sporty.org.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:00:5d:f2:7a:3c:e6:2e:05:77:f5:ee:f4:8f:c9:8e:1b:c2 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sporty.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:00:5d:f2:7a:3c:e6:2e:05:77:f5:ee:f4:8f:c9:8e:1b:c2
Serial Number (int): 348574020945767647775992736392376233106370
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4e:e2:92:51:6a:f1:78:f4:70:0a:88:74:a6:49:c8:3e:e6:40:cb:4b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 37:8a:48:ff:d1:da:10:cd:52:1a:c3:16:11:72:59:f3:e6:85:f8:9b
Fingerprint (sha256): 7a:8c:23:60:12:6d:55:b6:ee:c7:02:f8:fe:48:9a:87:c6:a4:5b:bd:22:03:5d:17:b5:84:09:60:f9:8d:fd:43

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.org.nz

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akaranacityrifleclub.co.nz
aurfc.co.nz
belfastrugby.co.nz
canterburywaterpolo.org.nz
cdcricket.co.nz
centralcitybaseball.org.nz
collegesportsportal.co.nz
crossrecreationcentre.co.nz
edenrugby.co.nz
fastpitch.co.nz
flaxmillbaymotel.co.nz
goodmanrural.co.nz
greenislandbadmintonclub.net.nz
greertonmaristnz.org.nz
hampsteadclub.co.nz
havelocknorthbridgeclub.co.nz
hawkesbayrugbyreferees.co.nz
hawkfootball.org.nz
hbcricket.co.nz
hbmagpies.co.nz
hbreds.nz
hbrfu.co.nz
hbru.co.nz
healthyfamiliesinvercargill.org.nz
highlightcam.co.nz
hillseekers.co.nz
hillseekers4wd.co.nz
huttaikido.org.nz
invercargillnetball.co.nz
kjcc.org.nz
magpies.co.nz
maristrugby.org.nz
merivalepap.co.nz
mtsquashclub.co.nz
nelsonnetball.co.nz
netballsouthcanterbury.co.nz
northshorerugby.co.nz
nzssfootball.co.nz
papakurarugbyleague.co.nz
photocard.co.nz
rangatiragolf.co.nz
sportauckland.co.nz
sportauckland.org.nz
sportslink.org.nz
sportsportal.co.nz
sporty.org.nz
totaltouch.org.nz
tuki.co.nz
turbotouch.co.nz
turbotouch.org.nz
wellingtonsoftball.org.nz

Other certificates including the domain name sporty.org.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for sporty.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJFTCCB/2gAwIBAgISBABd8no85i4Fd/Xu9I/JjhvCMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMTcxOTMxMzZaFw0yNDA2MTUxOTMxMzVaMBgxFjAUBgNVBAMT
DXNwb3J0eS5vcmcubnowggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl
eE+X83LuWixqFGDvCSlA0nIaJBdEMge3uTFNU7Vu/nLxW2DpP6pkg5IL6pXrbsrJ
E+qHvQem4qZHzrg5ccZ0ADSMsftKF6EBAtNjPNpmgvq1NlMk2JF4Oer3x/gDwBCJ
sdhViPgJnRzIAFwXmxQk9R7Pc6rN2b/TyrCW3qLb/8hJwyH61KYmWg82FqoPq6U+
iCqph0g2vM3jT7mexI6BO0Dpz3BsxqSUhH8nehMkBzE7Ajux8S/Tcd5Pe2x+vYVQ
lHnm47+KMKDX6iD3iGOhgrP0JX6jaHRl04Ta9/HqIZ8Bo6jE/4znkL013jVpc4Do
IGQNXT87f/PK/RZjkI+xAgMBAAGjggY9MIIGOTAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFE7iklFq8Xj0cAqIdKZJyD7mQMtLMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJ
QOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3Iz
Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcv
MIIERQYDVR0RBIIEPDCCBDiCGmFrYXJhbmFjaXR5cmlmbGVjbHViLmNvLm56ggth
dXJmYy5jby5ueoISYmVsZmFzdHJ1Z2J5LmNvLm56ghpjYW50ZXJidXJ5d2F0ZXJw
b2xvLm9yZy5ueoIPY2Rjcmlja2V0LmNvLm56ghpjZW50cmFsY2l0eWJhc2ViYWxs
Lm9yZy5ueoIZY29sbGVnZXNwb3J0c3BvcnRhbC5jby5ueoIbY3Jvc3NyZWNyZWF0
aW9uY2VudHJlLmNvLm56gg9lZGVucnVnYnkuY28ubnqCD2Zhc3RwaXRjaC5jby5u
eoIWZmxheG1pbGxiYXltb3RlbC5jby5ueoISZ29vZG1hbnJ1cmFsLmNvLm56gh9n
