sporty.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:c3:df:c3:e3:3a:44:d1:7a:99:e2:07:22:a6:0a:99:74:ce was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:c3:df:c3:e3:3a:44:d1:7a:99:e2:07:22:a6:0a:99:74:ce
Serial Number (int): 327989354294534702526162877894690116039886
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d7:be:4e:ba:57:80:08:e8:54:79:6c:17:57:b5:9c:1b:4d:d7:2f:2f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 95:3d:f1:33:14:c3:b8:dc:c2:51:39:74:8d:78:63:be:35:d9:f0:58
Fingerprint (sha256): 77:63:49:63:63:11:b6:06:34:5f:f0:9d:4f:8f:db:6f:51:03:6f:2b:03:02:0a:29:11:f5:28:01:0e:ba:bb:1b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.co.nz

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ardmoremarist.co.nz
arra.org.nz
bowlssouthland.co.nz
brooklyncroquetclub.org
burwoodafc.co.nz
canoeslalomnz.org.nz
capitalfootball.org.nz
carltonjuniorsrugby.co.nz
centralfootball.org.nz
cornwallcricket.co.nz
footballsouth.co.nz
foxtongolf.co.nz
glenviewsoccer.co.nz
greenhithefootball.org
hbcc.org.nz
helensvillerugby.co.nz
karakasportspark.co.nz
katikatifc.co.nz
kbhs.school.nz
mainlandfootball.co.nz
marlboroughfootball.co.nz
nelsonbaysfootball.co.nz
newplymouthcroquetclub.co.nz
nhrra.co.nz
nzfootball.co.nz
oratiaunited.co.nz
papanuiredwoodafc.co.nz
papatoetoeunited.co.nz
parklandsunited.co.nz
pcbasketballclub.co.nz
ravensbourne.co.nz
rivertongolf.co.nz
schoolground.co.nz
southlandfootball.org.nz
speedway.co.nz
sportcanterbury.org.nz
sporttasman.org.nz
sportwaitakere.co.nz
sportwaitakere.nz
sporty.co.nz
sydenhamrugby.co.nz
takapunaafc.co.nz
taradalefootball.org.nz
thesalmonrun.nz
waibopfootball.co.nz
waihekeunited.org.nz
waihoraclaytarget.co.nz
waitakererugby.co.nz
westernafc.com
worldseriescricket.co.nz
wssfa.nz

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
turbotouch.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
mtrbmx.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporthb.net.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
uat.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
www.sporty.co.nz

Certificate

The complete raw certificate details for sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh7wG1urHgAOoWJ78/w/
RF/RDWG65IMk/v4p3MnnrpkyKYnzWG/RDVswK7nEwTmDbxyC37M6ksChGspSTT2u
Tf5k88qjon381o+jOeDGroP3osDD+VK65AVfGAZHDxpOyJYa6a/UVuLreJ5eSmZa
XuxUA55SGJwOeXUiIFPlnkb5mY/Ro2GzKMpJm/LUwFmaOdAhCZmwaawzP2W79Pad
Goly8RmDxRJPv68QPoV6Qn+OXOxx02QuPXxJpCmCkGnwWh4AQOmFJnzYbK5AXPSA
csqHTy4Bah3x41uatGEfCtP+KgqcmsJLk5jqchmpbzNB5fppXdBeDC0K3U83+M6R
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327989354294534702526162877894690116039886
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-20 20:13:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-18 20:13:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22485674339654588591102171742013644238121091058023741651703477959598634578955212277135379360617061557878561765783304999164771916784012270576410916315050237193259334953748248534755741729889511680200104926052254879462399963490867579692469593059063748118653699142285697837750549736332720466590630739257724850379548745631553566700812351867798786390409569217161108892483051614336505466776581437315927947048180832648103836943360615054239098489355750379148244132116826416789151709214827417941847015433772393841692357892037789038763120436679374933540638233248970339946599963668592174193445106303667215171137822544576805507561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d7be4eba578008e854796c1757b59c1b4dd72f2f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1083 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ardmoremarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlssouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooklyncroquetclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canoeslalomnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carltonjuniorsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornwallcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footballsouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxtongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenviewsoccer.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenhithefootball.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helensvillerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakasportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katikatifc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbhs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainlandfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonbaysfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newplymouthcroquetclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhrra.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oratiaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papanuiredwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papatoetoeunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parklandsunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ravensbourne.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivertongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportcanterbury.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporttasman.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportwaitakere.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportwaitakere.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sydenhamrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takapunaafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taradalefootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesalmonrun.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waibopfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihekeunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihoraclaytarget.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitakererugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westernafc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldseriescricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wssfa.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f97da95410000040300483046022100ef88450b26411e83588e233057abed70eb603c8a95936dcd86e021584c733559022100eb09ea1d5386fa645d80b8c2c06718136e476c9b0dffa1bdaa369f699e923cdd0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f97da954b000004030046304402201904aeb769e243661a85d67342efdf685a85c25300ad17a99f970e0d2ce66cc102200b74ad26aeca302fd6a1ddcf95b4c07afccae8042e8d14814a7a18ebaa0f0696
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008ea96add753ba2bb68423d4c05204b7d8e440e09bc45e28631b86f2d7c3391ee56017125ddef620c48ba5a44c3587dc6b58a816783d9c293f6f4c8f04f24d2f52ce680584277dd5d742704a7c26c96ceea911e67266c706930778992565b73eb75df541b394a4c78b20622bed5e29ca909f40aa4b8bc282f098f99838b8084564ab0ec38049ee20e63b1d3efe9d8d6ecf070a26febcd98e12ac4ee7f2a3b19876aa9dcd51b15c48d9fa99869326a9cf1d85d457968b4cce4abac8b782bad8ae15a5b18dc853c63e2d27f13a1cb6b4984c8d139ca00382222416e004f7373543b7b076d843c8796f85f2bd77ecdd272aa544d469ab6e60ec7d0a484fff85a07f2