucy.co.nz
uat.jucy.co.nz
uat.jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
bookings.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
mail.jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
www.jucyrentals.de
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
uat.jucy.co.nz
jucy.co.nz
bookings.jucy.co.nz
sni.cloudflaressl.com
secure.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
*.jucy.co.nz
secure.jucy.co.nz
jucy.co.nz
loadbalancer.nix.jucy.co.nz
uat.jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
jucy.co.nz
photos.jucy.co.nz

Certificate

The complete raw certificate details for loadbalancer.nix.jucy.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHNNhHYbwNyzNoQvb3La
29IE7SHN6Txm2zcDipaQSAGFLb95IKe8iARIsjoC/ID7NjP+8I8QrCA69+8JQM5V
ZKCnhi7dB3FFFCJWIebdGFbWkVt/sWze9h+aNg9yx9p2W5K7F30LJpWHC/lVlxPj
JLBq4lKb7rsy3Hhngfj9+f/sGG+aSsD+eKpRvShBjN8C3lV0HI6cSEHs6vroKqX5
IQ3cs8icgRVwBRy36vRTQyZP4vwgrVPvnBPtJH1xCsZ1VCvmWFWaHRiyFk4fS5/0
X9Y08opCuBP22OtlNENvihYgXR0QbuReC08ZbFjaPbFnXG+cDxPZPFTzafBcAUS6
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337997368760205029242407779791172265452535
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-10 21:06:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-10 21:06:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'loadbalancer.nix.jucy.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23284706044766974155110793092585692634993296041287377904214556242567613703665202833341843071260645510105753675183041026350985699987666871615096736772748335029598772935149192260243556979066586475740813609158188249341170626117386372532632931422504628890646502847969560259163758576760979723613568845150516695673048905217682184285214171365028166998575701085252808837567902653008679115504383321126444736560542259623857955437671064429668037335730741359844471194549446622355012370745065908062305751985912540129705321302579539828089695066014774456985220154895078671328346422520130135118884526341230281102604592195059858061997
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							632afb1fa49658707859bd4159da2cec09a5de76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1800 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.jucy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruize.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruize.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruize.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'operations.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opperations.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opperations.jucy.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opperations.jucy.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruize.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruize.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruize.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c200000176ee566e0e0000040300473045022100ecf05baeabecdca67f0012aaa9637444f3eac56deddce3be01b3778d7231ea950220281323264e6e3a63728d0e6525abdf862a2f0f4684506df406535a2d64682249007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000176ee566e100000040300473045022100893200359df45c436de02f330f8d16f4b83b987a1f7b82b3b6a5b3556ed07cee022013de7861d0471f42f808146f7fb33dc4018892f2a4cab28de081e9e1ae4029ad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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