cmVlbmlzbGFuZGJhZG1pbnRvbmNsdWIubmV0Lm56ghdncmVlcnRvbm1hcmlzdG56
Lm9yZy5ueoITaGFtcHN0ZWFkY2x1Yi5jby5ueoIdaGF2ZWxvY2tub3J0aGJyaWRn
ZWNsdWIuY28ubnqCHGhhd2tlc2JheXJ1Z2J5cmVmZXJlZXMuY28ubnqCE2hhd2tm
b290YmFsbC5vcmcubnqCD2hiY3JpY2tldC5jby5ueoIPaGJtYWdwaWVzLmNvLm56
ggloYnJlZHMubnqCC2hicmZ1LmNvLm56ggpoYnJ1LmNvLm56giJoZWFsdGh5ZmFt
aWxpZXNpbnZlcmNhcmdpbGwub3JnLm56ghJoaWdobGlnaHRjYW0uY28ubnqCEWhp
bGxzZWVrZXJzLmNvLm56ghRoaWxsc2Vla2VyczR3ZC5jby5ueoIRaHV0dGFpa2lk
by5vcmcubnqCGWludmVyY2FyZ2lsbG5ldGJhbGwuY28ubnqCC2tqY2Mub3JnLm56
gg1tYWdwaWVzLmNvLm56ghJtYXJpc3RydWdieS5vcmcubnqCEW1lcml2YWxlcGFw
LmNvLm56ghJtdHNxdWFzaGNsdWIuY28ubnqCE25lbHNvbm5ldGJhbGwuY28ubnqC
HG5ldGJhbGxzb3V0aGNhbnRlcmJ1cnkuY28ubnqCFW5vcnRoc2hvcmVydWdieS5j
by5ueoISbnpzc2Zvb3RiYWxsLmNvLm56ghlwYXBha3VyYXJ1Z2J5bGVhZ3VlLmNv
Lm56gg9waG90b2NhcmQuY28ubnqCE3JhbmdhdGlyYWdvbGYuY28ubnqCE3Nwb3J0
YXVja2xhbmQuY28ubnqCFHNwb3J0YXVja2xhbmQub3JnLm56ghFzcG9ydHNsaW5r
Lm9yZy5ueoISc3BvcnRzcG9ydGFsLmNvLm56gg1zcG9ydHkub3JnLm56ghF0b3Rh
bHRvdWNoLm9yZy5ueoIKdHVraS5jby5ueoIQdHVyYm90b3VjaC5jby5ueoIRdHVy
Ym90b3VjaC5vcmcubnqCGXdlbGxpbmd0b25zb2Z0YmFsbC5vcmcubnowEwYDVR0g
BAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQBIsONr2qZH
NA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY5OHNWWAAAEAwBGMEQCIGOOgZgR
kIOc1EGtsRwakImS9+hdkWcjSRKs/A5Br83oAiBhpCUXVjwmYlhFiVpVQFr2CviZ
BMzM9g8chmGdcOFNcQB2AKLiv9Ye3i8vB6DWTm03p9xlQ7DGtS6i2reK+Jpt9RfY
AAABjk4c1bAAAAQDAEcwRQIge77QmcjnmCBhYuPwq619aj34X8gcylo0Vhv4UNGN
IpcCIQCRoD9VBvMM7KcnoZ6J5xMdd8V9i2b0GC/W66A9zYXe5zANBgkqhkiG9w0B
AQsFAAOCAQEAdAZ7zhMxTOGsrKRFitMNxTA7BZ4nEG5Y4YUh9uhsRuEDdlUqL55s
XQQSfKJJGB5+s/yHg5NXHIz6wx5KJqRr1wJCDNxL6EQHJCkAn+cYqLn3jXV3JneJ
l70RdNifpwJNYCYRbHDQijZ6mcB+CB8s/59qB7U72ddiOeMEEAcM2XKAlnTxPSpR
bU4rIaI0EwpvDK9kmr27BJBFRoSN/jUj8fJP3SceivBw/sVnKdqudk6q9INnRw/I
KI/XzlFzM53XOq0/FkqPdDaI+Y3OUQnKsNHbyXJp5DN24cQP7h71fTBnsR++9qS/
rEkS5i9DMytrxORF0ui5UK/cdYfLrHt0SQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XhPl/Ny7losahRg7wkp
QNJyGiQXRDIHt7kxTVO1bv5y8Vtg6T+qZIOSC+qV627KyRPqh70HpuKmR864OXHG
dAA0jLH7ShehAQLTYzzaZoL6tTZTJNiReDnq98f4A8AQibHYVYj4CZ0cyABcF5sU
JPUez3Oqzdm/08qwlt6i2//IScMh+tSmJloPNhaqD6ulPogqqYdINrzN40+5nsSO
gTtA6c9wbMaklIR/J3oTJAcxOwI7sfEv03HeT3tsfr2FUJR55uO/ijCg1+og94hj
oYKz9CV+o2h0ZdOE2vfx6iGfAaOoxP+M55C9Nd41aXOA6CBkDV0/O3/zyv0WY5CP
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348574020945767647775992736392376233106370
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-17 19:31:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-15 19:31:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28967899359268239189092331396072685599583991321386209265466694406832403583169767040990204878155086009418965552215963429268656930488539475321610440724273973519071966716477256027546143923478362354092084844431334530143428206373220526196605663977743164257059828586975611952481178393890950133049787276261482784155015260802004705631169374728666822627684368102081533124677379731053947308061307144653595790755526909368171186441029984241935032057276013491237598074516512381628023630524286333283941451861668254033873390924451203928160106479134796973056526532240076903743417974452936428283231621869472790466191188230778943213489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ee292516af178f4700a8874a649c83ee640cb4b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1084 