www.membermanager.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:72:41:3f:35:20:5e:c5:d7:48:56:a9:26:aa:21:1a:f8:e7 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.membermanager.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:72:41:3f:35:20:5e:c5:d7:48:56:a9:26:aa:21:1a:f8:e7
Serial Number (int): 387328061567988419607147513883295735281895
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 30:1d:c3:2f:3d:e9:21:5a:73:f6:a4:7a:08:2d:18:78:61:48:80:36
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 55:fe:f1:89:6f:0c:b3:8a:a2:67:5d:f9:22:c7:5c:9a:c4:b5:0c:cc
Fingerprint (sha256): 80:de:27:99:1b:db:14:f3:cf:5a:fc:09:06:f9:6e:05:4d:1e:d4:01:4f:e4:f4:86:45:c0:75:d5:9b:25:e5:2e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.membermanager.co.nz

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.membermanager.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sport.qmc.school.nz
www.akaranacityrifleclub.co.nz
www.badminton.org.nz
www.basketballhawkesbay.co.nz
www.bayofislandsdressagegroup.co.nz
www.baysathletics.co.nz
www.belfastnetball.co.nz
www.bowlsbop.co.nz
www.bowlswaikato.co.nz
www.canterburyunited.co.nz
www.cashmere.school.nz
www.christchurchmetrocricket.co.nz
www.christchurchmetrocricket.com
www.christchurchmetrocricket.org.nz
www.cliftoncricket.nz
www.cliftoncricketclub.co.nz
www.clubsnzdarts.co.nz
www.collegesportsportal.co.nz
www.countiesmanukaurugbyleague.co.nz
www.crossrecreationcentre.co.nz
www.ctfc.co.nz
www.cyclingsc.co.nz
www.darfieldcricket.co.nz
www.eden.rugby
www.fastpitch.co.nz
www.feildingfarmersmarket.co.nz
www.feildingfarmersmarket.net.nz
www.feildingfarmersmarket.org.nz
www.frasertechcricket.nz
www.glenfieldrugbyleague.co.nz
www.goodmanrural.co.nz
www.greenacrescountry.org.nz
www.halswellunitedfc.co.nz
www.hampsteadclub.co.nz
www.havelocknorth.rugby
www.hawkesbay.basketball
www.hawkesbaynetball.co.nz
www.hawkfootball.org.nz
www.hbbct.org.nz
www.hbbusinesshub.nz
www.hbnetball.co.nz
www.hbreds.nz
www.hbrugby.co.nz
www.healthyfamiliesinvercargill.org.nz
www.highlightcam.co.nz
www.hnwafc.org.nz
www.hockeymarlborough.org.nz
www.hockeywairarapa.org.nz
www.hokowhitubridge.org.nz
www.hsobburnside.co.nz
www.kapitisoftball.co.nz
www.kerikerimtbclub.co.nz
www.maristrugby.org.nz
www.marlinsnetball.co.nz
www.mcobsquash.co.nz
www.membermanager.co.nz
www.mooloo.co.nz
www.mooloocommunityrugby.co.nz
www.moonshinetrail.co.nz
www.morningtonbowlingclub.co.nz
www.mountsports.co.nz
www.mtsquashclub.co.nz
www.nzblackpowder.nz
www.otakisportsclub.co.nz
www.otumoetaifootball.co.nz
www.papakurarugbyleague.co.nz
www.photocard.co.nz
www.playsoftball.org.nz
www.ponsonbyrugby.co.nz
www.prebbletonfootball.co.nz
www.pukekohesoftball.co.nz
www.referees.co.nz
www.sailhbc.org.nz
www.schoolsport.nz
www.schoolsportnz.co.nz
www.schoolsportnz.org.nz
www.sharkssports.co.nz
www.sked.co.nz
www.southcanterbury.basketball
www.sportauckland.nz
www.sumnerbowls.co.nz
www.taradaleint.school.nz
www.tasmanvolley.org.nz
www.tepukeunitedfc.co.nz
www.trfu.co.nz
www.wahinetoamcc.nz
www.waimakunited.org.nz
www.westlandmotorcycleclub.co.nz
www.whangareinetball.co.nz
www.worldpowerlifting.nz

Other certificates including the domain name membermanager.co.nz

(limited to 100 certificates)
www.sportycrm.com
sportycrm.com
fdmc.school.nz
arrowtownrugby.co.nz
www.sportsground.com
www.sportsground.com
www.marlboroughtrampingclub.co.nz
www.membermanager.co.nz
www.membermanager.co.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
golfnorthland.co.nz
freyberg.ac.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.sporty.org.nz
www.ams.school.nz
www.skeggsfoundation.nz
cfc.co.nz
www.cfc.co.nz

Certificate

The complete raw certificate details for www.membermanager.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOcTCCDVmgAwIBAgISBHJBPzUgXsXXSFapJqohGvjnMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDQwNDE1NDhaFw0y
