www.matamataintermediate.school.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:bb:9a:79:6f:d5:86:3d:e9:6b:48:36:32:2d:55:08:12:93 was issued on by Let's Encrypt.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.matamataintermediate.school.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:bb:9a:79:6f:d5:86:3d:e9:6b:48:36:32:2d:55:08:12:93
Serial Number (int): 325174992057031602825048161797940194054803
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 71:39:af:bd:f2:bb:50:48:a2:37:26:d6:87:ab:10:1b:09:bc:4d:ef
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 75:3b:3d:fb:77:08:a6:c1:8c:d0:46:56:cb:84:ae:b6:60:a7:b4:79
Fingerprint (sha256): 7c:e1:9c:fc:24:cf:f0:03:37:48:85:e6:0f:c5:2b:d4:ca:38:9c:7b:c3:57:df:c6:a1:3c:42:64:d6:19:18:03

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.matamataintermediate.school.nz

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.matamataintermediate.school.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ashhurst.school.nz
awhitu.school.nz
birkdalenorth.school.nz
cannington.school.nz
cpanel.two.skoolsites.co.nz
dargavilleprimary.school.nz
foxton.school.nz
geraldine.school.nz
geraldineprimary.school.nz
glenavy.school.nz
glenmassey.school.nz
gorgeroad.school.nz
hillside.school.nz
hns.school.nz
horahoracambridge.school.nz
ilminster.school.nz
kahutara.school.nz
kamoprimary.school.nz
kingsgate.school.nz
knapdale.school.nz
lichfield.school.nz
mangatangi.school.nz
matamataintermediate.school.nz
matamataprimary.school.nz
mimi.school.nz
mmps.school.nz
mossburn.school.nz
ngaruawahia.school.nz
norsewood.school.nz
omarama.school.nz
ongarue.school.nz
oruaiti.school.nz
otaki.school.nz
pakurangaint.school.nz
pap-west.school.nz
peninsulaprimary.school.nz
two.skoolsites.co.nz
www.ashhurst.school.nz
www.awhitu.school.nz
www.birkdalenorth.school.nz
www.cannington.school.nz
www.dargavilleprimary.school.nz
www.foxton.school.nz
www.geraldine.school.nz
www.geraldineprimary.school.nz
www.glenavy.school.nz
www.glenmassey.school.nz
www.gorgeroad.school.nz
www.hillside.school.nz
www.hns.school.nz
www.horahoracambridge.school.nz
www.ilminster.school.nz
www.kahutara.school.nz
www.kamoprimary.school.nz
www.kingsgate.school.nz
www.knapdale.school.nz
www.lichfield.school.nz
www.mangatangi.school.nz
www.matamataintermediate.school.nz
www.matamataprimary.school.nz
www.mimi.school.nz
www.mmps.school.nz
www.mossburn.school.nz
www.ngaruawahia.school.nz
www.norsewood.school.nz
www.omarama.school.nz
www.ongarue.school.nz
www.oruaiti.school.nz
www.otaki.school.nz
www.pakurangaint.school.nz
www.pap-west.school.nz
www.peninsulaprimary.school.nz
www.two.skoolsites.co.nz

Other certificates including the domain name matamataintermediate.school.nz

(limited to 100 certificates)
skoolsites.co.nz
skoolsites.co.nz
*.ebbettpark.skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
www.firth.skoolsites.co.nz
skoolsites.co.nz
www.matamataintermediate.school.nz
skoolsites.co.nz
skoolsites.co.nz
www.matamataintermediate.school.nz
skoolsites.co.nz
skoolsites.co.nz
sni.cloudflaressl.com
skoolsites.co.nz
www.matamataintermediate.school.nz
skoolsites.co.nz
skoolsites.co.nz
www.matamataintermediate.school.nz
skoolsites.co.nz
www.matamataintermediate.school.nz
skoolsites.co.nz
mossburn.school.nz
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
www.matamataintermediate.school.nz
www.matamataintermediate.school.nz
birkdalenorth.school.nz
skoolsites.co.nz
www.lichfield.school.nz
skoolsites.co.nz
skoolsites.co.nz

Certificate

