www.rollestonrugby.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:71:a3:95:d6:4a:e7:23:13:de:b6:83:e0:c2:53:11:70:52 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.rollestonrugby.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:71:a3:95:d6:4a:e7:23:13:de:b6:83:e0:c2:53:11:70:52
Serial Number (int): 300006207419261721938851741633045964353618
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5b:8c:ec:26:71:d4:a5:80:1e:8e:04:95:50:79:38:7a:27:84:02:8f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0d:42:ee:7c:23:bd:ee:2f:ac:eb:52:ee:c1:c3:b6:c2:1c:c2:02:5b
Fingerprint (sha256): 79:37:1d:85:61:4e:6b:10:b5:82:7d:85:57:08:6e:db:b7:ce:23:94:65:65:83:26:48:63:ec:22:c6:27:28:2d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.rollestonrugby.co.nz

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.rollestonrugby.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.acwpa.co.nz
www.ashleyrugby.co.nz
www.avondaleint.school.nz
www.badmintonhb.co.nz
www.belmontparkbowlingclub.co.nz
www.bluffhillbowls.co.nz
www.bowlswanganui.org.nz
www.boxingnz.org.nz
www.bushmultisport.org.nz
www.cambridgenetball.org.nz
www.canamju.org
www.canoeslalombop.co.nz
www.canterburycommunityrugby.co.nz
www.canterburyrugby.co.nz
www.clevedoncricketclub.co.nz
www.clevedonrifleclub.co.nz
www.cmih.co.nz
www.crfu.co.nz
www.edenrugby.co.nz
www.gisborneharriers.co.nz
www.glenburniceskatingclub.co.nz
www.grammarcarlton.co.nz
www.grammartec.co.nz
www.halswellcricket.co.nz
www.hastingsintermediate.school.nz
www.heet.net.nz
www.karakarugbyclub.co.nz
www.manurewarugby.co.nz
www.marchingcanterbury.co.nz
www.mariancollege.school.nz
www.maristalbionnetball.co.nz
www.maristfc.co.nz
www.maristnh.co.nz
www.marlboroughtennis.co.nz
www.martinboroughsquash.co.nz
www.martinboroughtennisclub.co.nz
www.mchockey.co.nz
www.midcanterburyrugby.co.nz
www.mttauharagymnastics.co.nz
www.mtwellingtonrugby.co.nz
www.mtwswim.co.nz
www.ncnc.org.nz
www.nelsoncarclub.co.nz
www.netballkapiti.org.nz
www.netballsouthcanterbury.co.nz
www.netballtaranaki.org.nz
www.oacnz.org
www.ophc.co.nz
www.orfu.co.nz
www.otagoindoorbowls.co.nz
www.otagotouch.co.nz
www.paparoa.school.nz
www.parkvale.school.nz
www.photosnap.co.nz
www.pickleball.org.nz
www.pioneerbasketballclub.co.nz
www.prebbletonnetball.org.nz
www.primarysportwellington.org.nz
www.rollestonrugby.co.nz
www.rotoruahockey.co.nz
www.seatounafc.org.nz
www.smognetball.org.nz
www.southlandmtbclub.co.nz
www.sportsouthland.co.nz
www.stanthony.ac.nz
www.stheliersbowlingclub.co.nz
www.stjos.school.nz
www.suburbsrugby.co.nz
www.taierirugby.co.nz
www.taniwha.co.nz
www.taranakihockey.org.nz
www.tasmanrugbyreferees.co.nz
www.teawamutusquash.co.nz
www.technicalharriers.co.nz
www.timarusquashclub.co.nz
www.touchcanterbury.co.nz
www.trenthamrifleclub.co.nz
www.tuakauponyclub.co.nz
www.valleyhockey.org.nz
www.volleyballbop.co.nz
www.wellingtonrnr.org.nz
www.wellingtontouch.org.nz
www.wellsfordsquashclub.co.nz
www.whtc.co.nz
www.wmsc.org.nz
www.wvcc.org.nz
yes.stockx.co.nz

Other certificates including the domain name rollestonrugby.co.nz

(limited to 100 certificates)
willowpark.school.nz
www.diamondsportsnz.co.nz
meeanee.school.nz
sporty.co.nz
www.taranakihockey.org.nz
sporty.co.nz
www.canterburybaseball.co.nz
www.ophc.co.nz
www.opotikicol.school.nz
www.ophc.co.nz
distanceridingnewzealand.co.nz
www.rollestonrugby.co.nz
sporty.co.nz
sporty.co.nz
www.baseballnewzealand.org
canterburybaseball.co.nz
uniss.co.nz
sporty.co.nz
www.waihibeachtennisclub.co.nz
rosmini.school.nz
sporty.co.nz
sporty.co.nz
canterburybaseball.co.nz
www.westcoastsoftball.co.nz
meeanee.school.nz
mtwswim.co.nz

Certificate

The complete raw certificate details for www.rollestonrugby.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOojCCDYqgAwIBAgISA3GjldZK5yMT3raD4MJTEXBSMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEwMTAwMTIyNThaFw0x
OTAxMDgwMTIyNThaMCMxITAfBgNVBAMTGHd3dy5yb2xsZXN0b25ydWdieS5jby5u
ejCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKlpxUDYFFn58nsaUu9X
6jvHDpYo2Oaux1D82AzPZcnPZ3IuXly3ieWIDISxgBCMCtVp72gdGkYrdOdZp14s
9XukEM0LAoLbT81BmBjirauYeuxXgDRXQP4rYgxjwtHkNpXgsziS+0HeLl8XdgpZ
N+kMiZERQrdAyW0ucriRfVtylPjpYmn2eRWKTVVXnlR8fQK1E8QIbr2jASjRnqtZ
lhtDfJ6liONk7UFvGpq0MbziXbgTHo/L19gGv9soRVmJe4tn9fWR7/DcX4XwlNUx
x8y6u8W/8EhJfaCF38G/ugzVUzFqWPkrC6fW8f+5qR97jnfQu/pmsxFVpSiWznSd
zwsCAwEAAaOCC6cwggujMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUW4zsJnHUpYAe
jgSVUHk4eieEAo8wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI
KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0
c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0
c2VuY3J5cHQub3JnLzCCCKgGA1UdEQSCCJ8wggibgg93d3cuYWN3cGEuY28ubnqC
FXd3dy5hc2hsZXlydWdieS5jby5ueoIZd3d3LmF2b25kYWxlaW50LnNjaG9vbC5u
eoIVd3d3LmJhZG1pbnRvbmhiLmNvLm56giB3d3cuYmVsbW9udHBhcmtib3dsaW5n
Y2x1Yi5jby5ueoIYd3d3LmJsdWZmaGlsbGJvd2xzLmNvLm56ghh3d3cuYm93bHN3
YW5nYW51aS5vcmcubnqCE3d3dy5ib3hpbmduei5vcmcubnqCGXd3dy5idXNobXVs
dGlzcG9ydC5vcmcubnqCG3d3dy5jYW1icmlkZ2VuZXRiYWxsLm9yZy5ueoIPd3d3
LmNhbmFtanUub3Jnghh3d3cuY2Fub2VzbGFsb21ib3AuY28ubnqCInd3dy5jYW50
ZXJidXJ5Y29tbXVuaXR5cnVnYnkuY28ubnqCGXd3dy5jYW50ZXJidXJ5cnVnYnku
Y28ubnqCHXd3dy5jbGV2ZWRvbmNyaWNrZXRjbHViLmNvLm56ght3d3cuY2xldmVk
b25yaWZsZWNsdWIuY28ubnqCDnd3dy5jbWloLmNvLm56gg53d3cuY3JmdS5jby5u
eoITd3d3LmVkZW5ydWdieS5jby5ueoIad3d3Lmdpc2Jvcm5laGFycmllcnMuY28u
bnqCIHd3dy5nbGVuYnVybmljZXNrYXRpbmdjbHViLmNvLm56ghh3d3cuZ3JhbW1h
cmNhcmx0b24uY28ubnqCFHd3dy5ncmFtbWFydGVjLmNvLm56ghl3d3cuaGFsc3dl
bGxjcmlja2V0LmNvLm56giJ3d3cuaGFzdGluZ3NpbnRlcm1lZGlhdGUuc2Nob29s
Lm56gg93d3cuaGVldC5uZXQubnqCGXd3dy5rYXJha2FydWdieWNsdWIuY28ubnqC
F3d3dy5tYW51cmV3YXJ1Z2J5LmNvLm56ghx3d3cubWFyY2hpbmdjYW50ZXJidXJ5
LmNvLm56ght3d3cubWFyaWFuY29sbGVnZS5zY2hvb2wubnqCHXd3dy5tYXJpc3Rh
bGJpb25uZXRiYWxsLmNvLm56ghJ3d3cubWFyaXN0ZmMuY28ubnqCEnd3dy5tYXJp
c3RuaC5jby5ueoIbd3d3Lm1hcmxib3JvdWdodGVubmlzLmNvLm56gh13d3cubWFy
dGluYm9yb3VnaHNxdWFzaC5jby5ueoIhd3d3Lm1hcnRpbmJvcm91Z2h0ZW5uaXNj
bHViLmNvLm56ghJ3d3cubWNob2NrZXkuY28ubnqCHHd3dy5taWRjYW50ZXJidXJ5
cnVnYnkuY28ubnqCHXd3dy5tdHRhdWhhcmFneW1uYXN0aWNzLmNvLm56ght3d3cu
bXR3ZWxsaW5ndG9ucnVnYnkuY28ubnqCEXd3dy5tdHdzd2ltLmNvLm56gg93d3cu
bmNuYy5vcmcubnqCF3d3dy5uZWxzb25jYXJjbHViLmNvLm56ghh3d3cubmV0YmFs
bGthcGl0aS5vcmcubnqCIHd3dy5uZXRiYWxsc291dGhjYW50ZXJidXJ5LmNvLm56
ghp3d3cubmV0YmFsbHRhcmFuYWtpLm9yZy5ueoINd3d3Lm9hY256Lm9yZ4IOd3d3
Lm9waGMuY28ubnqCDnd3dy5vcmZ1LmNvLm56ghp3d3cub3RhZ29pbmRvb3Jib3ds
cy5jby5ueoIUd3d3Lm90YWdvdG91Y2guY28ubnqCFXd3dy5wYXBhcm9hLnNjaG9v
bC5ueoIWd3d3LnBhcmt2YWxlLnNjaG9vbC5ueoITd3d3LnBob3Rvc25hcC5jby5u
eoIVd3d3LnBpY2tsZWJhbGwub3JnLm56gh93d3cucGlvbmVlcmJhc2tldGJhbGxj
bHViLmNvLm56ghx3d3cucHJlYmJsZXRvbm5ldGJhbGwub3JnLm56giF3d3cucHJp
bWFyeXNwb3J0d2VsbGluZ3Rvbi5vcmcubnqCGHd3dy5yb2xsZXN0b25ydWdieS5j
by5ueoIXd3d3LnJvdG9ydWFob2NrZXkuY28ubnqCFXd3dy5zZWF0b3VuYWZjLm9y
Zy5ueoIWd3d3LnNtb2duZXRiYWxsLm9yZy5ueoIad3d3LnNvdXRobGFuZG10YmNs
dWIuY28ubnqCGHd3dy5zcG9ydHNvdXRobGFuZC5jby5ueoITd3d3LnN0YW50aG9u
eS5hYy5ueoIed3d3LnN0aGVsaWVyc2Jvd2xpbmdjbHViLmNvLm56ghN3d3cuc3Rq
b3Muc2Nob29sLm56ghZ3d3cuc3VidXJic3J1Z2J5LmNvLm56ghV3d3cudGFpZXJp
cnVnYnkuY28ubnqCEXd3dy50YW5pd2hhLmNvLm56ghl3d3cudGFyYW5ha2lob2Nr
ZXkub3JnLm56gh13d3cudGFzbWFucnVnYnlyZWZlcmVlcy5jby5ueoIZd3d3LnRl
YXdhbXV0dXNxdWFzaC5jby5ueoIbd3d3LnRlY2huaWNhbGhhcnJpZXJzLmNvLm56
ghp3d3cudGltYXJ1c3F1YXNoY2x1Yi5jby5ueoIZd3d3LnRvdWNoY2FudGVyYnVy
eS5jby5ueoIbd3d3LnRyZW50aGFtcmlmbGVjbHViLmNvLm56ghh3d3cudHVha2F1
cG9ueWNsdWIuY28ubnqCF3d3dy52YWxsZXlob2NrZXkub3JnLm56ghd3d3cudm9s
bGV5YmFsbGJvcC5jby5ueoIYd3d3LndlbGxpbmd0b25ybnIub3JnLm56ghp3d3cu
d2VsbGluZ3RvbnRvdWNoLm9yZy5ueoIdd3d3LndlbGxzZm9yZHNxdWFzaGNsdWIu
Y28ubnqCDnd3dy53aHRjLmNvLm56gg93d3cud21zYy5vcmcubnqCD3d3dy53dmNj
Lm9yZy5ueoIQeWVzLnN0b2NreC5jby5uejCB/gYDVR0gBIH2MIHzMAgGBmeBDAEC
ATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0
c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUg
bWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBv
bmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZv
dW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMIIBBAYK
KwYBBAHWeQIEAgSB9QSB8gDwAHcAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV5
5hB7zFYAAAFmW8jNrwAABAMASDBGAiEAs9U4c9pjdgKhRJ/ikHhiNMEWGrSs2YH4
+erv0PwmeD8CIQDYeh1y5cn9VnNmRVmFDN1EVMuL3cntWk2QYtLYQqMcDAB1ACk8
UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABZlvIz44AAAQDAEYwRAIg
f/04AGdqipoV5xWFLyHpnUo0hx+Ro6ua9R2DPdHrMyYCIE/uGAKX5NzlP6qEQPoU
Y3EsiAgTyY5Nqmb5p59hiesOMA0GCSqGSIb3DQEBCwUAA4IBAQBxrJTnEwG2xD2o
tkdsyzcZwZqzkEBpV7xq0KxaZTnesZKPYjBb+frIFxlSNQQ0bgukURgu5eqHRcTW
5E+h2u1ODjQkIvNthKcJ3bNanOr/OSQ3ZisDHnwN0EXRgQEGQClFcgNpb4HLMw+B
qlcqR0h5TcNz3XWFyPuo6O67ky9EeMIoLMehCni1d5WZvqou7JJBoXNi9KBhjoYj
ghL2L9VIHwX44t93VdLIPA7Z+KPMFvcLbffU19vRptaOWrST7j8ni2rDlf+tjBuN
KQJ1qThtTITl67rANOsknaJgxwmCtccA0DBFvoIXSEkRvqbE6vuV212OQzF8nwhn
YjU1JNl/
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWnFQNgUWfnyexpS71fq
O8cOlijY5q7HUPzYDM9lyc9nci5eXLeJ5YgMhLGAEIwK1WnvaB0aRit051mnXiz1
e6QQzQsCgttPzUGYGOKtq5h67FeANFdA/itiDGPC0eQ2leCzOJL7Qd4uXxd2Clk3
6QyJkRFCt0DJbS5yuJF9W3KU+OliafZ5FYpNVVeeVHx9ArUTxAhuvaMBKNGeq1mW
G0N8nqWI42TtQW8amrQxvOJduBMej8vX2Aa/2yhFWYl7i2f19ZHv8NxfhfCU1THH
zLq7xb/wSEl9oIXfwb+6DNVTMWpY+SsLp9bx/7mpH3uOd9C7+mazEVWlKJbOdJ3P
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300006207419261721938851741633045964353618
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-10 01:22:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-08 01:22:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rollestonrugby.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21386430926949514696699498643109262063256676521102857760137235506015626516410292748670879778845849687535356035582647504156655033995287539481224017480481333115609782396408858997888890585234036864747547159522250915344628944734439451688739802052018213968652114718089635934728499304633420329910250377469625521125570312246421400346441862104983880146710120951630334741965104132579782847560520608744417094971789099571989926722950516129289090455195314160915558442998717313417489437278758708356295319299005507056993097358256774840485563208281562075539766725306743249691374273438092332688487156325568219376566863231684198649611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5b8cec2671d4a5801e8e04955079387a2784028f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2207 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acwpa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashleyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avondaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badmintonhb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belmontparkbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluffhillbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boxingnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bushmultisport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambridgenetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canamju.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canoeslalombop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburycommunityrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clevedoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clevedonrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmih.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edenrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gisborneharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenburniceskatingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grammarcarlton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grammartec.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halswellcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastingsintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heet.