MDA2MDIwNDE1NDhaMCIxIDAeBgNVBAMTF3d3dy5tZW1iZXJtYW5hZ2VyLmNvLm56
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLH+sL2bF17OxjyB/sgT
mZb5jdw04HbBScryXZIm6Z5qfPCmxjKNqplCCulbX/bRNhsZJ8cE4DfD/6au53t8
FHtiE2lfpc4iZKYWrDDnndUIP7C34zZe4U2VeFsvITul67RZvehvIdHDNpfdNU8d
bxxlWqqJ6abZ0agJwA+MGfCImyCDKfAPpCBuNBWw5fmUOIUwkpvEgRm945guHszZ
hjiXyIr42Hn8Io4aZtRav8aaWFOew/a3m3m4slDaG9tEMN/hDlJdQ4FM0v/L5Kiu
MEdIHvjfVgJrmV6IbozaSsGF+Xbx+aMgAwrRySLIdofvTNaw0Y9rYFlhcZeJhnGR
sQIDAQABo4ILdzCCC3MwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQwHcMvPekhWnP2
pHoILRh4YUiANjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggr
BgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRz
ZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRz
ZW5jcnlwdC5vcmcvMIIJLAYDVR0RBIIJIzCCCR+CE3Nwb3J0LnFtYy5zY2hvb2wu
bnqCHnd3dy5ha2FyYW5hY2l0eXJpZmxlY2x1Yi5jby5ueoIUd3d3LmJhZG1pbnRv
bi5vcmcubnqCHXd3dy5iYXNrZXRiYWxsaGF3a2VzYmF5LmNvLm56giN3d3cuYmF5
b2Zpc2xhbmRzZHJlc3NhZ2Vncm91cC5jby5ueoIXd3d3LmJheXNhdGhsZXRpY3Mu
Y28ubnqCGHd3dy5iZWxmYXN0bmV0YmFsbC5jby5ueoISd3d3LmJvd2xzYm9wLmNv
Lm56ghZ3d3cuYm93bHN3YWlrYXRvLmNvLm56ghp3d3cuY2FudGVyYnVyeXVuaXRl
ZC5jby5ueoIWd3d3LmNhc2htZXJlLnNjaG9vbC5ueoIid3d3LmNocmlzdGNodXJj
aG1ldHJvY3JpY2tldC5jby5ueoIgd3d3LmNocmlzdGNodXJjaG1ldHJvY3JpY2tl
dC5jb22CI3d3dy5jaHJpc3RjaHVyY2htZXRyb2NyaWNrZXQub3JnLm56ghV3d3cu
Y2xpZnRvbmNyaWNrZXQubnqCHHd3dy5jbGlmdG9uY3JpY2tldGNsdWIuY28ubnqC
Fnd3dy5jbHVic256ZGFydHMuY28ubnqCHXd3dy5jb2xsZWdlc3BvcnRzcG9ydGFs
LmNvLm56giR3d3cuY291bnRpZXNtYW51a2F1cnVnYnlsZWFndWUuY28ubnqCH3d3
dy5jcm9zc3JlY3JlYXRpb25jZW50cmUuY28ubnqCDnd3dy5jdGZjLmNvLm56ghN3
d3cuY3ljbGluZ3NjLmNvLm56ghl3d3cuZGFyZmllbGRjcmlja2V0LmNvLm56gg53
d3cuZWRlbi5ydWdieYITd3d3LmZhc3RwaXRjaC5jby5ueoIfd3d3LmZlaWxkaW5n
ZmFybWVyc21hcmtldC5jby5ueoIgd3d3LmZlaWxkaW5nZmFybWVyc21hcmtldC5u
ZXQubnqCIHd3dy5mZWlsZGluZ2Zhcm1lcnNtYXJrZXQub3JnLm56ghh3d3cuZnJh
c2VydGVjaGNyaWNrZXQubnqCHnd3dy5nbGVuZmllbGRydWdieWxlYWd1ZS5jby5u
eoIWd3d3Lmdvb2RtYW5ydXJhbC5jby5ueoIcd3d3LmdyZWVuYWNyZXNjb3VudHJ5
Lm9yZy5ueoIad3d3LmhhbHN3ZWxsdW5pdGVkZmMuY28ubnqCF3d3dy5oYW1wc3Rl
YWRjbHViLmNvLm56ghd3d3cuaGF2ZWxvY2tub3J0aC5ydWdieYIYd3d3Lmhhd2tl
c2JheS5iYXNrZXRiYWxsghp3d3cuaGF3a2VzYmF5bmV0YmFsbC5jby5ueoIXd3d3
Lmhhd2tmb290YmFsbC5vcmcubnqCEHd3dy5oYmJjdC5vcmcubnqCFHd3dy5oYmJ1
c2luZXNzaHViLm56ghN3d3cuaGJuZXRiYWxsLmNvLm56gg13d3cuaGJyZWRzLm56
ghF3d3cuaGJydWdieS5jby5ueoImd3d3LmhlYWx0aHlmYW1pbGllc2ludmVyY2Fy
Z2lsbC5vcmcubnqCFnd3dy5oaWdobGlnaHRjYW0uY28ubnqCEXd3dy5obndhZmMu
b3JnLm56ghx3d3cuaG9ja2V5bWFybGJvcm91Z2gub3JnLm56ghp3d3cuaG9ja2V5
d2FpcmFyYXBhLm9yZy5ueoIad3d3Lmhva293aGl0dWJyaWRnZS5vcmcubnqCFnd3
dy5oc29iYnVybnNpZGUuY28ubnqCGHd3dy5rYXBpdGlzb2Z0YmFsbC5jby5ueoIZ
d3d3LmtlcmlrZXJpbXRiY2x1Yi5jby5ueoIWd3d3Lm1hcmlzdHJ1Z2J5Lm9yZy5u
eoIYd3d3Lm1hcmxpbnNuZXRiYWxsLmNvLm56ghR3d3cubWNvYnNxdWFzaC5jby5u
eoIXd3d3Lm1lbWJlcm1hbmFnZXIuY28ubnqCEHd3dy5tb29sb28uY28ubnqCHnd3
dy5tb29sb29jb21tdW5pdHlydWdieS5jby5ueoIYd3d3Lm1vb25zaGluZXRyYWls
LmNvLm56gh93d3cubW9ybmluZ3RvbmJvd2xpbmdjbHViLmNvLm56ghV3d3cubW91
bnRzcG9ydHMuY28ubnqCFnd3dy5tdHNxdWFzaGNsdWIuY28ubnqCFHd3dy5uemJs
YWNrcG93ZGVyLm56ghl3d3cub3Rha2lzcG9ydHNjbHViLmNvLm56ght3d3cub3R1
bW9ldGFpZm9vdGJhbGwuY28ubnqCHXd3dy5wYXBha3VyYXJ1Z2J5bGVhZ3VlLmNv
Lm56ghN3d3cucGhvdG9jYXJkLmNvLm56ghd3d3cucGxheXNvZnRiYWxsLm9yZy5u
eoIXd3d3LnBvbnNvbmJ5cnVnYnkuY28ubnqCHHd3dy5wcmViYmxldG9uZm9vdGJh
bGwuY28ubnqCGnd3dy5wdWtla29oZXNvZnRiYWxsLmNvLm56ghJ3d3cucmVmZXJl
ZXMuY28ubnqCEnd3dy5zYWlsaGJjLm9yZy5ueoISd3d3LnNjaG9vbHNwb3J0Lm56
ghd3d3cuc2Nob29sc3BvcnRuei5jby5ueoIYd3d3LnNjaG9vbHNwb3J0bnoub3Jn
Lm56ghZ3d3cuc2hhcmtzc3BvcnRzLmNvLm56gg53d3cuc2tlZC5jby5ueoIed3d3
LnNvdXRoY2FudGVyYnVyeS5iYXNrZXRiYWxsghR3d3cuc3BvcnRhdWNrbGFuZC5u
eoIVd3d3LnN1bW5lcmJvd2xzLmNvLm56ghl3d3cudGFyYWRhbGVpbnQuc2Nob29s
Lm56ghd3d3cudGFzbWFudm9sbGV5Lm9yZy5ueoIYd3d3LnRlcHVrZXVuaXRlZGZj
LmNvLm56gg53d3cudHJmdS5jby5ueoITd3d3LndhaGluZXRvYW1jYy5ueoIXd3d3
LndhaW1ha3VuaXRlZC5vcmcubnqCIHd3dy53ZXN0bGFuZG1vdG9yY3ljbGVjbHVi
LmNvLm56ghp3d3cud2hhbmdhcmVpbmV0YmFsbC5jby5ueoIYd3d3LndvcmxkcG93
