sportsground.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:96:2a:74:25:52:82:ea:b4:7f:65:53:67:3b:b0:77:ee:94 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sportsground.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:96:2a:74:25:52:82:ea:b4:7f:65:53:67:3b:b0:77:ee:94
Serial Number (int): 312435643472666447419620809814173397020308
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b5:c6:b5:0e:78:6e:bd:ae:01:10:e6:aa:ef:c3:95:7e:c5:01:47:7a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 40:59:38:f8:3a:18:38:dd:53:6d:c3:00:63:f0:97:6c:de:c0:02:3f
Fingerprint (sha256): 80:13:73:03:d5:08:ed:7d:58:3b:db:a4:f3:ab:80:97:71:36:47:6d:e2:76:00:04:3a:a4:d6:aa:1d:c6:b9:cc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sportsground.co.nz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sportsground.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

athleticswanganui.co.nz
aucklandbaseball.co.nz
aucklandfootball.org.nz
aucklandservicerifle.org.nz
baseballnewzealand.co.nz
baseballnewzealand.com
baseballnewzealand.org
baseballnz.com
bowlsdunedin.co.nz
bowlstaurangasouth.co.nz
bowlswestcoast.org.nz
businesshawkesbay.co.nz
cmsport.co.nz
collegerifles.co.nz
countiesbadminton.co.nz
dairyflattennis.co.nz
developyourlegacy.co.nz
diamondblacks.co.nz
diamondblacks.com
diamondblacks.org.nz
diamondsport.co.nz
diamondsportnz.co.nz
diamondsportnz.com
diamondsports.co.nz
diamondsportsnz.co.nz
diamondsportsnz.com
distanceridingnewzealand.co.nz
gameoftwohalfwits.com
ghryc.co.nz
glenfieldbowls.co.nz
hcwaterpolo.co.nz
hendersonsquash.co.nz
howicksailingclub.co.nz
hpbaseball.co.nz
hphawks.com
hrc.org.nz
kereru.school.nz
ladiessocialcycling.org.nz
linfield.co.nz
linwoodrugby.co.nz
linwoodrugby.com
lynnavon.org.nz
mahedrysdale.co.nz
mahedrysdale.com
makikihi.school.nz
manurewamets.co.nz
maoribasketball.co.nz
marlborough-touch.co.nz
meeanee.school.nz
mmcc.co.nz
motuekatouch.co.nz
mountfortwaterpolo.nz
myfootball.co.nz
myhockey.co.nz
mysoftball.co.nz
netballmanurewa.org.nz
newzealandbaseball.co.nz
nhbmx.org.nz
nscbaseball.co.nz
nzsra.org.nz
opotikicol.school.nz
orokohangamusictrust.co.nz
poolburn.school.nz
rosegardenscroquetclub.org.nz
royaloakracquets.co.nz
rugbysouthland.co.nz
rugbysouthlandreferees.co.nz
runwalkseries.co.nz
softballauckland.org.nz
southcanterburybasketball.co.nz
southernrugby.co.nz
southlandbmxclub.co.nz
southlandfestivalofrunning.co.nz
sportsground.co.nz
teeball.co.nz
tennismanawatu.org.nz
touchsouthland.co.nz
ulyssesnelson.org.nz
upperhuttrifleclub.co.nz
waikaregolfclub.co.nz
wairarapacarclub.org.nz
waitematarowing.org.nz
wellingtonbaseball.co.nz
wellingtonbaseballassociation.co.nz
westaucklandafc.co.nz
whangamatasurf.co.nz
whangareirowingclub.org.nz
whangaroasportfishingclub.co.nz
woolstonparkindoorbowls.org.nz

Other certificates including the domain name sportsground.co.nz

(limited to 100 certificates)
oratiaunited.co.nz
sporty.co.nz
sporty.co.nz
waibopfootball.co.nz
www.sportsground.co.nz
sportsground.co.nz
sporty.co.nz
www.katikatifc.co.nz
pcbasketballclub.co.nz
www.sportsground.co.nz
www.sportsground.co.nz
pcbasketballclub.co.nz
www.pkjsports.co.nz
sporty.co.nz
keirunga.org.nz
karakasportspark.co.nz
www.waitakerecityfc.org.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sportsground.co.nz
sportsground.co.nz
www.sportsground.com
maristinvercargill.co.nz
www.aucklandsoftball.org.nz
sporty.co.nz
sporty.co.nz
www.brooklyncroquetclub.org
www.thesalmonrun.nz
sporty.co.nz
www.schoolground.nz
maristinvercargill.co.nz
whangareirowingclub.org.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
keirunga.org.nz
www.unimountafc.org.nz
www.greenhithefootball.org
sportsground.co.nz
www.bowlswestcoast.org.nz