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakarugbyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manurewarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marchingcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mariancollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristalbionnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristnh.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughtennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martinboroughsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martinboroughtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mchockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mttauharagymnastics.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtwellingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtwswim.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsoncarclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballkapiti.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballsouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballtaranaki.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oacnz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ophc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otagoindoorbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otagotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paparoa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkvale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photosnap.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pickleball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pioneerbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prebbletonnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primarysportwellington.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rollestonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rotoruahockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seatounafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smognetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandmtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanthony.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stheliersbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjos.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suburbsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taierirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taniwha.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taranakihockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasmanrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teawamutusquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.technicalharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timarusquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trenthamrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuakauponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valleyhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volleyballbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonrnr.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtontouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellsfordsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whtc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wmsc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wvcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yes.stockx.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001665bc8cdaf0000040300483046022100b3d53873da637602a1449fe290786234c1161ab4acd981f8f9eaefd0fc26783f022100d87a1d72e5c9fd5673664559850cdd4454cb8bddc9ed5a4d9062d2d842a31c0c007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001665bc8cf8e000004030046304402207ffd3800676a8a9a15e715852f21e99d4a34871f91a3ab9af51d833dd1eb332602204fee180297e4dce53faa8440fa1463712c880813c98e4daa66f9a79f6189eb0e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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