ZXJsaWZ0aW5nLm56MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB
MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYK
KwYBBAHWeQIEAgSB9ASB8QDvAHYA5xLysDd+GmL7jskMYYTx6ns3y1YdESZb8+Dz
S/JBVG4AAAFwo/ivOgAABAMARzBFAiBDxKlGxrhsAhAr4o18hjPzSF3v+EQ5UcEx
EIJcSuCMTgIhAN23ecEbzE04DHsuZogxCAXmJZJ9ltmU9xZ4321UTcvxAHUAB7dc
G+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFwo/ivbAAABAMARjBEAiAf
chpnkMtKw42ma5fVgtrSO3uN1mtZrJdUn+4hAjF+UgIgax4VkYGQi0uLMoKKpD0I
fCPQASGiURUj8J4znk85SyQwDQYJKoZIhvcNAQELBQADggEBAFxEMSks8QfqyRTq
oz1si6xUiXCviPFSfR+0NwHZYEb7VB/dTakBl2bZO/8wWo78PdgZ0k+FYCdD6tnk
brj+6pmI8WqlHhbyOtzCGkM/MyZGlPdYbsnmDzj4nxX9sWOM0BkfPGV5F4VLg3mC
iczreYQGobZf1T5BVmqsge8tCA3A0uWqXQQMs510rZaBJ+jbOjKjhOhJRhpViTwd
lMUuJemYja8eqQwsRLlO6dlNlSuaoJ29IzlyCKK4WPk51SYkbhtShUQUmh0gfV98
FsUhNakBTF8hyo6HIopQCfZUtKL5O6VSwGth0OOrFodQsFF9AN0s4IzRm48KIWQk
01qimhg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLH+sL2bF17OxjyB/sgT
mZb5jdw04HbBScryXZIm6Z5qfPCmxjKNqplCCulbX/bRNhsZJ8cE4DfD/6au53t8
FHtiE2lfpc4iZKYWrDDnndUIP7C34zZe4U2VeFsvITul67RZvehvIdHDNpfdNU8d
bxxlWqqJ6abZ0agJwA+MGfCImyCDKfAPpCBuNBWw5fmUOIUwkpvEgRm945guHszZ
hjiXyIr42Hn8Io4aZtRav8aaWFOew/a3m3m4slDaG9tEMN/hDlJdQ4FM0v/L5Kiu
MEdIHvjfVgJrmV6IbozaSsGF+Xbx+aMgAwrRySLIdofvTNaw0Y9rYFlhcZeJhnGR
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 387328061567988419607147513883295735281895
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 04:15:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 04:15:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.membermanager.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22810667442690373658650909440670028191343329208930775153512349356830255663361925677203723256575668001875628013826708587078307782546677162576160672992809071944202694757750927107487127052412357222042132710833871326618749632846561668746552527076036805788258306680054637739281738610872844837696460522834928916500552390905089167157053240971890528635147023979572428976669367865708363467078079651048963551501618869781390868598052875388029131028203533046915520546191754407940927755540410237851633927232975874655907261289072317051468319759607717500095846104449859306510177826347314155877560702677820599669621160052762023662001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							301dc32f3de9215a73f6a47a082d187861488036
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2339 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport.qmc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akaranacityrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badminton.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basketballhawkesbay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayofislandsdressagegroup.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baysathletics.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belfastnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswaikato.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburyunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cashmere.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cliftoncricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cliftoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubsnzdarts.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegesportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countiesmanukaurugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crossrecreationcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cyclingsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darfieldcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eden.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fastpitch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feildingfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feildingfarmersmarket.