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akaranacityrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belfastrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburywaterpolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralcitybaseball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegesportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossrecreationcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edenrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastpitch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaxmillbaymotel.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodmanrural.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenislandbadmintonclub.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greertonmaristnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hampsteadclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelocknorthbridgeclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbayrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbmagpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbreds.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbru.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyfamiliesinvercargill.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlightcam.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillseekers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillseekers4wd.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huttaikido.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invercargillnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristrugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merivalepap.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballsouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northshorerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzssfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakurarugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photocard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangatiragolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportslink.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totaltouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonsoftball.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e4e1cd59600000403004630440220638e81981190839cd441adb11c1a908992f7e85d9167234912acfc0e41afcde8022061a42517563c26625845895a55405af60af89904ccccf60f1c86619d70e14d71007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e4e1cd5b0000004030047304502207bbed099c8e798206162e3f0abad7d6a3df85fc81cca5a34561bf850d18d229702210091a03f5506f30ceca727a19e89e7131d77c57d8b66f4182fd6eba03dcd85dee7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0074067bce13314ce1acaca4458ad30dc5303b059e27106e58e18521f6e86c46e10376552a2f9e6c5d04127ca249181e7eb3fc878393571c8cfac31e4a26a46bd702420cdc4be844072429009fe718a8b9f78d757726778997bd1174d89fa7024d6026116c70d08a367a99c07e081f2cff9f6a07b53bd9d76239e30410070cd972809674f13d2a516d4e2b21a234130a6f0caf649abdbb04904546848dfe3523f1f24fdd271e8af070fec56729daae764eaaf48367470fc8288fd7ce5173339dd73aad3f164a8f743688f98dce5109cab0d1dbc97269e43376e1c40fee1ef57d3067b11fbef6a4bfac4912e62f43332b6bc4e445d2e8b950afdc7587cbac7b7449