Certificate

The complete raw certificate details for sportsground.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj7Q7LmzXqI3bI1DAwcK
kdTjUmO7sDoYyBxEmbv/x9ABgbsic7qxm17ycaW8PbvsFvjrY/yscMlvWU4b/tp0
tHFLscL3qohj4vuOmCNIgQLzNaPZZtCPtLolQltQMJ1dVEn76mRlYbnA0EBVWCIf
m4QCV5X/vAzm7NPxQOXH8I2sTexr4WtD2kYeCv4ag9vgvnb2vRrnoMa3AiYvJ3Qb
G1SgQrZpxh1hQdXvyZheyHYbyYv/Ngbyq9pst3lGZbzt+hAC5xyqsW/H7Y/Axro0
IOQtRAkY/2uESzwUWgqh4lvL1hxKosAm8wZY2XgLfPCUKg6hMV2VEOqVRy5CvoJg
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312435643472666447419620809814173397020308
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-30 00:54:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-28 00:54:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sportsground.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24016253722931880705630055768716523319439008448595659085916662650628145502875316711336685998697001045023831066678045332570876451211540541810707735734821665772677156315799677980728056882787092768698391308171836626474215142099885812112615195996116532274126503068937417711916600039961705961460621911464840184146392138030716708175143445351159754712018289302365126580633027894905139963282604844097712372834998984733216629230303002716222401765069416581959756260257778281702762532791387271576692807640233562217723894294734373005067231606358603565057906926247436296626963805190764116431161262676967189860899645767131284529243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b5c6b50e786ebdae0110e6aaefc3957ec501477a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1991 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athleticswanganui.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandservicerifle.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnewzealand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnewzealand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlsdunedin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlstaurangasouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswestcoast.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesshawkesbay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegerifles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countiesbadminton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dairyflattennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developyourlegacy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondblacks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondblacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondblacks.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsportnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsportsnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsportsnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distanceridingnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameoftwohalfwits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghryc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenfieldbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcwaterpolo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hendersonsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howicksailingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hphawks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kereru.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladiessocialcycling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linfield.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linwoodrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linwoodrugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lynnavon.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahedrysdale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahedrysdale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makikihi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewamets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maoribasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlborough-touch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meeanee.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motuekatouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountfortwaterpolo.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballmanurewa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newzealandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhbmx.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nscbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opotikicol.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orokohangamusictrust.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poolburn.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosegardenscroquetclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaloakracquets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbysouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbysouthlandreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runwalkseries.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softballauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southcanterburybasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandbmxclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandfestivalofrunning.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teeball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tennismanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulyssesnelson.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upperhuttrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikaregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wairarapacarclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitematarowing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonbaseballassociation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westaucklandafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangamatasurf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareirowingclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangaroasportfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woolstonparkindoorbowls.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c4095ed960000040300483046022100bd0071961e9dc6274316f6e2243f0a30f062b6c347924219bbd6a07cf86ac71d022100cfc0985216cd349b3779d31eb222937e2bb7275f01d16138767d662b5b442840007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c4095ed5d0000040300483046022100dbc5f223e6d2d0a7fb785d13eb1b84cf5c0c122866a6eed26e1f04e7efb78ea6022100f3012d90021ec94eb4406866ceaf4491fb4e9916f2038ec65e618ad13b47ec30
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002a925652e72bbcb7c29cd28e0da52d75ed50b97caa93ee31916e96fefd3d9fcca7115e9af675e13d03ee2676c505c31e1d84382d5da8e1f56b9104ed27c7d5aba3b65e829ed22876d91f2dd9bf331c5e14b3c640924f2cb1b95db8fb3d0cd9e2b0a316a117d35ed32f32a2462e3ef54ed174b6e36add75db54ce22bdfb7c0057d54b0c5e2612e1c08e46e499fb2f27bc28d4dfb0e787bfd1e37802a48e4c93a4ec2c0d150f4ba235209675ee522de062a52426eae62709b824ced9e3378ccd753bd93131b395c2dd62f41e879a8a033c86e702d66aa0c5acfb0316bcb5f16445cf6948360c10aa4f33e9b594600327ff66957da00bf7acef7f1551661e74571e