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feildingfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frasertechcricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenfieldrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodmanrural.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenacrescountry.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halswellunitedfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hampsteadclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havelocknorth.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbay.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbaynetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbbct.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbbusinesshub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbreds.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthyfamiliesinvercargill.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highlightcam.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hnwafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeymarlborough.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeywairarapa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hokowhitubridge.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsobburnside.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kapitisoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kerikerimtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristrugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlinsnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcobsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.membermanager.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mooloo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mooloocommunityrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moonshinetrail.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morningtonbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzblackpowder.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otakisportsclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otumoetaifootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakurarugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photocard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ponsonbyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prebbletonfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pukekohesoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.referees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sailhbc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsport.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsportnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharkssports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sked.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcanterbury.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportauckland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sumnerbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taradaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasmanvolley.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tepukeunitedfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wahinetoamcc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waimakunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westlandmotorcycleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareinetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldpowerlifting.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170a3f8af3a0000040300473045022043c4a946c6b86c02102be28d7c8633f3485deff8443951c13110825c4ae08c4e022100ddb779c11bcc4d380c7b2e6688310805e625927d96d994f71678df6d544dcbf100750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170a3f8af6c000004030046304402201f721a6790cb4ac38da66b97d582dad23b7b8dd66b59ac97549fee2102317e5202206b1e159181908b4b8b32828aa43d087c23d00121a2511523f09e339e4f394b24
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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