The complete raw certificate details for www.matamataintermediate.school.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILszCCCpugAwIBAgISA7uaeW/Vhj3pa0g2Mi1VCBKTMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA1MTAwMTQxMjNaFw0yNDA4MDgwMTQxMjJaMC0xKzApBgNVBAMT
Ind3dy5tYXRhbWF0YWludGVybWVkaWF0ZS5zY2hvb2wubnowggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQDreunzz9EME1kBRb4JdQORpWLkGShyqHg88wea
UfoHmmKpNIUMGjXoZwM78FAS9bP+OgURjEuaSpYMgRUxmGrcQd8PPetl7p0hQ3Vl
8B8CMTqo8SkFxzT7+G6OsWTAoJM14n9W1ETHC+jnVlvmr0xaELuz3oz2hgFL+kik
6S9vODbjrkFcf48BLqodZHuZtZd00Rcxy0efzcKkYl1N0rqqPZDEi3GXCtoCp4bj
yWHWuU1zDEgn3mXHS5dYhFgWKrPe1qZTwwu03HtKjU0HkXW9pf4/Ksh88Hd8GGfu
b+M+0P5BmO6uJAY2teRVJSKMX9JDZ1FSbniMx7UI7S8LNl/7AgMBAAGjggjGMIII
wjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFHE5r73yu1BIojcm1oerEBsJvE3vMB8G
A1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAh
BggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZo
dHRwOi8vcjMuaS5sZW5jci5vcmcvMIIGzgYDVR0RBIIGxTCCBsGCEmFzaGh1cnN0
LnNjaG9vbC5ueoIQYXdoaXR1LnNjaG9vbC5ueoIXYmlya2RhbGVub3J0aC5zY2hv
b2wubnqCFGNhbm5pbmd0b24uc2Nob29sLm56ghtjcGFuZWwudHdvLnNrb29sc2l0
ZXMuY28ubnqCG2RhcmdhdmlsbGVwcmltYXJ5LnNjaG9vbC5ueoIQZm94dG9uLnNj
aG9vbC5ueoITZ2VyYWxkaW5lLnNjaG9vbC5ueoIaZ2VyYWxkaW5lcHJpbWFyeS5z
Y2hvb2wubnqCEWdsZW5hdnkuc2Nob29sLm56ghRnbGVubWFzc2V5LnNjaG9vbC5u
eoITZ29yZ2Vyb2FkLnNjaG9vbC5ueoISaGlsbHNpZGUuc2Nob29sLm56gg1obnMu
c2Nob29sLm56ghtob3JhaG9yYWNhbWJyaWRnZS5zY2hvb2wubnqCE2lsbWluc3Rl
ci5zY2hvb2wubnqCEmthaHV0YXJhLnNjaG9vbC5ueoIVa2Ftb3ByaW1hcnkuc2No
b29sLm56ghNraW5nc2dhdGUuc2Nob29sLm56ghJrbmFwZGFsZS5zY2hvb2wubnqC
E2xpY2hmaWVsZC5zY2hvb2wubnqCFG1hbmdhdGFuZ2kuc2Nob29sLm56gh5tYXRh
bWF0YWludGVybWVkaWF0ZS5zY2hvb2wubnqCGW1hdGFtYXRhcHJpbWFyeS5zY2hv
b2wubnqCDm1pbWkuc2Nob29sLm56gg5tbXBzLnNjaG9vbC5ueoISbW9zc2J1cm4u
c2Nob29sLm56ghVuZ2FydWF3YWhpYS5zY2hvb2wubnqCE25vcnNld29vZC5zY2hv
b2wubnqCEW9tYXJhbWEuc2Nob29sLm56ghFvbmdhcnVlLnNjaG9vbC5ueoIRb3J1
YWl0aS5zY2hvb2wubnqCD290YWtpLnNjaG9vbC5ueoIWcGFrdXJhbmdhaW50LnNj
aG9vbC5ueoIScGFwLXdlc3Quc2Nob29sLm56ghpwZW5pbnN1bGFwcmltYXJ5LnNj
aG9vbC5ueoIUdHdvLnNrb29sc2l0ZXMuY28ubnqCFnd3dy5hc2hodXJzdC5zY2hv
b2wubnqCFHd3dy5hd2hpdHUuc2Nob29sLm56ght3d3cuYmlya2RhbGVub3J0aC5z
Y2hvb2wubnqCGHd3dy5jYW5uaW5ndG9uLnNjaG9vbC5ueoIfd3d3LmRhcmdhdmls
bGVwcmltYXJ5LnNjaG9vbC5ueoIUd3d3LmZveHRvbi5zY2hvb2wubnqCF3d3dy5n
ZXJhbGRpbmUuc2Nob29sLm56gh53d3cuZ2VyYWxkaW5lcHJpbWFyeS5zY2hvb2wu
bnqCFXd3dy5nbGVuYXZ5LnNjaG9vbC5ueoIYd3d3LmdsZW5tYXNzZXkuc2Nob29s
Lm56ghd3d3cuZ29yZ2Vyb2FkLnNjaG9vbC5ueoIWd3d3LmhpbGxzaWRlLnNjaG9v
bC5ueoIRd3d3Lmhucy5zY2hvb2wubnqCH3d3dy5ob3JhaG9yYWNhbWJyaWRnZS5z
Y2hvb2wubnqCF3d3dy5pbG1pbnN0ZXIuc2Nob29sLm56ghZ3d3cua2FodXRhcmEu
c2Nob29sLm56ghl3d3cua2Ftb3ByaW1hcnkuc2Nob29sLm56ghd3d3cua2luZ3Nn
YXRlLnNjaG9vbC5ueoIWd3d3LmtuYXBkYWxlLnNjaG9vbC5ueoIXd3d3LmxpY2hm
aWVsZC5zY2hvb2wubnqCGHd3dy5tYW5nYXRhbmdpLnNjaG9vbC5ueoIid3d3Lm1h
dGFtYXRhaW50ZXJtZWRpYXRlLnNjaG9vbC5ueoIdd3d3Lm1hdGFtYXRhcHJpbWFy
eS5zY2hvb2wubnqCEnd3dy5taW1pLnNjaG9vbC5ueoISd3d3Lm1tcHMuc2Nob29s
Lm56ghZ3d3cubW9zc2J1cm4uc2Nob29sLm56ghl3d3cubmdhcnVhd2FoaWEuc2No
b29sLm56ghd3d3cubm9yc2V3b29kLnNjaG9vbC5ueoIVd3d3Lm9tYXJhbWEuc2No
b29sLm56ghV3d3cub25nYXJ1ZS5zY2hvb2wubnqCFXd3dy5vcnVhaXRpLnNjaG9v
bC5ueoITd3d3Lm90YWtpLnNjaG9vbC5ueoIad3d3LnBha3VyYW5nYWludC5zY2hv
b2wubnqCFnd3dy5wYXAtd2VzdC5zY2hvb2wubnqCHnd3dy5wZW5pbnN1bGFwcmlt
YXJ5LnNjaG9vbC5ueoIYd3d3LnR3by5za29vbHNpdGVzLmNvLm56MBMGA1UdIAQM
MAowCAYGZ4EMAQIBMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYASLDja9qmRzQP
5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGPYGBspwAABAMARzBFAiAmA3Du3QZn
Vw1HQrOKeqDb+b4AjjJExz+5u67NXhma7AIhAJ+GT+T1CIENLYq3wbzPTa6Ut9aB
KLXtilxtIlTXHn0GAHUA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsA
AAGPYGBspAAABAMARjBEAiAA0hwgW01KRucqcLdke5VjerMJl+jdldHQNTmHQ+Rw
2AIgGqtZUX8FIwU5hmnHK7142cpZ12WfIXmsaNkplvh/naAwDQYJKoZIhvcNAQEL
BQADggEBACi+yiVA3N+VvKmKX8aU2oNbdAFWztBOPsBGa0OpQd2zbaPhVqSrRjNg
slSGuqOJuyY07ur+v6WJSon47VhyYJP1dWeqmUhT3l38ezakG9lfyklUswRx27OP
EumWTHtL49cWxM+OiSI2UX5ke2otBnbcuZ0doOK3U4JyNHVsXGnNMs3BUDJ/3sw0
6c8caovkUDMpozmjra44UPZh7rltQxx1bzSLg8/KvVP0hw/oYmAFqzGDwy7BU5vm
oGNpFUw28/vqTX2XWIHvMLD8u2wwBJJjwVILGgduo4CBN6UgqvJKFCi6u5Wg4wDV
y1fqO8sOFcBAMfDz7WHW1bNHlpAXA+w=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63rp88/RDBNZAUW+CXUD
kaVi5Bkocqh4PPMHmlH6B5piqTSFDBo16GcDO/BQEvWz/joFEYxLmkqWDIEVMZhq
3EHfDz3rZe6dIUN1ZfAfAjE6qPEpBcc0+/hujrFkwKCTNeJ/VtRExwvo51Zb5q9M
WhC7s96M9oYBS/pIpOkvbzg2465BXH+PAS6qHWR7mbWXdNEXMctHn83CpGJdTdK6
qj2QxItxlwraAqeG48lh1rlNcwxIJ95lx0uXWIRYFiqz3tamU8MLtNx7So1NB5F1
vaX+PyrIfPB3fBhn7m/jPtD+QZjuriQGNrXkVSUijF/SQ2dRUm54jMe1CO0vCzZf
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325174992057031602825048161797940194054803
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-10 01:41:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-08 01:41:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.matamataintermediate.school.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29726612758543375658326819151655763125426982796476599701838271640137200545018685126534742778012050885358263003586562438621512978129641750979420801815313964051638466126752282338401706999457773074965188556689671553583068191369768900105239148568989193643922926603755414634092341046337511626452062117463257650819342822663123954485933147850224353852529394575773499418754451885388609896939930085178029819097189472471658164157756917218538216341964784797968837418993366173995963324267301298357766691759540209722471556608261916902254433470831510843167236438384491979023166722314187954076585785905238929900538611148915673030651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7139afbdf2bb5048a23726d687ab101b09bc4def
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1733 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashhurst.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awhitu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birkdalenorth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.two.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dargavilleprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxton.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geraldine.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geraldineprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenavy.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenmassey.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gorgeroad.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillside.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hns.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horahoracambridge.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilminster.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kahutara.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamoprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingsgate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knapdale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lichfield.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mangatangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matamataintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matamataprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mimi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmps.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mossburn.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngaruawahia.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norsewood.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omarama.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ongarue.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oruaiti.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otaki.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pakurangaint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pap-west.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peninsulaprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'two.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashhurst.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awhitu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birkdalenorth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cannington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dargavilleprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foxton.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geraldine.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geraldineprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenavy.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenmassey.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gorgeroad.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillside.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hns.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.horahoracambridge.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilminster.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kahutara.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kamoprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingsgate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knapdale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lichfield.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mangatangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matamataintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matamataprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mimi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmps.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mossburn.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ngaruawahia.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norsewood.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omarama.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ongarue.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oruaiti.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otaki.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pakurangaint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pap-west.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peninsulaprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.two.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f60606ca700000403004730450220260370eedd0667570d4742b38a7aa0dbf9be008e3244c73fb9bbaecd5e199aec0221009f864fe4f508810d2d8ab7c1bccf4dae94b7d68128b5ed8a5c6d2254d71e7d06007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f60606ca40000040300463044022000d21c205b4d4a46e72a70b7647b95637ab30997e8dd95d1d035398743e470d802201aab59517f052305398669c72bbd78d9ca59d7659f2179ac68d92996f87f9da0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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